Zabezpe\u010denie d\u00e1t v cloude je s\u00fabor opatren\u00ed a technol\u00f3gi\u00ed navrhnut\u00fdch na ochranu inform\u00e1ci\u00ed, ktor\u00e9 s\u00fa ulo\u017een\u00e9 a spracov\u00e1van\u00e9 v cloudovom prostred\u00ed. Cloud computing umo\u017e\u0148uje pou\u017e\u00edvate\u013eom uklada\u0165, spracov\u00e1va\u0165 a pristupova\u0165 k d\u00e1tam prostredn\u00edctvom internetu pomocou vzdialen\u00fdch serverov, \u010do prin\u00e1\u0161a mnoho v\u00fdhod, ale tie\u017e prin\u00e1\u0161a rizik\u00e1 spojen\u00e9 s bezpe\u010dnos\u0165ou d\u00e1t. Zabezpe\u010denie d\u00e1t v cloude je k\u013e\u00fa\u010dov\u00e9 z nieko\u013ek\u00fdch d\u00f4vodov:<\/p>\n\n\n\n
Ochrana pred \u00fanikom d\u00e1t:<\/strong> Zabezpe\u010denie d\u00e1t v cloude je komplexn\u00e1 t\u00e9ma, ktor\u00e1 vy\u017eaduje integrovan\u00fd pr\u00edstup a kombin\u00e1ciu r\u00f4znych bezpe\u010dnostn\u00fdch opatren\u00ed a technol\u00f3gi\u00ed. Organiz\u00e1cie by mali pravidelne revizova\u0165 svoje bezpe\u010dnostn\u00e9 postupy a politiky a aktualizova\u0165 ich pod\u013ea najnov\u0161\u00edch hrozieb a predpisov.<\/p>\n\n\n\n Azure je cloudov\u00e1 platforma poskytovan\u00e1 spolo\u010dnos\u0165ou Microsoft, ktor\u00e1 pon\u00faka \u0161irok\u00fa \u0161k\u00e1lu slu\u017eieb na ukladanie, spracovanie a anal\u00fdzu d\u00e1t. Jednou z k\u013e\u00fa\u010dov\u00fdch slu\u017eieb pre zabezpe\u010denie a pr\u00e1cu s d\u00e1tami v Azure je Office Purview.<\/p>\n\n\n\n Office Purview<\/strong> je slu\u017eba poskytovan\u00e1 v r\u00e1mci platformy Azure, ktor\u00e1 sl\u00fa\u017ei na objavovanie, klasifik\u00e1ciu, ochranu a spr\u00e1vu d\u00e1t v r\u00f4znych zdrojoch a syst\u00e9moch, vr\u00e1tane d\u00e1t v cloudov\u00fdch a hybridn\u00fdch prostrediach, ako je Office 365, SharePoint, OneDrive, Microsoft Teams a \u010fal\u0161ie.<\/p>\n\n\n\n Ni\u017e\u0161ie s\u00fa pop\u00edsan\u00e9 niektor\u00e9 k\u013e\u00fa\u010dov\u00e9 prvky a met\u00f3dy zabezpe\u010denia d\u00e1t v Azure prostred\u00ed, s d\u00f4razom na Office Purview:<\/p>\n\n\n\n Office Purview je teda komplexn\u00e1 slu\u017eba, ktor\u00e1 organiz\u00e1ci\u00e1m poskytuje n\u00e1stroje a funkcionalitu pre spr\u00e1vu, ochranu a zabezpe\u010denie ich d\u00e1t v r\u00e1mci Azure prostredia a \u010fal\u0161\u00edch cloudov\u00fdch a hybridn\u00fdch prostred\u00ed, ktor\u00e9 pou\u017e\u00edvaj\u00fa. Integr\u00e1cia s \u010fal\u0161\u00edmi slu\u017ebami a n\u00e1strojmi v Azure umo\u017e\u0148uje organiz\u00e1ci\u00e1m vytvori\u0165 celkov\u00fa strat\u00e9giu zabezpe\u010denia d\u00e1t, ktor\u00e1 je efekt\u00edvna a komplexn\u00e1.