(ISC)² Blog

Data Consistency Storage in the Cloud

In cloud computing environments, files are not stored in a hierarchical way. Most cloud architectures use a combination of splitting data vertically, horizontally and replication to improve response times, scalability, availability and fault tolerance. This is called object storage. Objects are accessible through APIs or through a web interface. Object storage introduces new challenges related to data consistency, which are not present in relational databases. One of the more fundamental decisions cloud professionals need to make is whether they will choose eventual consistency for data in corporate systems or strong consistency. Selecting a data consistency model is a decision that... Read more →

The Best Way to Start Your Cloud Security Career

Where do you begin your journey in InfoSec? What do you need to study? How do you even get started in a vast field with so many areas, and so many opportunities? These questions often haunt a new InfoSec candidate, sometimes causing them to freeze, doing nothing for fear of taking the wrong path. Everywhere you look, it is apparent that cloud computing is not only the future of Information Security, it is happening right now. If you are asking the question of where to begin, there is no better place to look than cloud security. Along with that, while... Read more →

Insider Threats Can Turn Your Cloud Security Into a Storm

Insiders can become a real threat to organizations migrating to the cloud because they do not have to breach any external security fences. Insider threats could either come in the form of a human error or as a malicious action. Human errors in cloud security configurations could result in sensitive data and asset disclosure, loss or theft. On the other hand, malicious insiders misuse authorized access to an organization’s cloud assets to overcome security controls and launch their malicious actions. Insiders are a growing risk to cloud security because insider attacks are hard to detect and respond to and they... Read more →

Rookies Needed - Experience Required

Are Employer Demands Contributing to the Cybersecurity Skills Gap? You’ve seen the job posting. It starts, “Looking for a cybersecurity specialist. Must have a master’s degree, certifications and 10 years of experience,” followed by, “This is an entry-level position with non-compensated job shadowing requirements.” These unrealistic expectations are the obstacles many cybersecurity professionals face once they complete their studies and rigorous exams. It’s an unfair barrier to entry. Clearly, hiring a person to work in any department in any organization is a risk. It costs money to locate, attract, assess, interview, hire, onboard and train someone, and it’s many months... Read more →

CCSP vs. Symantec Certified Cloud Credentials: How Do They Compare?

The mounting cybersecurity challenges facing organizations worldwide show no sign of slowing. Not only the shortage of qualified cybersecurity staff but also the lack of security awareness and skills among employees remain the biggest concerns, according to the 2021 Cloud Security Report by Cybersecurity Insiders. Global need for cybersecurity experts specializing in cloud security is growing demand for certification. But with so many credentials out there, which most effectively demonstrates the broad knowledge and skills required to secure any cloud environment? Let’s compare three leading certifications: (ISC)² Certified Cloud Security Professional (CCSP) vs. Symantec Certified Specialist-Administration of Symantec Cloud Workload... Read more →

CCSP vs. Microsoft Certified: Azure Administrator Associate — How Does Vendor Focus Factor In?

Adoption and usage of the cloud is evolving to combine with technologies like artificial intelligence, the Internet of Things, 5G and more, according to Sid Nag, Research Vice President at Gartner. “In other words,” he says, “cloud will serve as the glue between many other technologies that CIOs want to use more of, allowing them to leapfrog into the next century as they address more complex and emerging use cases.” With cloud roles expanding and so many certifications out there, which option offers cybersecurity experts the flexibility to grow with the coming waves of opportunity? Let’s compare two popular options,... Read more →

The Threat of Insecure Interfaces and APIs

Application programming interfaces (APIs) allow applications to communicate with each other, simplifying software development. Developers add functionality from other existing solutions or build applications using services by third-party providers. APIs have become the drivers for businesses digital transformation initiatives opening up their apps and data to partners, suppliers and customers. Besides their increased applicability and benefits, APIs are often the source of security concerns and threats because businesses fail to secure them. Surveys have identified that authentication, vulnerabilities and visibility are the key pain points, enabling malicious actors to exploit insecure APIs and turn them into attack vectors. Despite the... Read more →

CCSP vs. EXIN Cloud Certifications: What are the Differences?

Worldwide end-user spending on public cloud services is forecast to grow 23.1% in 2021 to total $332.3 billion, up from $270 billion in 2020, according to the latest forecast from Gartner. Spending on cloud management and security services, specifically, is expected to grow 12% in the next year, from approximately $16 billion in 2021 to about $18 billion in 2022. Demand for cybersecurity experts specializing in cloud security is skyrocketing worldwide. But with so many cloud certifications out there, how do you know which one is right for you? (ISC)² Certified Cloud Security Professional specifically focuses on cloud security, testing... Read more →

What Is Different About Cloud Security?

The principles of data protection are the same whether your data is stored in a traditional, on-premises data center or in a cloud environment. What is different is the way that you apply those principles. Moving data to the cloud introduces novel cybersecurity risks, challenges, and the threat surface. This novelty requires a new approach to data security. Cloud security is the protection of data, applications, and infrastructures involved in cloud computing environments. Traditional security controls are not adequate to mitigate and protect against the new threats in cloud environments. Establishing and sustaining a robust and effective cloud security posture... Read more →

CCSP vs. CCNA and CCNP Data Center: What Are the Key Differences?

