Capital One Data Breach - Seven Steps to Secure Sensitive Data on AWS

Regardless of where the data is stored, it is prone to zero-days, bad actors, and human errors, even though Capital One is dedicated to consumer privacy and has stringent security controls. Capital One data was stored on a cloud service provided by Amazon Web Services. Organizations adopting cloud applications are struggling to protect from such emerging threats. Additionally, they need to satisfy regulatory demands, such as PCI, GDPR, the California Consumer Privacy Act, and HIPAA. The breach took place in stages across March and April 2019, and data became available to the hacker in decrypted form, raising the following cloud security concerns: Is the encryption provided by cloud service providers robust enough to protect sensitive data? Is there a lack of proper monitoring and risk assessment tools with cloud security providers to prevent such breaches at the onset? Is the data in the cloud protected from both external and internal threats? As an organization are you heavily invested in cloud and does this breach concern you? Attend our webinar on 11am EDT on Wednesday August 28th, 2019 to understand critical security controls that must be in place, and how CipherCloud with its industry-leading Zero Trust cloud security, encryption, Digital Rights Management, DLP, UEBA and CSPM capabilities can prevent such data breaches.