8 results ·
● Live web index
listicle
O
orca.security
article
https://orca.security/resources/blog/cloud-data-security-risks-best-practices
Cloud data security protects data at rest, in transit, and in use across cloud storage and compute services through encryption with customer-managed keys, least-privilege Identity and Access Management (IAM) policies, and continuous monitoring. [...] While misconfigurations are a leading cause of cloud data exposure, human-driven risks remain a primary attack vector. These include:
Insider threats: Employees or contractors misusing legitimate access to sensitive data
Phishing and credential theft: Attackers compromising IAM credentials to access cloud storage and databases
Social engineering: Manipulating users to gain access to systems or bypass security controls [...] 4. Shared responsibility model: Data security responsibilities are divided between the cloud provider and the customer, with obligations varying by service type.
V
veeam.com
article
https://www.veeam.com/blog/cloud-data-security-best-practices.html
The most common cloud data security threats are misconfiguration, insider mistakes, ransomware, insecure APIs, and data loss from failed backups. These aren’t the only risks you’ll face, but they account for the majority of cloud data incidents, and most of them trace back to access and configuration rather than sophisticated zero-day attacks.
Here’s what to watch for and why each one matters:
### 1. Misconfigured storage and permissions. [...] Why Cloud Data Security Matters
Common Cloud Data Security Threats
+ 1. Misconfigured storage and permissions.
+ 2. Insider threats and human error.
+ 3. Ransomware targeting cloud-connected repositories.
+ 4. API vulnerabilities and insecure integrations.
+ 5. Data loss from accidental deletion or failed backup jobs.
Cloud Data Security Best Practices
+ Discover and classify your data first
+ Apply the principle of least privilege [...] Why Cloud Data Security Matters
Common Cloud Data Security Threats
+ 1. Misconfigured storage and permissions.
+ 2. Insider threats and human error.
+ 3. Ransomware targeting cloud-connected repositories.
+ 4. API vulnerabilities and insecure integrations.
+ 5. Data loss from accidental deletion or failed backup jobs.
Cloud Data Security Best Practices
+ Discover and classify your data first
+ Apply the principle of least privilege
S
sentinelone.com
article
https://www.sentinelone.com/cybersecurity-101/cloud-security/cloud-security-b…
Top security practices in cloud computing include encryption, identity and access management (IAM), network security, threat detection, and compliance management.
The three key measures are data encryption, implementing multi-factor authentication (MFA), and regular vulnerability assessments. [...] Cloud security best practices encompasses taking the necessary measures to monitor and secure cloud environments. It involves knowing how the cloud works (including having awareness about its shared responsibility model), monitoring for misconfigurations, and creating incident response, recovery, and backup plans for organizations. Practices are not just limited to security measures. They can also include choosing the right solutions, setting the right policies, and addressing security silos. [...] Following the best practices for cloud security is important because it tells you if your organization is on the right track. Poor security can impact account and data integrity. It can ruin your business reputation and cause loss of customers’ trust. The cloud is growing by the day and with access to high-compute services and more processing power, the risk of getting hijacked also increases. Just because you rely on a cloud service provider doesn’t inherently make them safe. Most cloud
W
wiz.io
article
https://www.wiz.io/academy/data-security/data-security-best-practices
Data security is essential for reducing data breach costs, preventing data exposure, and maintaining compliance across multi-cloud environments. Without strong controls and visibility, organizations face increased risk of data exfiltration, costly downtime, regulatory penalties, and long-term revenue loss from customer churn. [...] | Cloud data security benefit | Business impact |
--- |
| Reduced breach risk and blast radius | Limits access to sensitive data by tightening IAM policies and eliminating public exposure, lowering the likelihood and scope of data exfiltration. |
| Continuous regulatory compliance | Tracks where regulated data lives and who can access it, reducing the risk of fines, failed audits, and expensive remediation efforts. | [...] Continuously monitor your environment for suspicious activities, regardless of where the data lives.
Employ user and entity behavior analytics (UEBA) to spot deviations that traditional monitoring misses, such as legitimate credentials used in anomalous patterns.
Set up anomaly detection for data access patterns, ensuring they are flagged and alerted to immediately.
