The changing landscape
The workplace, and indeed the working world, has become more fluid. If the COVID-19 pandemic teaches us anything it’s that, with the right infrastructure and technology, people can work anywhere.
This opens up a whole host of new challenges for organisations to protect their data, devices and users. If compromised:
- Data can be stolen, exploited, and can’t be replaced
- Without fully operational devices users can’t work
- And if users’ accounts are compromised, they can be locked out of systems and criminals can creep in
Today most organisations use some form of cloud application usually Software-as-a-Service (SaaS) such as Office 365, Salesforce, Dynamics CRM or a website content management system (CMS) to name a few. Other services such as Platform-as-a-Services (PaaS) like Azure SQL are a popular choice. PaaS provides a good way to manage costs and “outsource” security updates and patches, resilience and back-up of these services to cloud providers.
These as-a-service solutions have many benefits including cost efficiencies and ease of use for administrators. However, it also means that the old world of perimeter security and Active Directory becomes even more irrelevant, since more apps are actually no longer hosted within the corporate datacentre.