Enterprise Cloud Security Augmented by Google Cloud Protection

Enterprise Cloud Security Augmented by Google Cloud Protection.

In era of rapid digital transformation, when every organization is navigating the cloud journey, one of the major challenges they encounter is to ensure security of the workloads throughout the entire cloud migration life cycle (before migration – during migration – after migration). The primary challenges enterprises face vis-à-vis cloud security include, constantly evolving cloud threat vectors, de-centralized view of cloud security posture, managing runtime security vulnerabilities, and blending security with speed of cloud transformation.

LTM’s Enterprise Cloud Security Offering is augmented by Google Cloud Protection and provides end-to-end managed security services to enable organizations to navigate their cloud transformation journey in a secured, accelerated, agile manner.

LTM’s Cloud Security Offering

• Cloud Security Posture & Risk Management (CSPRM)
• Container Security & Risk Management
• Cloud Workload Protection & Risk Management (CWPRM)
• Cloud Defense SIEM (Chronicle-Backstory)

Key Service Features

Cloud Security Posture & Risk Management (CSPRM)

• Security & regulatory compliance hygiene
• Policy engine / Security control framework
• Beyond-Corp / Zero-Trust Architecture (JIT/IEA)
• Scan, detect, auto-response
• Playbook / Automation, IAM
• Data Security, Encryption, Network

Cloud Workload Protection & Risk Management (CWPRM)

• Depth / Breadth protection
• Vulnerability management, WAF / DDoS
• Endpoint security (AV / EDR)
• DLP, Security incident detection
• Securing Key / Secret / Certificate
• Shield VM, File integrity checks

Container Security & Risk Management

• Protecting Container / GKE / GCJAR
• Container Image / Artifact vulnerability scan
• Container hardening
• Security hygiene, Pod security
• Trusted image assurance
• Security incident detection (cluster, node)

Cloud Defense SIEM (Chronicle-Backstory)

• Data source onboarding
• Data lake, Logging / Audit
• Detection engine (MITRE ATT&CK)
• Integrate TI, UEBA, ITSM, SOAR
• Performing threat hunting, IoC / IoA
• Security incident management, Playbook

Our Value Proposition

• Visibility and Coverage
  Real-time, centralized 360-degree view for entire cloud estate.

• Workload Security-By-Design
  Secure landing platform with zero-trust network architecture, blueprint, template for protecting cloud resources from external/internal attacks & data breaches.

• Delivering Workload Compliance
  Assurance of workloads compliant with security and regulatory compliance standards. Strengthens security hygiene, regulatory compliance hygiene, IAM hygiene, network hygiene, zero-trust architecture, endpoint hygiene, IoT security hygiene, Kubernetes/container registry hygiene.

• Managing Workload Protection
  Secured endpoint protection with best-in-class EDR/AV, vulnerability scanning solution.

• Prevention from Data Leakage
  Assurance of data security by applying encryption (at-rest, in-transit), data leak prevention policy.

• Protection from Unauthorized Access
  Elimination of over-permissive, deprecated, external user access to workload.

• Handling of Security Incident
  Real-time incident monitoring and response through customized MITRE ATT&CK detection rules, playbook, workbook, threat intelligence, UEBA.

• Automation, Speed, and Efficiency
  Real-time, fully automated security incident/event/hygiene detection, qualification, and response.

Google Cloud Security – Technology Landscape

• SCC, SHA, CGC
• ETD, CTD, Organization policy
• Chronicle-Backstory
• Cloud Ops suite
• Pub/Sub
• Beyond-Corp Enterprise
• IAP, ACM, VPC FW
• Web Security Scanner
• Container Analysis
• Cloud DLP, IAM
• Anomaly Detection
• NW Intelligence
• Network Security
• WAF, Cloud Armor

Partner Ecosystem

• Google
• Check Point Software Technologies Ltd.
• Radware
• Qualys
• Microsoft