{"id":2469,"date":"2018-10-22T11:00:55","date_gmt":"2018-10-22T11:00:55","guid":{"rendered":"https:\/\/devbloglavaprotocols.nityo.in\/what-you-need-to-know-about-security-before-migrating-to-the-cloud\/"},"modified":"2018-10-22T11:00:55","modified_gmt":"2018-10-22T11:00:55","slug":"what-you-need-to-know-about-security-before-migrating-to-the-cloud","status":"publish","type":"post","link":"https:\/\/www.lavaprotocols.com\/the-cloud-blog\/what-you-need-to-know-about-security-before-migrating-to-the-cloud\/","title":{"rendered":"What You Need to Know about Security Before Migrating to the Cloud"},"content":{"rendered":"
<\/div>
\n By Maya Kaczorowski, Product Manager, Google Cloud<\/strong><\/em>\n<\/div>\n

<\/p>\n

<\/div>\n
\n
\n
\n
\n
\n

Earlier this year, McKinsey released a report titled \u201cMaking a secure transition to the public cloud<\/a>,\u201d the result of interviews with IT security experts from nearly 100 enterprises around the world.<\/p>\n

Leveraging the expertise of Google Cloud and McKinsey security experts, the research presents a strategic framework for IT security on cloud and hybrid environments, and provides recommendations on how to migrate to the cloud<\/a> while keeping security<\/a> top of mind.<\/p>\n

The research shows what many already know: that public cloud adoption<\/a> is accelerating thanks to increased technical flexibility, simpler scaling, and lower operating costs.<\/p>\n

What\u2019s exciting is that the research also reveals that many Chief Information Security Officers (CISOs) no longer view security as an inhibitor to adoption but instead an opportunity\u2014\u201cIn many cases [CISOs] acknowledge that cloud service providers\u2019 security resources dwarf their own,\u201d the authors write\u2014and now these companies are focused on how to best adopt and configure cloud services for increased security.<\/p>\n

\u00a0<\/p>\n

When implemented properly, public-cloud adoption can significantly reduce the total cost of ownership (TCO) for IT security.<\/strong><\/h3>\n

This requires enterprises, cloud providers, and third-party service providers to work together collaboratively and transparently within a shared security model.<\/p>\n

Google Cloud has long believed in creating trust through transparency, previously releasing a detailed overview of its\u00a0infrastructure security<\/a>, explaining\u00a0their shared responsibility model<\/a>, and how they already protect users and customers at the lower layers of the stack\u2014and Google is thrilled to see McKinsey\u2019s detailed endorsement of the same approach.
<\/strong><\/p>\n

Related<\/strong>:\u00a0Cloud Security: So are we secured (or not)?<\/a><\/p>\n

\u00a0<\/p>\n

Common security approaches, and their trade-offs<\/strong>.<\/h3>\n

Every company has different IT needs, but the report found two common security decisions companies take when adopting cloud services:<\/p>\n

(1) defining the perimeter, and<\/p>\n

(2) deciding whether to re-architect applications for greater manageability, performance, and security on the cloud (interestingly, only 27% of companies surveyed actually do this\u2014change is hard).<\/p>\n

The research identifies three common archetypes for perimeter security: backhauling, cleansheeting, and adopting cloud provider controls by default.<\/p>\n