The private keys of the code-signing certificate can be stored in an HSM to eliminate the risks associated with stolen, corrupted, or misused keys.
GCP Data Protection – Strategy
continue
“Experts revealed that an unauthorized party compromised more than 200 million user records hosted somewhere within the U.S. in a Google Cloud database”
We address individual needs based on the evaluation report produced by our knowledgeable consultants. Following the comprehensive review, we provide you with an extensively detailed GCP Data Security Plan and Roadmap. We will develop the plan and roadmap with best practises and standards in mind, based on your current security environment and desired target state.
The GCP Cloud Data Protection Assessment Covers:
- Cloud Data Governance
- Cloud Data Discovery
- Data Leakage Protection
- Encryption and Tokenization
- Cloud Certificate Management
- Data Retention and Destruction
An Assessment Control Document, which is based on industry benchmark standards such as the Centre for Internet Security (CIE) standards, NIST, ISO 27001, and GDPR, is provided based on maturity in the above domains.
Along with the Risk Management Guide, the Assessment Control Document offers a high-level understanding of the current protection landscape and helps to clarify the uncertainty aspect and to comply with regulatory laws for protective controls.
Optimum Resource Allocation and Roadmap:
Few important parameters of a good strategy are – people availability and skill pool, process approach and technological constraints. Hence, we deliver a detailed capability matrix which is grouped by various cloud data protection mechanisms. This provides a perspective on the limitations and requirements for the desired level of maturity.
Data Protection Approach:
Our Data Protection Strategy is based on risk prioritization and timeline. Right from classification of data in GCP cloud to the protection of data in various layers through different mechanism such as encryption, DLP etc.
Other than service documentation we also provide a GCP workbook on Application Layer Transport Security (ALTS), Compute engine and Kubernetes, Google Cloud Partner Services, Firebase Realtime Database etc. so that these GCP native capabilities could be utilized in providing an efficient security to your data in support with other Data Protection technologies.
| Data – At Rest | Data – In Transit | Data – In Use |
|---|---|---|
| GCP Discovery | Authenticating Endpoints | Field – Level Encryption |
| AES256/AES128 Encryption (DB) | Cloud DLP | Application Layer Transport Security (ALTS) |
| Disk – Level Encryption | Network Traffic Encryption | Tokenization & Obfuscation |
Expected Outcome:
The GCP Cloud Data Protection Strategy would be formulated after the successful execution of Data Protection Assessment. Based on the assessment report, a strategy is developed to protect sensitive workloads while ensuring compliance with complex regulatory standards, frameworks and guidelines. An overview of the present GCP cloud Data Protection Environment will include gaps and best practises for GCP Protection in accordance with existing industry guidelines and global legislation priority guidance on improving security. Our industry-leading expertise would help you design “GCP Cloud Data Protection Strategy” through a well-researched assessment process across data protection domains for Data-At-Rest (DAR), Data-In-Motion (DIM) and Data-In-Use (DIU). An implementation manual is issued according to the strategy plan.
Trusted by
Previous
Next
Case Study
Encryption Consulting assisted a Healthcare and Life Science Company by reviewing current practices...
"Encryption Consulting created a roadmap for our organization after conducting the Assessment of our Encryption Environment which helped us remediate the high-risk area."
VP Data Protection, Airline Industry
Blog
Overview of AWS KMS and AWS CloudHSM
AWS has been architected to be one of the most flexible and secure cloud computing environments available.
Report
nCipher Global PKI and IoT Trends
According to the findings, the rapid growth in the use of IoT devices1 is having an impact on the use of PKI technologies and there is realization that PKI
Download Report
Know more