Untangling SaaS Security in the Enterprise

Explore enterprise SaaS security challenges and solutions in this 47-minute RSA Conference talk. Gain insights into TD Ameritrade's controls framework, aligning security policies with vendor management processes. Discover integration patterns for specific security controls to protect data, and learn about business use cases addressing BYOD challenges. Delve into public cloud security threats, enterprise SaaS expansion, and the core components of a robust cloud security program. Examine foundational cloud security controls, including IAM, data protection, application security, logging, monitoring, and incident response. Understand Cloud Access Security Broker (CASB) architecture and capabilities, and explore real-world use cases for Office 365, Workday, and Slack. Suitable for those with a basic understanding of SaaS applications, cloud security, risk management, and security governance, as well as technical knowledge of CASB and Identity Management solutions.

Intro
Public Cloud Security Threats
Enterprise SaaS Expansion
What is the Saas Security Problem?
Public Cloud Security Program
Data Security Is Key!
Cloud Risk Management Process
Foundational Cloud Security Controls - IAM
Foundational Cloud Security Controls - Data Protection
Data Integration Secure Patterns
Foundational Cloud Security Controls - App Security
Foundational Cloud Security Controls - Logging & Monitoring
Foundational Cloud Security Controls - Incident Response
Foundational Cloud Security Controls - Takeaways
Cloud Access Security Broker - CASB
CASB Architecture and Capabilities - Summary Grid
Establish Strong BYOD Controls
Use Cases: CASB - Office 365
Use Cases: CASB - Workday
Use Cases: CASB - Slack