cybersecurity map

Timing Isn't Everything But It Helps

  • By Tamir Hardof
  • Feb 01, 2021

Many lessons were learned in enterprise IT and security teams in 2020, right down to the final weeks of the year with the Solarwinds attack. We closed out a miserable year with a devastating reminder about the danger of third party access and supply chain attacks. Another painful lesson for IT teams was that current application access technologies, such as virtual private networks (VPN) or virtual desktop infrastructure (VDI), are too difficult to manage and scale. Even the most resource rich companies were forced to ration VPN access for employees, third parties, and partners. This is the opposite of digital transformation, and everything modern business is about. On top of those operational challenges was the fact that these solutions are not secure, and certainly not part of a zero-trust framework.

Meanwhile, in the C-Suite, secure application access went from off the radar completely to a business continuity issue on par with natural disasters and DDoS attacks. Modern business starts with the availability of enterprise assets. 2020 was the year that the C-Suite learned that legacy access solutions were a threat to business operations, digital transformation, and even margins. They are now asking IT leaders, why is something so fundamental to our business so out of touch with what we need?

Time for Change
IT leadership is about managing change and risk while charging full speed ahead. The old way of doing things does not last forever. Ask any developer. It turns out that the way we offer enterprise access is going through another step change in the never-ending march of progress that defines enterprise IT.

IT leaders have long had VPN/VDI on the list of eventual upgrades. Next year they said, other priorities took precedent, like managing an increasingly complex hybrid environment. Not this year. 2020 exposed the weakness of current approaches to the point the C-Suite noticed, and now something must be done. What lessons did we learn in 2020 that can lead us forward with a better, more secure, and user friendly approach to application access?

Lessons Learned
1. Business Starts with Access. Immediately following the work-from-home orders it became clear that access is where business begins. Legacy solutions could not scale quickly, as they relied on a mix of hardware, licenses, and agents on endpoints, requiring significant time and human resources, neither of which most companies had at that moment. When enterprise assets are unavailable to those who need them, business continuity and efficiency are disrupted. By turning to the cloud, businesses can enable access at scale, quickly and securely for employees and third-parties.

2. User experience matters. Users have complained for years that legacy access technologies were difficult to use, often leading them to avoid them altogether by logging into SaaS apps from personal devices outside the VPN/VDI. IT solutions should not be pushing users to make insecure choices for the sake of convenience. Again, by leveraging a modern cloud platform for application access, users are met with a familiar web interface to access all business applications.

3. Zero Means Zero. Zero Trust is a fantastic framework for organizational security. Most businesses say they are on their zero-trust journey. Leaving legacy access solutions behind for modern cloud-based application access solutions is one way to make a quantum leap forward. Legacy solutions offer too much implicit trust in the user, bringing them onto the network, to the doorstep of vulnerable applications. Furthermore, businesses have limited visibility and control over the user once they have gained access. With a cloud-based access solution, the cloud serves as a broker between the user and application. Users no longer gain access to the network, or the applications themselves. Furthermore, in this cloud-based model, every move by the user is checked, verified, and authorized. This is truly zero trust in action. Enterprise application access is now a C-Suite priority, and again, the cloud provides a way forward for enterprise IT teams. The cloud cannot solve all of your IT challenges, but it is certainly the future of enterprise application access solutions.

About the Author

Tamir Hardof, CMO, Axis Security

Featured

  • Survey: 48 Percent of Worshippers Feel Less Safe Attending In-Person Services

    Almost half (48%) of those who attend religious services say they feel less safe attending in-person due to rising acts of violence at places of worship. In fact, 39% report these safety concerns have led them to change how often they attend in-person services, according to new research from Verkada conducted online by The Harris Poll among 1,123 U.S. adults who attend a religious service or event at least once a month. Read Now

  • AI Used as Part of Sophisticated Espionage Campaign

    A cybersecurity inflection point has been reached in which AI models has become genuinely useful in cybersecurity operation. But to no surprise, they can used for both good works and ill will. Systemic evaluations show cyber capabilities double in six months, and they have been tracking real-world cyberattacks showing how malicious actors were using AI capabilities. These capabilities were predicted and are expected to evolve, but what stood out for researchers was how quickly they have done so, at scale. Read Now

  • Why the Future of Video Security Is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reasons. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. Read Now

  • UL Solutions Launches Artificial Intelligence Safety Certification Services

    UL Solutions Inc., a global leader in safety science, today announced the launch of artificial intelligence (AI) safety certification services, enabling comprehensive assessments for evaluating the safety of AI-powered products. Read Now

  • ESA Announces Initiative to Introduce the SECURE Act in State Legislatures

    The Electronic Security Association (ESA), the national voice for the electronic security and life safety industry, has announced plans to introduce the SECURE Act in state legislatures across the country beginning in 2025. The proposal, known as Safeguarding Election Candidates Using Reasonable Expenditures, provides a clear framework that allows candidates and elected officials to use campaign funds for professional security services. Read Now

    • Guard Services
Most   Popular

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge.