July 22, 2020 By jason-mcalpin 2 min read

Enterprises are embracing cloud technologies to drive innovation, modernize their IT infrastructure, and ultimately, digitize their business.

When it comes to hosting sensitive and regulated workloads on the public cloud, enterprises (particularly those in highly regulated industries) are being forced to take a hard look at their approach to managing security and compliance—consistently and continuously.

According to a recent Gartner study, the challenge is not whether the cloud is secure, but if it’s being used securely. The study points out that “99 percent of cloud security failures” will be based how customers are using cloud. When it comes to hosting regulated workloads, meeting regulatory compliance requirements are important. A Boston Consulting Group (BCG) report—Global Risk 2017: Staying the Course in Banking—indicates that between 2009 and 2017, there was an estimated $321B in penalties paid by the banks for not meeting regulations. In order to effectively manage their risk and compliance, enterprises need to define the set of cloud native security controls that they want their teams to implement. More importantly, they have to ensure that those controls are in place and that their workloads are properly configured to meet those security controls.

While enterprises are aware of this problem, the challenge is often the effort required to consistently verify and ensure that the right configurations and controls are in place—particularly in an IT environment that is rapidly growing and continuously changing. Manual audits and checks simply do not scale for this, making it imperative that enterprises adopt automation to consistently apply security controls and continuously monitor their security and compliance posture.

Read the full blog post to learn about how we have taken an end-to-end view of managing security and compliance—all the way from factoring in regulatory requirements and enterprise risk controls, to achieving those control objectives for workloads on IBM public cloud.

More from Announcements

IBM Hybrid Cloud Mesh and Red Hat Service Interconnect: A new era of app-centric connectivity 

2 min read - To meet customer demands, applications are expected to be performing at their best at all times. Simultaneously, applications need to be flexible and cost effective, and therefore supported by an underlying infrastructure that is equally reliant, performant and secure as the applications themselves.   Easier said than done. According to EMA's 2024 Network Management Megatrends report only 42% of responding IT professionals would rate their network operations as successful.   In this era of hyper-distributed infrastructure where our users, apps, and data…

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

3 min read - Security operations is getting more complex and inefficient with too many tools, too much data and simply too much to do. According to a study done by IBM, SOC team members are only able to handle half of the alerts that they should be reviewing in a typical workday. This potentially leads to missing the important alerts that are critical to an organization's security. Thus, choosing the right SIEM solution can be transformative for security teams, helping them manage alerts…

IBM and MuleSoft expand global relationship to accelerate modernization on IBM Power 

2 min read - As companies undergo digital transformation, they rely on APIs as the backbone for providing new services and customer experiences. While APIs can simplify application development and deliver integrated solutions, IT shops must have a robust solution to effectively manage and govern them to ensure that response times and costs are kept low for all applications. Many customers use Salesforce’s MuleSoft, named a leader by Gartner® in full lifecycle API management for seven consecutive times, to manage and secure APIs across…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters