If your org’s deployed private cloud, has it improved compliance or security? What results are you seeing so far?

Security & GRCPrivate Cloud
1.1k viewscircle icon1 Upvotecircle icon2 Comments
Sort by:
IT Strategist in Government2 years ago

Yes, it did, as data sovereignty is a baseline requirement for our organization. However, moving forward, we expect to see much better compliance of public cloud providers to these requirements.   

Senior Director Engineering in Travel and Hospitality2 years ago

Like many industry reports, most cloud service providers invest a lot more on security than other private applications. But if you leave the door of a safe locker open, you are prone to a potential mess!! 
So far security is always first - private or public cloud

Content you might like

Are CISA's current recommendations for preventing Maui ransomware attacks sufficient?

Yes, if followed correctly.39%

Unsure38%

No, there is still a significant risk.19%

Other (please tell us in the comments)3%

View Results

What's your most indispensable cloud infrastructure tools to use in addition to what you get from GCP, AWS, Azure?

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results

Which vendor solutions are being considered to "read, identify and redact information" in unstructured data sets? I'm specifically looking at solutions that can mask / redact or hide content within documents, that allow documents to be consumed but certain piece of information to be hidden.

We are considering a scanning solution for detecting Personal Information (PI) in our data assets, mainly AWS S3, DynamoDB, Salesforce, etc. We need the solution to detect PI, identify the type (e.g., infotype), and optionally map it to our own PI categories. We are currently considering BigID. Do you have experience with this tool or any other tools that can help us scan across different data platforms and technologies?

Read More Comments

We implemented Oracle HCM recently including Redwood.  Defining the long term plan for support, we face challenges with our Oracle Security knowledge depth specifically (defining and maintaining roles/ SOD/ SOX etc). Is there anyone who has experience in setting this up after a successful Oracle HCM plus Redwood implementation and would like to share best practices with me?