Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

9/21/2016
12:40 PM
Connect Directly
Twitter
LinkedIn
RSS
E-Mail
50%
50%

How Cloud, Mobile Are Changing IT, Security Management: Study

The evolution of technology is changing the role of IT and security pros as more employees use cloud apps and connect personal devices to corporate networks.

Nearly half of North American end-users claim they connect more personally owned devices to corporate networks than they did 10 years ago. Sixty percent of IT pros around the globe claim their businesses permit the use of cloud-based apps.

Both statistics point to the future of productivity and sources of security concern for IT managers. The data points come from two surveys conducted by IT management software provider SolarWinds in celebration of IT Professionals Day on Sept. 20.

Researchers aimed to demonstrate the evolution of IT management beyond corporate-owned devices and on-premises technology. This growth is placing greater demand on IT pros to manage technologies outside their traditional scope of control.

"Our surveys reveal that more than ever, end users are connecting more devices, including those personally-owned, to corporate networks; relying on cloud-based applications; and working outside the four walls of traditional offices," said Joseph Kim, senior vice president and CTO of SolarWinds. 

These findings have significant implications for the future of enterprise security and strategies for protecting organizations from cyberattacks.

Today's businesses are handling more devices than ever on their corporate networks. Lean Adato, head geek and technical evangelist at SolarWinds, notes how the increase in personal device usage has driven end-users' expectations for support from their IT departments.

"At this point, it's a given that people will get to their office with a smartphone, maybe a tablet, and a laptop in addition to their work device," he explains. "You will be supporting these devices, that's just a fact of the matter."

Ten years ago, the iPhone hadn't yet launched. There were no personal phones to connect to the corporate network, and IT and security teams didn't support personal devices because there were so few in the workplace. Now they face the challenge of securing their networks with many outside devices.

The rapid rise of cloud-based applications is also posing a major security risk, says Adato. More than 70% of companies estimate end users "at least occasionally" use non-IT-sanctioned cloud-based apps.

"There are companies that have things locked down, where non-IT-sanctioned cloud-based apps can't be used, but honestly they are few and far between," he says.

Adato points to SolarWinds' discovery that 60% of IT pros claim their businesses facilitate cloud-based apps. This number seems low, he says, noting he doesn't know anyone who isn't using tools like DropBox, Trello, or Slack to be productive.

The challenge is not in knowing whether 40% of respondents forbid cloud apps: It's that these organizations have different definitions of what "cloud-based" means.

Some organizations call an app cloud-based when they buy a cloud server, put one of their apps on the server, and let users run it from there. Defined narrowly like this, the 60% statistic makes sense, explains Adato, but many cloud tools fall outside this narrow scope.

It's difficult to condemn the growth of cloud-based apps because so many of them drive productivity. However, they also pose a security risk.

"They really are changing the way people are getting work done, and changing it for the better," he says. "But the users' tendency to avoid anything that has to do with security means this wonderful, collaborative, game-changing workplace is just asking for trouble in terms of security breaches."

Just as IT pros can expect the rise of personal devices in the workplace, they can anticipate a broader transition to the cloud. This means understanding infrastructure and the definition of cloud-based apps, which businesses leaders won't think about. They'll also have to navigate hybrid IT environments, as many business apps run both in the cloud and on servers.

Cloud apps make it easier for businesses to be successful by helping people enjoy the work they do, which is a "compliment that comes with a consequence," notes Adato. If employees are working around the clock, so too are IT pros.

The reality is users are willingly working longer days. Tech teams are wired to help, but the challenge is finding a way to address the needs of users who are always online without burning out.

"In IT, if the crisis continues beyond 5:30PM, you do, too," he explains. "It's always been a problem and it's always been something we in IT have done very badly."

He recommends companies begin to consider monitoring tools, which can constantly watch for threats and keep things stable so tech pros can focus on other tasks. For many companies, monitoring is still a manual task on someone's to-do list; in the future, it should be seen as its own discipline spanning storage, virtualization, and cloud.

Related Content

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Samandy
100%
0%
Samandy,
User Rank: Apprentice
9/22/2016 | 1:11:49 AM
Very Good Post
Decent to visit your web journal once more, i was simply perusing along and happened upon your site. simply needed to say great site and this article truly helped me.Really i value the exertion you made to share the knowledge.The theme here i found was truly compelling to the point which i was scrutinizing for quite a whileNice to be visiting your blog again, i was just browsing along and came upon your blog. just wanted to say good blog and this article really helped me.Really i appreciate the effort you made to share the knowledge.The topic here i found was really effective to the topic which i was researching for a long time

 

 
Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Cloud Security Startup Lightspin Emerges From Stealth
Kelly Sheridan, Staff Editor, Dark Reading,  11/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29378
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password [email protected]#y$z%x6x7q8c9z) for the e...
CVE-2020-29379
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access.
CVE-2020-29380
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-...
CVE-2020-29381
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename...
CVE-2020-29382
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images.