When asked how CISOs could better address the impact of the cybersecurity skills shortage, the most popular suggestion was to increase the overall commitment to training, according to The Life and Times of Cybersecurity Professionals report from Enterprise Strategy Group and the Information Systems Security Association. In fact, security professionals must continue developing their professional skills or put their organizations at a competitive disadvantage, according to 91 percent of respondents. But with so many training and certification options out there, which most effectively demonstrates the broad knowledge and skills required to secure cloud environments? Let’s compare three leading cybersecurity certifications:... Read more →

Overcoming the User Visibility Challenge

The use and processing of decentralized data stored in cloud platforms creates security challenges that require data protection strategies to evolve. That starts with achieving better visibility into what applications their employees are using, and how they are using them. User Activity Monitoring (UAM) solutions promise to identify and stop abnormal or anomalous user behavior, whether unintentional or malicious. As opposed to traditional indicators of compromise, indications of abuse help organizations to effectively detect, prioritize, and respond to areas of concern well before a data breach has occurred. Certified cloud security professionals can help their organizations establish and enforce visibility... Read more →

CCSP vs. AWS Cloud Certified: Which One for Cloud Security?

Organizations worldwide are facing new security challenges presented by cloud computing, as most legacy security tools fail to meet the requirements of dynamic, distributed, virtual cloud environments. In fact, 81% of organizations say traditional security solutions don’t work at all in cloud environments or have only limited functionality, according to the 2021 Cloud Security Report by Cybersecurity Insiders. To fill those gaps, global opportunities for cybersecurity professionals specializing in cloud security are many. But with so many certifications out there, which option most effectively demonstrates the broad knowledge and skills required to secure any cloud environment? Let’s compare three leading... Read more →

Ensuring Disaster Recovery and Business Continuity in the Cloud

Organizations are experiencing their fair share of ransomware attacks in the cloud. And the reality is, they aren’t always able to recover. Complexity in the cloud doesn’t just prolong recovery efforts. In some cases, it foils them completely. Companies must be able to recover from data destruction events to avoid potential business losses as well as civil penalties. The need for disaster recovery and business continuity has never been stronger. Here’s why and how you can bring cloud-based disaster recovery to the rescue. Read the full article. Want to learn more about CCSP? To learn more about how the CCSP... Read more →

CCSP vs. Professional Cloud Security Manager: How Do They Compare?

Cybersecurity isn’t only a national security issue making headlines almost daily — it’s at the top of the list of imperatives for organizations, public and private. In fact, a majority (73%) rate their security readiness only average or below average, according to the 2021 Cloud Security Report by Cybersecurity Insiders. And that unease extends to the cloud. Though cloud-based security solutions offer significant advantages, resistance to migrating to the cloud continues to exist. Those surveyed say staff expertise and training continues to rank as the highest barrier (53%) to cloud adoption. That realization is leading more enterprises and individuals to... Read more →

Is There Really a Shortage in Cloud Security Skills?

Is there a cloud security skills shortage? It depends on who you ask. Prior to the pandemic, the world was immersed in cloud technology – everyone, it seemed, had a migration strategy. Then the global lockdown happened. We collectively added a layer of priority to the cloud as tens of millions of people started to rely on it for work and communications in ways we hadn’t before. Cloud is a highly complex and continually evolving set of technologies and protocols. Finding team members with the right background is a challenge, making it seem like there’s a substantial shortage of skilled... Read more →

National Small Business Week: 10 Best Practices for Small Business Cybersecurity

A recent survey conducted by CNBC and Momentive found that 56% of small business owners are not concerned about being the victim of a cyberattack in the next year and that only 28% of them have a response plan in place in case of a cyberattack. This does not bode well for their longevity, as other industry data shows that 60% of small businesses that suffer a data breach will be out of business within six months. The high cost of remediation and the potential for reputational damage can be more than most small businesses can withstand. Many times, the... Read more →

Are You the Keymaster?

By Juan Asenjo, Ph.D., CISSP If you grew up in the 80s, you will remember the line: “Are you the keymaster?” from the original Ghostbusters movie. In the film, a malevolent force takes hold of Louis Tully - played by none other than Rick Moranis - to turn him into the keymaster that enables evil spirits to overtake numerous sites in New York. Fast-forward to the real world in 2021, and while we have not seen ghosts overrun our cities, what we have seen is a rapid proliferation of bad actors trying to besiege the defenses of virtual machines (VMs)... Read more →

Mastering Identity and Access Management in the Cloud

The migration of business services, apps and data in the cloud has blurred traditional corporate perimeter. Legacy security solutions, based on securing the perimeter, are no longer adequate to address cloud security challenges and risks. Businesses need to evolve their traditional identity and access management (IAM) program to safeguard the access to their cloud-based assets and data. Digital identities are the foundation of modern IAM and organizations need to establish strong authentication methods to protect these identities. Weak IAM policies result in identities and credentials being vulnerable and compromised. Attackers are leveraging these stolen and compromised credentials to infiltrate corporate... Read more →

CCSP Certification vs. CCAK Certificate: What Are the Distinctions?

Cloud security tops the list of technical concepts and systems those seeking a career in cybersecurity should pursue, according to the 2021 Cybersecurity Career Pursuers Study. The research also points to the benefits of upskilling current IT teams to become cybersecurity experts in the face of the worldwide skills shortage. Clearly, cloud security certification is a smart move for enterprises and individuals. But with so many credentials out there, how can you determine which one is right for you? Let’s look at two options: Certified Cloud Security Professional (CCSP) vs. Certificate of Cloud Auditing Knowledge (CCAK). Certification vs. Certificate: What... Read more →

CCSP vs. Cloud+: How Do They Stack Up?

As more organizations move their operations to the cloud for the benefits of improved efficiency, better scalability and faster deployment, a majority (96%) of cybersecurity professionals say they are concerned about public cloud security, according to the 2021 Cloud Security Report by Cybersecurity Insiders. It comes as no surprise, then, that spikes in demand for cybersecurity professionals specializing in cloud security span the globe. For cybersecurity professionals, the incentives to pursue cloud certification are many — but so are the number of cloud cert options out there. To help narrow the pool, let’s look closely at two globally recognized, vendor-neutral... Read more →