- [Instructor] It's important to understand
cloud management as well as agility
in selecting your cloud services.
This video will take a deeper look
at how to select cloud security services step-by-step.
There's a trade off of risk management versus agility.
When considering cloud security,
the ideal is to maximize risk management,
as well as maximize agility.
Typically, the more advanced our security tools are,
the more you'll be able to manage risks better
as well as be able to change around
using the tool or agility.
For example, the use of IAM or Identity Access Management
provides you with the ability to leverage security
using identities of humans, applications, data, et cetera,
and thus allows you to configure your security solution
in the ways that will work best for the business.
The idea is to advance through the notion
of security program maturity through five basic steps
or maturity levels.
Basic means that you're leveraging
the fundamentals of cloud security,
including user ID and passwords.
Layered tools, meaning that you're adding more tools
to include directory management, which may enable IAM,
in other words, more mature tools.
While the tools don't work together,
they are additive considering complimentary functions.
Integrated tools, meaning that the tools work together
such as tools that share directory services
and manage identities for cloud security.
Proactive, meaning that the security tools
are not just reacting to issues such as breaches,
but work to avoid breaches.
For example, updating operating systems automatically
to avoid vulnerabilities.
Finally, predictive, which is the most mature
in cloud security types of services.
Here is where we're able to work
beyond just being proactive,
but actually provide predictions
as to when security events are likely to occur
and how to avoid them.
The idea is to get to a state called minimum viable security
where we have enough security services in place
to meet our business requirements.
This is considered optimized
because we're only spending money to get us
to just the cloud security services that we need.
Moving to the next maturity level is an option.
However, we have to first consider
the business cases for doing so.
Selecting the right security technologies
is perhaps the most difficult part
of the cloud security deployment process.
However, it's worth taking your time learning all you can
and selecting the technology
that's going to provide the best chance for success.