Friday, September 14, 2018
According to a prediction by Gartner, more than half of global enterprises already using the cloud today will adopt an all-in cloud security strategy by 2021. The technology has been around for a decade and in that time has allowed for more agile, scalable solutions and greater innovation from IT departments. However, companies are still experiencing growing pains as use of the cloud expands beyond the IT department. Common challenges include measuring compliance, gaining visibility across the IT infrastructure and open communication between security operations and IT groups. But it’s clear that the cloud is here to stay, and these challenges should be faced head-on.
A security stack is a collection of resources a company uses to protect itself from cybersecurity incidents. When incidents do occur, companies often believe the solution is to increase tools in their stack. However, this may not always be the best use of the stack. In many cases, more tools can mean more work for cybersecurity analysts who are already addressing thousands of possible threats every day. Companies can simplify their security stack by eliminating redundant tools or ones that rely too heavily on manual monitoring, to improve efficiency. It’s not about having every new tool or service in your security stack — it’s about how you use them.
The Importance of DevSecOps
Unit 42 is the global threat intelligence team at Palo Alto Networks and believe threat intelligence should be free, shared and available for all. s and industry experts. Unit 42’s podcast, titled 
Charles Buege is a Fuel User Group member who has a home lab setup unlike most others. Using a commercial internet provider and running multiple firewalls, his home lab gives him plenty of hands-on learning experience that can translate into his daily work environment. Here he shares how he set up the Palo Alto Networks PA-220 next-generation firewall. Be sure to read his other Fuel blog post, “
The Palo Alto Networks Ignite 2018 conference has come and gone, but the value of the education and engagement that occurred in Anaheim will live on. For me, there were two big takeaways.
Machine learning continues to be touted as one of the most powerful tools to help quickly identify threats. In theory, this frees up time for cybersecurity professionals to focus on other tasks. However, some reports indicate that machine learning, when not approached properly, can create an unmanageable amount of false positive alerts, resulting in time and money wasted.