Laying a solid foundation for cloud security

Deploying cryptography, especially cloud key management solutions, provides organisations with a high level of privacy, control, and flexibility

- RUCHIN KUMAR

The rapid increase in cloud adoption rates can be attributed to several factors such as lower capital expenditure, faster deployment, and the ability to meet the same cryptographic requirements as on-premises HSMs. As a result, more and more organisations are choosing to migrate to the cloud. However, as established trends continue to gain momentum, newer trends are beginning to emerge.

Organisations are now seeking novel ways to enhance the efficiency of their cloud infrastructure and maximise its functionality. Specifically, many companies are now searching for cloud cryptography providers that can deliver high levels of compliance.

EMERGING CONCERN: CRYPTOGRAPHIC SPRAWL

Enterprises tend to run hundreds of applications that utilise cryptographic functions in some way or the other. The use of client libraries, third-party tools, and cloud solutions can lead to a proliferation of unmanaged secrets, cryptographic solutions, encryption keys, and applications. An emerging concern in enterprise security is the issue of cryptographic sprawl, which can increase potential security risks and management overhead.

The term cryptographic sprawl refers to the widespread and uncontrolled proliferation of unmanaged secrets, cryptographic solutions, encryption keys, and applications within an enterprise. This condition may initially seem commonplace since the priority is usually given to utilising resources rather than cleaning them up.

Despite its gradual onset, cryptographic sprawl can have a significant impact on an organisation's operations and costs. Unmanaged secrets can result in potential security threats, while unmanaged keys and cryptographic resources can increase management overhead, causing unnecessary complexities and challenges for the organisation.