Netskope, Inc. · NASDAQ:NTSK
Netskope — Technical Presentation (February 2016)
28 slides from Netskope's technical presentation, Feb 17, 2016
Slide 1: Managing the Challenges of the Cloud Under the New EU GDPR
Managing the Challenges of the Cloud Under the New EU GDPR Sue Goltyakova, Netskope Andy Aplin, Netskope Netskope © 2015, Optiv Security Inc. © 2015
Slide 2: EU General Data Protection Regulation
EU GENERAL DATA PROTECTION REGULATION: ‣ Single regulation that supersedes all others ‣ Applies to European and non-European entities ‣ Penalties of 4% percent of global annual turnover, or €20m, whichever is the higher ‣ Adoption expected in 2016; enforcement in 2018 Netskope © 2015, Optiv Security
Slide 3: Personal Data
PERSONAL DATA = “…any information relating to an individual, whether it relates to his or her private, professional or public life.” “…can be anything from a NAME, a PHOTO, an EMAIL ADDRESS, BANK DETAILS, POSTS on social networking websites, MEDICAL INFORMATION, or a computer’s IP ADDRESS.” Netskope
Slide 4: More Key Points to Consider
MORE KEY POINTS TO CONSIDER Data Protection by Design and Data Protection by Default will become mandatory. Organisations will need to appoint a Data Protection Officer, or at the very least ensure that the duties of a DPO become the responsibility of a suitable officer in the organisation. A Data P
Slide 5: Supervisory Authority, Controller, Processor, Data Subject
SUPERVISORY CONTROLLER PROCESSOR DATA SUBJECT AUTHORITY ‣ Determines purposes and ‣ Processes data on behalf ‣ Individual who is or can be ‣ Public authority that means of processing data of controllers identified, directly or supervises and enforces ‣ Must have reason, use only indirectly GDPR for
Slide 6: But do we know how many of these we have?
DATA PROTECTION YOUR YOUR EMPLOYEE AUTHORITY FOR CLOUD APP ORGANISATION OR CUSTOMER YOUR MEMBER STATE But do we know how many of these we have? Netskope © 2015, Optiv Security Inc. © 2015
Slide 7: Scenario 1 - Where are the apps & data, could data be leaked?
Scenario 1 - Where are the apps & data, could data be leaked? YOUR ORGANISATION CLOUD APP YOUR EMPLOYEE OR CUSTOMER COMPETENT DATA PROTECTION AUTHORITY Netskope © 2015, Optiv Security Inc. © 2015
Slide 8: Scenario 2 - Where are the apps & data, could data be leaked?
Scenario 2 - Where are the apps & data, could data be leaked? YOUR ORGANISATION CLOUD APP YOUR EMPLOYEE OR CUSTOMER COMPETENT DATA PROTECTION AUTHORITY Netskope © 2015, Optiv Security Inc. © 2015
Slide 9: Netskope at a glance
‣ Discover cloud apps and assess risk ‣ 250+ employees globally, including North ‣ Govern all apps and data America, throughout Europe, and Asia-Pacific ‣ Safely enable sanctioned cloud apps ‣ Early architects/executives from Palo Alto Networks, NetScreen, Cisco, McAfee, VMware ‣ 40+ patent claims a
Slide 10: Cloud procurement happens outside of IT
IT estimate: 40-50 Cloud procurement happens outside of IT More than just Dropbox and Actual: Evernote. HR, Finance, 769 Customer Relationship Management, etc. No visibility or control Source: Netskope Cloud Report Netskope © 2015, Optiv Security Inc. © 2015
Slide 11: 28 ecosystem apps connected to Box alone
28 “ecosystem”apps, on average, connected to Box alone Source: “Cloud App Ecosystems: Why They Should Matter to You,” Netskope Netskope © 2015, Optiv Security Inc. © 2015
Slide 12: Netskope © 2015, Optiv Security Inc. © 2015
Netskope © 2015, Optiv Security Inc. © 2015
Slide 13: Just Block!
In 2005 we said… Just Block! Netskope © 2015, Optiv Security Inc. © 2015
Slide 14: Good but... these apps are good for business
BUT… THESE APPS ARE GOOD FOR BUSINESS Netskope © 2015, Optiv Security Inc. © 2015
Slide 15: Leading biotech, global bank, large retailer
LEADING BIOTECH GLOBAL BANK LARGE RETAILER ‣ Processes petabytes of ‣ Uses cloud collaboration, ‣ Aggregates user data across clinical trial data research, portfolio stores around the world ‣ Results: Faster time-to- management and financial ‣ Results: Real-time decisions approval, competitive analy
Slide 16: Controller's Obligation
CONTROLLER’S OBLIGATION: ‣ KNOW which personal data are processed by workers using cloud apps ‣ IDENTIFY which cloud apps workers are using ‣ PREVENT personal data from being processed in unmanaged cloud apps ‣ PROTECT personal data stored or processed in cloud apps Netskope © 2015, Optiv Security I
Slide 17: How Are You Addressing Cloud GDPR Compliance?
How Are You Addressing Cloud GDPR Compliance? Netskope © 2015, Optiv Security Inc. © 2015
Slide 18: Six steps across any device, including mobile and BYOD
Across any device, including 1 2 3 mobile and BYOD Data processing Know location Take security measures agreement 4 5 6 Only “necessary” data; no “special” data unless No personal data for Data deleted exemption is in place other purposes post-service Netskope © 2015, Optiv Security Inc. © 2015
Slide 19: 1. Know Location
Are apps, data in EU? Could data be leaked? 1. KNOW LOCATION excellent high medium low Netskope © 2015, Optiv Security Inc. © 2015 poor
Slide 20: 2. Take Security Measures
Data security features such as encryption, cipher type, auditing, physical security? If not, compensating controls. 2. TAKE SECURITY MEASURES Features? If no, controls! Netskope © 2015, Optiv Security Inc. © 2015
Slide 21: 3. Data Processing Agreement
Find. Consolidate. Sanction. Execute agreement. 3. DATA PROCESSING AGREEMENT ✔ ✔ ✔ ✔ Netskope © 2015, Optiv Security Inc. © 2015 …
Slide 22: 4. Only Necessary Data; No Special Data Unless Exemption
Specify in agreement. Verify in practice. 4. ONLY “NECESSARY” 1011 DATA; NO 0110 0101 ‣ Assess app functionality ‣ Block non-necessary data “SPECIAL” ‣ Block “special” data unless 1011 exemption is in place DATA UNLESS 0110 0101 EXEMPTION IS SPECIAL IN PLACE 1011 Netskope © 2015, Optiv Security Inc.
Slide 23: 5. No Personal Data for Other Purposes
Understand privacy terms of discovered apps. Consolidate apps that don’t meet requirements. Specify in agreement for the rest. 5. NO PERSONAL DATA FOR OTHER PURPOSES Netskope © 2015, Optiv Security Inc. © 2015
Slide 24: 6. Data Deleted Post-Service
Understand data deletion terms after service terminated. Consolidate apps that don’t meet requirements. Specify in agreement for the rest. 6. DATA DELETED POST-SERVICE Netskope © 2015, Optiv Security Inc. © 2015
Slide 25: Across all device types, including BYOD and mobile
Across all device types, including BYOD and mobile devices, and sync clients … BYOD … … Netskope © 2015, Optiv Security Inc. © 2015
Slide 26: In Summary
In Summary… Only “Necessary” Data; No Regardless of where you are Know Location “Special” Data unless with or what device you’re on exemption No Personal Data for Other Take Security Measures Purposes Data Processing Agreement Data Deleted Post-Service Netskope © 2015, Optiv Security Inc. © 2015
Slide 27: Know Your Cloud App Usage and EU GDPR Compliance Status
Know Your Cloud App Usage and EU GDPR Compliance Status Take advantage of a Netskope Cloud Risk Assessment for the EU GDPR Contact your Netskope Account Executive or reach out at [email protected] Netskope © 2015, Optiv Security Inc. © 2015
Slide 28: Thank you! Questions?
Thank you! Questions? email [email protected] or [email protected] Netskope © 2015, Optiv Security Inc. © 2015