Government agencies have long considered teleworking options for their workforces, but security concerns frequently impeded progress. Now that millions of federal workers are working remotely, government managers need to ensure their remote workforce can securely advance the mission. To protect sensitive workloads and data, every cloud solution that enables remote delivery should leverage the principles of defense in depth.
Based on our experience supporting agencies in some of the more secure environments in government today, the following are the top five most important ways IT and program managers can ensure that all roads to, from and within their castle are protected even while supporting remote teams.
Minimize Data Exfiltration
One of the biggest concerns for any government organization or industry integrator is the unauthorized removal of data. Filtering based on location is not always feasible with a remote workforce, significantly increasing these challenges. This is why cloud-based solutions should not only have robust auditing capabilities to detect when exfiltration is attempted, they should also use secured network protocols—like those used in virtual desktop infrastructures—to prevent data exfiltration in the first place.
Facilitate Activity Visibility and Correlation
Due to the on-demand and fluid nature of cloud-based resources, federal agency environments need to facilitate visibility of user operations and system behaviors. Event logging pipelines that perform extraction, transformation and loading can tap into all corners of the environment and track all activities within a system to give the security team full visibility. Gathering data from multiple sources throughout the environment also enables correlation of activities to better identify threats and incidents. When the security team can easily view networking, application and host-level logs all together, they gain a much clearer picture about events that are transpiring and can quickly investi ..
Support the originator by clicking the read the rest link below.
