CASB SaaS Security #TFD16
Transcript
[Music] hey how's it going Steve Townsend from the CTO of Arthur comm joining you again from tech field day 16 what's on your cup hi how's it going this is the first time you've been on the CTO visor I've had you on the podcast that's right but not on the CTO visors so thanks for flying all the way from Australia it's a long way but I'm really glad for you I'm glad to have you here on the podcast and specifically Beckett testability I love your insights
from your perspective you run an MSP back in Australia so you deal with all kinds of small businesses all kinds of challenges and I wanted to get your thoughts on caz beans we talked to force point and all of my first deep dive into Cassidy's do you see cass means a lot in your fieldwork look I think it really depends on the size obviously main that you're talking about I've come from an enterprise background so I understand all the arguments about why something like that is
important and yet the SME market really doesn't get it they are very trusting of their employees they are confused about what to do with concepts like BYOD and so they really struggle to justify why spend extra money for the protection of something like USB so let's talk about over you introduce the audience to the concept of attachment or from a high-level tell us what is it can't be what is and so it's basically another security layer that can protect access into services like software as a
service and it's especially important when a users are accessing those services from devices that we might not control right and so we used to having control over the device on the network that they used to access the thing and now with the cloud that's wide open and they can access it from a lot of different places from devices and networks that we don't control and so case we gives us that extra layer of security to protect what's accessing those cloud services and when a user's are
using them so for example if I have old sixty or office 365 which is used in small business all visitors love it because you don't need infrastructure you can just you soon SharePoint office etc without having a to manage your back in Class B allows me to do things such as take data loss protection rules and apply the controls on top of that without having that infrastructure or buying that infrastructure myself so yeah it's on paper it sounds really great yep and in addition that provides
protection and enforcement over what devices are using with are not those devices have an acceptable level of protection on them in in security features and it also gives us some visibility into what are the api's or services might be accessing that says data as well now I'm doing the back-channel you you know I kind of mentioned on Twitter you know our first time going to Ethan to catch me you mentioned microsoft offers a catch me a product that can you shed a little bit light on
that Microsoft solution versus force points or anything mighty anybody else is that like just the generic market is there is some value on top of one with Microsoft on top of office 365 it's it's an interesting discussion when you talk about should I add things into office365 because mark stuff is available tell you that that is as secure as they can make it and they offer extra like straight protection tools in addition to their product and so to try and tell the user that they didn't
need to buy another product to secure your service and is a little bit strange but the Microsoft service is a natural fit for people who are already in the Microsoft stack and it doesn't only protect Microsoft products okay and so it will tell you for example can do things like interrogate what else is running on a local network to tell you what a shadow IT and other cloud services that your users are using that you might not have authorized so sorry that's part of takes your
day to qualify protect field a we have to share information so obviously you have a social presence in a block can you share your blog and your company fantastic so my day job is as a virtual CIO under a brand called the missing chair and I also do independent things with off cough consulting so you can find me at cough underscore us on Twitter and catch up with one I'm blogging and what events I met at Sonia Capcom alright and of course you can find me
on the web the CTO viator.com where you can subscribe to all CTO visor content including the podcast and of course on twitter at CTO advisor talk to you next CTO DOS
