Public Cloud and Generative AI Drive the Need for Data Security Posture Management
DSPM brings together data management and threat protection and should be a part of every organization’s cloud strategy in the age of cloud and AI.
December 30, 2024
The focus on data security is increasing as organizations move to public cloud environments and adopt generative AI (gen AI). Many struggle with tracking where their data is stored, leaving it unprotected and susceptible to breaches. Earlier this year, Zscaler introduced a data security posture management (DSPM) solution that protects data both when it’s being transferred (in motion) and when it’s stored (at rest), ensuring it stays safe across channels like email, web, applications, and the cloud.
I recently met with Srikanth Nellore, Zscaler’s senior director and worldwide public cloud specialist for DSPM. In my latest ZKast, we discussed how Zscaler is addressing the challenges of data protection, gen AI, and data migration to public clouds. Below are highlights of the video:
The data security market is experiencing significant growth due to two main factors—cloud migration and increasing AI adoption—driving demand for data security solutions. First, organizations are shifting from traditional data centers to public cloud environments. Second, many are looking for ways to ensure that sensitive data in the cloud is protected and not accidentally accessed or used by AI models.
Organizations are changing their focus on data management. In the past, the priority was stopping sensitive data from leaving their environment. However, those using cloud and software-as-a-service (SaaS) tools now realize they don’t have a complete view of their data.
Zscaler addresses data security challenges through a comprehensive and centralized approach, targeting both data movement and storage. It does this by protecting data in motion and at rest. Zscaler has one system for all data, meaning it lets organizations define their sensitive data once and use the same definition everywhere—whether the data is on a device, in the cloud, or moving through networks.
Zscaler provides a complete view of data security by checking whether databases are encrypted, exposed to the internet, or linked to virtual machines with unpatched vulnerabilities. This end-to-end view helps organizations see their sensitive data and security measures in one place.
At the recent 2024 AWS re:Invent event, Zscaler announced a partnership with AWS to help businesses tackle a common challenge: managing their AWS accounts, particularly “shadow” accounts. These unmanaged accounts pose risks because organizations don’t know what data they contain or how it’s used. Zscaler’s solution identifies and secures them. For example, if a company has 100 AWS accounts but 50 are unmanaged, Zscaler identifies them and shows what’s stored in them—something most organizations currently lack.
Looking ahead, Zscaler envisions the AI security market evolving around three key trends:
Unified data protection where data is at rest and in motion will no longer be so much of a focus. Instead, the focus will shift to better understanding data and its use.
The current siloed approach will be replaced by all-in-one platforms that can locate and secure data across different environments. This change is already underway and is expected to grow quickly.
AI-driven security will make data protection smarter and faster. It will help monitor how employees use AI tools like ChatGPT, track their activities, and prevent the misuse of sensitive data.
In summary, the cloud continues to evolve, and using generative AI tools will create another step in adopting it. As this happens, organizations need to rethink how they protect their data. DSPM brings together data management and threat protection and should be a part of every organization’s cloud strategy.
Zeus Kerravala is the founder and principal analyst with ZK Research.
Read his other Network Computing articles here.
About the Author
You May Also Like