<\/p>\n\n\n\n Tento \u010dl\u00e1nok diskutuje o met\u00f3dach zabezpe\u010denia d\u00e1t v Azure prostred\u00ed so zameran\u00edm na slu\u017ebu Office Purview. T\u00e1to slu\u017eba umo\u017e\u0148uje organiz\u00e1ci\u00e1m klasifikova\u0165, ochra\u0148ova\u0165 a sledova\u0165 ich d\u00e1ta v r\u00e1mci r\u00f4znych cloudov\u00fdch a hybridn\u00fdch prostred\u00ed. Office Purview poskytuje n\u00e1stroje na detekciu citliv\u00fdch d\u00e1t, automatizovan\u00fa anal\u00fdzu metad\u00e1t, integr\u00e1ciu s \u010fal\u0161\u00edmi n\u00e1strojmi a auditovanie, \u010do pom\u00e1ha organiz\u00e1ci\u00e1m lep\u0161ie spravova\u0165 a chr\u00e1ni\u0165 ich d\u00e1ta v digit\u00e1lnom prostred\u00ed.<\/p>\n","protected":false},"author":1,"featured_media":687,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[86],"tags":[87,112],"class_list":["post-686","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","tag-azure","tag-bezpecnost"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=686"}],"version-history":[{"count":8,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/686\/revisions"}],"predecessor-version":[{"id":2448,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/686\/revisions\/2448"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/687"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
– \u0160ifrovanie d\u00e1t<\/strong>: Jedn\u00fdm z k\u013e\u00fa\u010dov\u00fdch prvkov ochrany d\u00e1t v cloude je \u0161ifrovanie. \u0160ifrovanie d\u00e1t zais\u0165uje, \u017ee d\u00e1ta s\u00fa preveden\u00e9 do ne\u010ditate\u013enej podoby pre neopr\u00e1vnen\u00e9 osoby, pokia\u013e by boli nejak\u00fdm sp\u00f4sobom kompromitovan\u00e9. Existuj\u00fa r\u00f4zne formy \u0161ifrovania, vr\u00e1tane \u0161ifrovania na \u00farovni disku, \u0161ifrovania prenosu d\u00e1t (napr. pomocou protokolu HTTPS) a \u0161ifrovania na \u00farovni aplik\u00e1cie.
– Kontrola pr\u00edstupu:<\/strong> Spr\u00e1va pr\u00edstupov\u00fdch pr\u00e1v je \u010fal\u0161\u00edm k\u013e\u00fa\u010dov\u00fdm aspektom ochrany d\u00e1t v cloude. Organiz\u00e1cie by mali ma\u0165 mechanizmy na riadenie, kto m\u00e1 pr\u00edstup k ur\u010dit\u00fdm \u00fadajom a ak\u00e9 oper\u00e1cie s nimi m\u00f4\u017eu vykon\u00e1va\u0165. To zah\u0155\u0148a vyu\u017eitie ident\u00edt a opr\u00e1vnen\u00ed, dvojitej autentiz\u00e1cie, politiky pr\u00edstupu a \u010fal\u0161\u00edch met\u00f3d.
– Monitoring a auditovanie:<\/strong> D\u00f4le\u017eit\u00fdm prvkom ochrany d\u00e1t v cloude je monitorovanie a auditovanie d\u00e1tov\u00fdch tokov a oper\u00e1ci\u00ed. Syst\u00e9my monitorovania umo\u017e\u0148uj\u00fa organiz\u00e1ci\u00e1m sledova\u0165, kto m\u00e1 pr\u00edstup k d\u00e1tam, ak\u00fdm sp\u00f4sobom s\u00fa d\u00e1ta pou\u017e\u00edvan\u00e9 a \u010di doch\u00e1dza k ak\u00fdmko\u013evek podozriv\u00fdm aktivit\u00e1m, ktor\u00e9 by mohli nazna\u010dova\u0165 \u00fanik d\u00e1t.
