{"id":125095,"date":"2022-12-13T09:00:00","date_gmt":"2022-12-13T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=125095"},"modified":"2024-04-08T13:45:04","modified_gmt":"2024-04-08T20:45:04","slug":"4-things-to-look-for-in-a-multicloud-data-protection-solution","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2022\/12\/13\/4-things-to-look-for-in-a-multicloud-data-protection-solution\/","title":{"rendered":"4 things to look for in a multicloud data protection solution"},"content":{"rendered":"\n
What does it mean to be a multicloud organization? As the name implies, the term describes a model of cloud computing where an organization uses multiple clouds\u2014two or more public clouds, private clouds, or a combination of public, private, and edge clouds\u2014to distribute applications and services. Subscribing to multiple cloud vendors can help your business access best-of-breed solutions along with competitive pricing.<\/p>\n\n\n\n
The downside? Using multiple cloud platforms can create inconsistent infrastructures that don\u2019t scale across environments. This can lead to teams working in silos\u2014bringing increased complexity, additional costs, network security gaps, and risks to business-critical applications and data. It\u2019s not unheard of for some organizations to own 80 to 100 different security tools stitched across hybrid and multicloud environments, while still wondering: are we secure? In this blog, we\u2019ll help you answer that question by detailing four qualities a multicloud data-protection solution should provide and how Microsoft Purview<\/a> can help unify security, compliance, and data protection across your enterprise. <\/p>\n\n\n\n Enabling multicloud integration and automation at scale is essential for fostering a robust partner ecosystem. Since 89 percent of enterprise customers have moved to a multicloud environment, maintaining security across your expanding data estate is necessary.1<\/sup> Patchwork solutions can create vulnerabilities; whereas, a comprehensive solution is able to deliver seamless data protection and data governance across your entire digital estate.<\/p>\n\n\n\n Look for a multicloud security and data-protection solution that:<\/strong><\/p>\n\n\n\n Overcoming the siloed approach in a multicloud environment can be a challenge. However, the risks are too great to make do with ad-hoc, patchwork security solutions. Beyond PII, also at stake is your business\u2019s intellectual property (IP), financial statements, organizational structures, employee contacts, and other information that could be targeted with ransomware, phishing, and password attacks.<\/p>\n\n\n\n Microsoft Purview\u2019s information protection and governance <\/a>capabilities help your organization address potential data vulnerabilities across a multicloud environment by integrating information protection<\/a> and data lifecycle management,<\/a> along with data loss prevention, insider risk management<\/a>, and eDiscovery<\/a>. Microsoft Purview\u2019s data governance portal<\/a> helps manage your entire data landscape\u2014on-premises, multicloud, and SaaS\u2014allowing you to create a comprehensive, up-to-date map of your data wherever it resides. This unified governance enables data curators and security admins to keep your data secure; all while empowering users to find the trustworthy data they need.<\/p>\n\n\n\n Microsoft Priva<\/a> adds another layer of protection with privacy risk management<\/a>, helping to identify data-privacy risks and automate mitigation wherever the data lives. To accommodate individuals making requests to review or manage their personal data about themselves, Microsoft Priva Subject Rights Requests<\/a> includes the Microsoft Graph subject rights requests API<\/a>. This powerful API helps your organization do more with less by automating searches across Microsoft Exchange, Microsoft OneDrive, SharePoint, or Teams.<\/p>\n\n\n\n And to protect the business-critical apps you rely on, Microsoft Defender for Cloud Apps<\/a> helps you classify sensitive information using real-time controls that monitor data accessed across your multicloud environment. As a cloud access security broker (CASB), Defender for Cloud Apps blocks attacks against your apps using automated identity governance, and it integrates seamlessly with Microsoft Entra Permissions Management<\/a> to root out and remediate permission risks.<\/p>\n\n\n\n Any data-protection solution needs to address the four areas discussed\u2014unified discovery and protection, protection against data exfiltration, control of unstructured data, and a foundation of Zero Trust\u2014across hybrid and multicloud environments. Both Microsoft 365<\/a> and Microsoft Azure<\/a> are purpose-built with Zero Trust<\/a> as a core architectural principle. And with comprehensive, integrated solutions for information protection, data governance, risk management, and compliance, Microsoft Purview<\/a> builds on all four pillars\u2014so you can move forward, fearless.<\/p>\n\n\n\n To learn more about Microsoft Security solutions, visit our website<\/a>. Bookmark the Security blog<\/a> to keep up with our expert coverage on security matters. Also, follow us at @MSFTSecurity<\/a> for the latest news and updates on cybersecurity.<\/p>\n\n\n\nMultiple clouds require unified data protection<\/h2>\n\n\n\n
\n
A data-protection solution with rights management and automatic encryption of emails (and attachments), as well as co-authoring of encrypted documents, will help to ensure secure collaboration. Your multicloud security tool should be flexible enough to allow manual labeling of some sensitive files for leadership-only access (like mergers and acquisitions projects), while also enabling admins to automatically label and protect business files stored in Microsoft SharePoint or Microsoft Teams (like Confidential <\/em>labels for Finance or HR records). This tool should also be able to scan and classify on-premises file shares, as well as cloud applications and services.<\/li>\n\n\n\nIntegrate for comprehensive protection<\/h2>\n\n\n\n
Look for a built-in data protection solution<\/h2>\n\n\n\n