Respond swiftly to indicators of compromise (IoCs) to eliminate exploitable risks and safeguard sensitive data.
F
fortinet.com
article
https://www.fortinet.com/resources/cyberglossary/cloud-security-best-practices
Cloud-specific security training at regular intervals can help teams recognize potential risks and avoid common misconfigurations. It reinforces strong access practices and proper management of sensitive data.
Continuous education ensures staff stay current with evolving threats and best practices. Most importantly, training reduces human errors, which are a leading cause of cloud security incidents. [...] Cloud providers offer centralized logging services that aggregate data from multiple sources. These services capture authentication events, resource access, configuration changes, and application activities. The key is to configure comprehensive logging before you need it.
Automated alerting (for high-risk activities) reduces response time to security incidents. Set up alerts for failed login attempts, privilege changes, unusual data access patterns, and changes to sensitive resources. [...] Unlike traditional on-premises security that relies on network perimeters, cloud security operates across distributed, dynamic environments where resources can be created, modified, or deleted instantly. Cloud security is built on a shared responsibility model. Cloud providers safeguard the infrastructure, while customers ensure configurations, user access, applications, and data security.
Cloud security has changed dramatically over the past few years.
Modern threats now include:
T
tierpoint.com
article
https://www.tierpoint.com/blog/cybersecurity/cloud-storage-security
Cloud storage security includes technologies and practices businesses use to protect their data in cloud storage solutions. This can consist of safeguards against theft, deletion, unauthorized access, or file corruption.
## Why is it So Important? [...] Data should be encrypted at rest and in transit, which means it should be scrambled when moving between points, as well as when it is in cloud storage so that it cannot be read without a decryption key.
Encryption keys used on the data should also be stored with a key management system to prevent unauthorized access.
### Backup Data & Implement Disaster Recovery [...] Data that is only available in one place will always be more vulnerable than data that has a backup somewhere. Regularly backing up data to a separate location, especially one that is geographically distinct, can protect businesses from data breaches, natural disasters, accidental deletion, and more.
C
crowdstrike.com
article
https://www.crowdstrike.com/en-us/cybersecurity-101/cloud-security/cloud-secu…
Cloud data encryption is key to a robust cloud security strategy. It allows for a seamless and secure flow of data among cloud-based applications by concealing it from unauthorized users. Data should be encrypted in the cloud itself and when it is in transit to ensure optimal protection. [...] Data is everywhere, fueling enterprises’ growth and innovation. However, its dynamic and uncontrolled nature makes it a prime target for threat actors. With sensitive data flowing across cloud environments and in and out of unmanaged and shadow data stores, the risk of exposure is significant. Employing a data security posture management (DSPM) solution will help you discover, classify, and protect sensitive data — such as personally identifiable information (PII), information subject to [...] What are the best practices for cloud security?
## 1. Understand shared responsibility
All leading cloud service providers (CSPs) — AWS, Azure, and Google Cloud — follow a shared responsibility model when it comes to cloud security. Though some aspects of security are managed by the service provider (such as underlying hardware security), customers are expected to enable security at the infrastructure and application layers.
S
sei.cmu.edu
research
https://www.sei.cmu.edu/blog/best-practices-for-cloud-security
A common theme across these cloud security practices is the need for cloud consumers to develop a deep understanding of the services they are buying and to use the security tools provided by the CSP. Recent cloud security incidents reported in the press, such as unsecured AWS storage services or the Deloitte email compromise, would most likely have been avoided if the cloud consumers had used security tools, such as correctly configured access control, encryption of data at rest, and [...] For small and mid-sized organizations, use of well-established, mature CSPs helps reduce risk associated with transitioning applications and data to the cloud. 
We welcome your feedback on these practices in the comments section below.
Additional Resources
Read our first post in this series, 12 Risks, Threats, and Vulnerabilities in Moving to the Cloud.
Federal agencies can learn more about CSP-specific best practices and implementation guidance at fedramp.gov. [...] As detailed in last week's post, SEI researchers recently identified a collection of vulnerabilities and risks faced by organizations moving data and applications to the cloud. In this blog post, we outline best practices that organizations should use to address the vulnerabilities and risks in moving applications and data to cloud services.