Do you roll-out CASB deployment to all users or only selective more-sensitive users (eg VIPs)?

Cloud Security & GRC

Only senior management37%

All senior officers and above39%

Everyone22%

832 PARTICIPANTS

6.3k views1 Upvote5 Comments

Sort by:

Director of IT in Education3 years ago

I believe CASB should be used for monitoring all users. Any thoughts from anyone, what is the rationale for only roll out CASB for selected users?

Former Chief Technology and People Officer in Software5 years ago

Everyone!

2

CTO in Software5 years ago

"If it's not for everyone, it's for no one" as then you still have (smaller) shadows

Senior IT Executive in Education6 years ago

Not that it's right, but we are testing with senior management

Director Certifications in Education6 years ago

Almost every organization should have CASB for data protection.

Content you might like

Which cybersecurity metrics do you currently use with your board?

Read More Comments

Does someone have advice on how they have balanced the risk/reward as it relates to introducing Open-Source Software to organization? My org is dipping its toe into the OSS world and the architecture and risk governance teams are looking to get ahead of these requests by coming up with policies and standards for OSS technology being brought into our environment. To clarify, this is not for software development and CI/CD pipelines, SDLC etc. This is for installing solutions that already exist out there (Zabbix, GreyLog, Prometheus etc.) into the organization's environment. We are looking to provide a balance on the obvious risk with the ability to move fast (like everyone else now).

What are the biggest technical challenges preventing organizations from being able to use their existing data to enable digital transformation?

Finding data and putting it to good use13%

Controlling the security and privacy of data45%

Understanding how data is currently being used20%

All of the above19%

None of the above1%

View Results

We are considering a scanning solution for detecting Personal Information (PI) in our data assets, mainly AWS S3, DynamoDB, Salesforce, etc. We need the solution to detect PI, identify the type (e.g., infotype), and optionally map it to our own PI categories. We are currently considering BigID. Do you have experience with this tool or any other tools that can help us scan across different data platforms and technologies?

Read More Comments

What's your most indispensable cloud infrastructure tools to use in addition to what you get from GCP, AWS, Azure?

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results

Do you roll-out CASB deployment to all users or only selective more-sensitive users (eg VIPs)? | Gartner Peer Community