Intro to CASBs and the CASB market

1. CASBs:
A Primer on
Securing Your Cloud
Environment
Webinar
March 29

2. 2
Today’s Speakers
Mike Schuricht
VP, Products
Bitglass
mike@bitglass.com
Rik Turner
Analyst
Ovum
rik.turner@ovum.com

3. Ovum | TMT intelligence | informa3 Copyright © Informa PLC
Agenda
1. What is a Cloud Access Security Broker (CASB)?
2. What Drove the Development of CASB?
3. The Net Result
4. Enter CASB
5. Beyond Visibility – “CASB 2.0”
6. Technical Approaches
7. What Happens Next?

4. Ovum | TMT intelligence | informa4 Copyright © Informa PLC
What is CASB?

5. Ovum | TMT intelligence | informa5 Copyright © Informa PLC
What is CASB?
SaaS
application
CLOUD ACCESS
SECURITY BROKER

6. Ovum | TMT intelligence | informa6 Copyright © Informa PLC
What Drove the Development of
CASB?

7. Ovum | TMT intelligence | informa7 Copyright © Informa PLC
What Drove the Development of CASB?
1. The Explosion in SaaS
From the situation circa 2000…

8. Ovum | TMT intelligence | informa8 Copyright © Informa PLC
What Drove the Development of CASB?
…to today’s cornucopia

9. Ovum | TMT intelligence | informa9 Copyright © Informa PLC
What Drove the Development of CASB?
2. The work-from-
anywhere trend…
making it even more
difficult for IT to track
and manage

10. Ovum | TMT intelligence | informa10 Copyright © Informa PLC
Poll Question 1
• Poll Question 1
○ Where are you in the adoption of cloud apps?
■ 1
■ 2-5
■ 5-10
■ 10+

11. Ovum | TMT intelligence | informa11 Copyright © Informa PLC
The Net Result

12. Ovum | TMT intelligence | informa12 Copyright © Informa PLC
The Net Result
Corporate IT lack visibility into what apps
are in use by employees
Security and compliance issues
Urgent need to restore visibility and
control to corporate IT

13. Ovum | TMT intelligence | informa13 Copyright © Informa PLC
Enter CASB

14. Ovum | TMT intelligence | informa14 Copyright © Informa PLC
Enter CASB
The Restorer of Corporate IT’s Visibility into
Application Use and Employee Activity

15. Ovum | TMT intelligence | informa15 Copyright © Informa PLC
Enter CASB
SaaS
application
CLOUD ACCESS
SECURITY BROKER

16. Ovum | TMT intelligence | informa16 Copyright © Informa PLC
Beyond Visibility – “CASB 2.0”

17. Ovum | TMT intelligence | informa17 Copyright © Informa PLC
Beyond Visibility – “CASB 2.0”
CONTROL ACTIONS
• Read-only
• No forwarding
• No deletion
• No printing
• No downloading
• No copying
• Impose encryption

18. Ovum | TMT intelligence | informa18 Copyright © Informa PLC
Technical Approaches

19. Ovum | TMT intelligence | informa19 Copyright © Informa PLC
Technical Approaches
Proxy- or API-based CASBs?
vs

20. Ovum | TMT intelligence | informa20 Copyright © Informa PLC
Poll Question 2
• Poll Question 2
○ Where are you in your CASB journey?
■ Never heard about them before
■ Investigating vendors
■ Actively looking for the right vendor
■ Already purchased

21. Ovum | TMT intelligence | informa21 Copyright © Informa PLC
What comes next?

22. Unmanaged DevicesManaged Devices
Managed Apps: Zero-Day Control for Any App
Major SaaS Long-tail SaaS Internal Apps →
Threat
Protection
Data
Protection
VisibilityIdentity
Zero-Day CoreTM
● Contextual access control
● DLP w/ adv. remediation
● Field and file encryption
● Known & Zero-day malware
protection
● Account hijack protection
● Integrated Single Sign-On (SSO)
● Step-up multi-factor auth
● Session management
● UEBA
● Policy-based remediation
Proxy + API
Agentless ProxyAgent/Agentless Proxy
22

23. 23
Unmanaged Apps: Zero-Day Shadow IT Protection
Agent/DNS
Discover Shadow IT and Risks
Secure access to unmanaged apps
● Route traffic via agent or DNS setting on devices
● Automated Zero-Day identification of upload paths
○ Machine-learning tech inspects all upload traffic
○ Data-paths with natural language payloads identified
● Enforce DLP policy on data paths across all users
● No signatures required, works for all apps - Facebook,
Linkedin, Dropbox...
Zero-Day
upload DLP

24. Over 900 physicians; leading Bay Area non-profit
Challenges
■ Inadequate native O365 security
■ PHI leakage from unmanaged devices
■ First-Gen CASB and AirWatch failed to deploy
Solution
■ Distinguish between managed and unmanaged devices
■ Limit PHI access from risky unmanaged assets
■ Real-time DLP prevents data leakage on download
■ Readily deployable to all mobile devices, managed and
unmanaged

25. Over 20,000 students and 3,000 faculty members
Challenges
■ Cloud deployment met with security concerns around
intellectual property, research, and health data
■ Unmanaged device access controls
■ Compliance requirements including HIPAA and FERPA
Solution
■ Granular DLP policies to identify and secure PHI
■ Regular scans for zero-day malware in the cloud
■ Distinguish between managed and unmanaged devices
■ Technical safeguards for HIPAA compliance at Feinberg
School of Medicine

26. Agentless deployment,
any device
Real-time data protection,
anywhere
Zero-day security,
any app or workload
Only Bitglass
26
Global enterprise success via
sustained innovation and scale

27. Ovum | TMT intelligence | informa27 Copyright © Informa PLC
Thank you!
rik.turner@ovum.com
mike@bitglass.com