Cloud Security Perspectives and Insights

Why Managed Security Services for a Hybrid Environment?

Greg Jensen
Sr Principal Director - Security - Cloud Business Group

Authored By: Christina Richmond, IDC Program VP WW Security Services for Oracle

As discussed in previous blogs, the market is increasingly willing to move to the cloud. In fact, adoption is reaching an inflection point, with 80% of cloud budgets focusing above and beyond the cloud infrastructure (now only 20% of budget) to engage adjacent emerging services for cloud acceleration and enhanced management.1 However, obstacles still exist: inconsistent cloud configuration leaves security vulnerability gaps; detection, response and remediation visibility in the cloud environment is difficult—and hybrid IT multiplies this difficulty many times.

Many more challenges exist which have been discussed in an earlier blog, Today's Threat Landscape and How to Tackle It, to which organizations are finding solutions in managed security services (MSS).                                    

Source: IDC Managed CloudView September 2018

As you can see in the above graphic, drivers of managed cloud security adoption are many, ranging from the inability to keep pace with the rapid evolution of security technologies, lack of resources and talent, the need to lower cost and re-focus the business to core initiatives, and the desire for access to new security capabilities. But the most significant of these is the need for support across multiple types of delivery models, or what is commonly called “hybrid IT.” Hybrid IT is a mix of on-premises and public and/or private cloud workloads. An ideal future hybrid IT state, according to 400 enterprises in the U.S., would be roughly 25% in the public cloud, 48% in a private cloud and 27% non-cloud or on-premises, shown in the below graphic.2Source: IDC's Cloud and AI Adoption Survey, 2018

We all know that the security perimeter is a thing of the past. And we know that hybrid IT complicates all aspects of securing an organization’s data. Today’s security challenges are widely known but solutions are still evolving. In any massive transformation era such as the digital transformation of today we see increased need for professional services to help the organization get a grasp on strategy, policies, architecture design. And these services are in full use today.

Adoption of managed security services, once an ROI-based decision swapping capex for opex cost, is now an imminent necessity if for no other reason than to provide visibility. When we double-click into the most significant of drivers of MSS in cloud and hybrid IT, we discover specific vulnerabilities that haunt the security team managing hybrid environments. Six of the 11 attacks and/or vulnerabilities are called out by over 40% of respondents in the below graphic as areas requiring additional support because they occur across multiple delivery models such as private, public, and hybrid workloads.


Source: IDC Managed CloudView September 2018

We can’t protect what we can’t see. We can’t thwart what lurks in the shadows, and we can’t respond if we don’t know what and where the danger is. Hybrid IT magnifies the challenge of finding, tracking, and combating an adversary that is better funded and faster than most IT departments.

Many managed security services providers tout the drivers listed above, but MSSPs that focus on providing visibility into and security of the hybrid environment provide organizations with a 360-degree view into their full architecture across all workloads no matter where they reside. In addition, they bolster the agility of the enterprise as it transforms itself into a digital company. Finally, these services can consolidate the “eyes on screen” of a security operations center (SOC) team, which today typically works across multiple platforms for the same insights. This in turn naturally saves time and expense.

Please be sure to check back to read the next blog in our series on “Securing your data in the cloud using MSS.” To learn more about Oracle Managed Security Services and how MSS can help you, visit our website.


Additional Source:
1, 2. IDC’s Cloud and AI Adoption Survey, January 2018
3. IDC Managed CloudView September 2018


Join the discussion

Comments ( 1 )
  • Kris Kumar Thursday, October 4, 2018
    Well articulated and thought provoking article
Please enter your name.Please provide a valid email address.Please enter a comment.CAPTCHA challenge response provided was incorrect. Please try again.