Case Study
How to Optimize Security Operations in the Cloud Through the Lens of the NIST Framework
Introduction The use of cloud services by businesses and government agencies has grown rapidly, with the movement of production workloads to infrastructure as a service (IaaS) growing at more than 35 percent per year. 1 This move to cloud-based services has required security programs to extend operations beyond the data center and to re-evaluate security architectures, processes and controls to maintain effectiveness and efficiency in their efforts to secure their sensitive business applications, be they local or cloud-based. Some common success factors have emerged from enterprise cloud use cases where security has been maintained and even improved while moving critical services to IaaS: • Integrate security services available from cloud service providers with third- party securi