{"id":18826,"date":"2022-06-16T16:17:13","date_gmt":"2022-06-16T10:47:13","guid":{"rendered":"https:\/\/www.varutra.com\/?p=18826"},"modified":"2022-12-02T09:47:14","modified_gmt":"2022-12-02T04:17:14","slug":"how-does-the-shared-responsibility-model-for-cloud-impacts-your-security-posture","status":"publish","type":"post","link":"https:\/\/www.varutra.com\/varutravrt3\/how-does-the-shared-responsibility-model-for-cloud-impacts-your-security-posture\/","title":{"rendered":"How Does the Shared Responsibility Model for Cloud Impacts Your Security Posture?\u00a0"},"content":{"rendered":"


\nCOVID-19 has changed the dynamic of operating business globally by transforming the traditional workplace. Working from home with a virtual office setup is the new normal, and holding meetings via video conferencing tools to communicate. It makes cloud commuting more engaged, so the organizations need to focus on hardening their security. In the case of the public cloud, there will be a shared cloud security responsibility between the Cloud Service Provider (CSP) and the user\/ client (organization\/ individual). Security is an absolute necessity for owners’ network controls, data classifications, and physical security. This division of responsibility for providing security to the cloud is known as the Shared Responsibility Model for cloud security.<\/span>\u00a0<\/span><\/p>\n

Definition of Shared Responsibility Model<\/span><\/b>\u00a0<\/span><\/h2>\n

The Shared Responsibility Model is considered a fundamental concept of cloud computing. Whether you are using SaaS, IaaS, or PaaS, it is an essential part of the mix as it states where the roles and responsibilities of cloud providers end and clients begin. Organizations can only fully utilize the benefits of cloud migration when they understand and execute this model properly for securing the data.\u202f<\/span>\u00a0<\/span><\/p>\n

Regarding roles and responsibilities, the cloud provider and client (organization) have designated roles to fulfill. As for cloud providers, they are responsible for securing the infrastructure they provide. It includes securing the data center, virtual platform, and network. The cloud provider also needs to monitor the system assigned to them for any security events while the client (organization) is responsible for securing their data application. It includes data encryption, control access, designing, and secure application integration. The client also needs to monitor the system assigned to them for any security events.\u202f<\/span>\u00a0<\/span><\/p>\n

As per the cloud service the client is using, like IaaS (Infrastructure as a Service), SaaS (Software as a Service), or PaaS (Platform as a Service), the Shared Responsibility Model may differ. It is said that approximately one-third of the organization’s critical applications use SaaS, IaaS, or PaaS instead of on-premises infrastructure. According to Gartner’s report, the market for IaaS has grown approx. 40% in 2020.<\/span>\u00a0<\/span><\/p>\n

\"Figure<\/span><\/p>\n

Source: Microsoft<\/span><\/i>\u00a0<\/span><\/p>\n

PaaS (Platform as a Service)<\/span><\/b>\u00a0<\/span><\/h3>\n

PaaS provides cloud platform service. It can also be said that it gives developers a platform or framework and tools to design apps or software. In addition, it offers its clients more access to servers, networks, and storage.<\/span>\u00a0<\/span><\/p>\n

IaaS (Infrastructure as a Service)<\/span><\/b>\u00a0<\/span><\/h3>\n

IaaS is a cloud infrastructure service that allows organizations to directly purchase the resources rather than investing in them and maintaining their infrastructure.<\/span>\u00a0<\/span><\/p>\n

SaaS (Software as a Service)<\/span><\/b>\u00a0<\/span><\/h3>\n

SaaS is a cloud application service, one of the most popular services in the cloud industry. It allows people to access software or application through the internet via subscription. They are designed so that people can use them from anywhere and anytime, eliminating the additional downloading and installation.\u202f<\/span>\u00a0<\/span><\/p>\n

SaaS primarily assigns most of the responsibilities to the cloud service provider rather than its client. In contrast to PaaS and IaaS, the client has to take more responsibility, and the burden of the cloud provider is lessened relatively.<\/span>\u00a0<\/span><\/p>\n

Mitigation of Cyber-Attacks & Best Practices<\/span><\/b>\u00a0<\/span><\/h2>\n

\u202fIt is essential that an organization for proper cyber hygiene as it is the first step towards cybersecurity. In addition, various\u202f<\/span>cloud security services<\/span><\/a>\u202fwill help the organization improve its defense against multiple cloud threats and risks.\u202f<\/span>\u00a0<\/span><\/p>\n

Varutra<\/span><\/a> offers cloud security services like Cloud <\/span>Vulnerability Assessment<\/span><\/a>, Penetration Testing Services for application and information systems in the cloud, and Cloud Security Audit, which determines the security and effectiveness of the controls.\u202f<\/span>\u00a0<\/span><\/p>\n

Here are some <\/span>best practices<\/span><\/a> that an organization should follow while practicing the Shared Responsibility Model. This way, they can keep their data and resources secure in the cloud.<\/span>\u00a0<\/span><\/p>\n