Dodr\u017eiavanie predpisov a \u0161tandardov:<\/strong>
– Ch\u00e1panie a implement\u00e1cia predpisov: <\/strong>Organiz\u00e1cia mus\u00ed ma\u0165 jasn\u00fd preh\u013ead o predpisoch a \u0161tandardoch, ktor\u00e9 sa na ne vz\u0165ahuj\u00fa v oblasti ochrany d\u00e1t. Napr\u00edklad v Eur\u00f3pe mus\u00ed organiz\u00e1cia re\u0161pektova\u0165 GDPR, zatia\u013e \u010do v oblasti zdravotn\u00edctva v USA je d\u00f4le\u017eit\u00fd \u0161tandard HIPAA. Ka\u017ed\u00fd z t\u00fdchto predpisov stanovuje ur\u010dit\u00e9 po\u017eiadavky na ochranu d\u00e1t, ktor\u00e9 musia by\u0165 splnen\u00e9.
– Implement\u00e1cia vhodn\u00fdch opatren\u00ed:<\/strong> Na z\u00e1klade po\u017eiadaviek predpisov a \u0161tandardov organiz\u00e1cie implementuj\u00fa vhodn\u00e9 bezpe\u010dnostn\u00e9 opatrenia, ktor\u00e9 zaistia, \u017ee d\u00e1ta s\u00fa spr\u00e1vne chr\u00e1nen\u00e9. To m\u00f4\u017ee zah\u0155\u0148a\u0165 \u0161ifrovanie, kontrolu pr\u00edstupu, vedenie auditov a \u010fal\u0161ie.
Ochrana pred kybernetick\u00fdmi hrozbami:<\/strong>
– Firewally a antiv\u00edrusy: <\/strong>Organiz\u00e1cie \u010dasto vyu\u017e\u00edvaj\u00fa firewally a antiv\u00edrusov\u00e9 programy na ochranu svojich cloudov\u00fdch prostred\u00ed pred r\u00f4znymi typmi kybernetick\u00fdch hrozieb, ako s\u00fa malware, ransomware a botnets.
– Bezpe\u010dnostn\u00e9 aktualiz\u00e1cie a zapl\u00e1tanie: <\/strong>D\u00f4le\u017eit\u00fdm prvkom je pravideln\u00e9 aktualizovanie a zapl\u00e1tanie softv\u00e9ru a syst\u00e9mov. To pom\u00e1ha eliminova\u0165 zn\u00e1me bezpe\u010dnostn\u00e9 chyby, ktor\u00e9 by mohli by\u0165 zneu\u017eit\u00e9 kybernetick\u00fdmi \u00fato\u010dn\u00edkmi.
Bezpe\u010dnostn\u00e9 \u0161kolenia zamestnancov: <\/strong>V\u00e4\u010d\u0161ina kybernetick\u00fdch \u00fatokov vyu\u017e\u00edva \u013eudsk\u00fd faktor. Preto je d\u00f4le\u017eit\u00e9 poskytova\u0165 zamestnancom pravideln\u00e9 \u0161kolenia zabezpe\u010denia, aby boli schopn\u00ed rozpozna\u0165 potenci\u00e1lne hrozby, ako s\u00fa phishingov\u00e9 e-maily alebo soci\u00e1lne in\u017einierstvo.
Zaistenie integrity a dostupnosti d\u00e1t:<\/strong>
– Z\u00e1lohovanie d\u00e1t: <\/strong>Pre zaistenie integrity a dostupnosti d\u00e1t je d\u00f4le\u017eit\u00e9 pravidelne vykon\u00e1va\u0165 z\u00e1lohy d\u00e1t a ma\u0165 mechanizmy na obnovu d\u00e1t v pr\u00edpade potreby.
– Redundancia d\u00e1t:<\/strong> Ma\u0165 redundantn\u00e9 syst\u00e9my a z\u00e1lohovacie mechanizmy zais\u0165uje, \u017ee d\u00e1ta zostan\u00fa dostupn\u00e9 aj v pr\u00edpade v\u00fdpadku jedn\u00e9ho alebo viacer\u00fdch serverov alebo zariaden\u00ed.
D\u00f4vera pou\u017e\u00edvate\u013eov:<\/strong>
Transparentnos\u0165 a komunik\u00e1cia: Organiz\u00e1cie by mali transparentne komunikova\u0165 so svojimi u\u017e\u00edvate\u013emi o opatreniach, ktor\u00e9 prij\u00edmaj\u00fa na ochranu d\u00e1t, a poskytova\u0165 im inform\u00e1cie o bezpe\u010dnostn\u00fdch postupoch a politik\u00e1ch.
D\u00f4veryhodnos\u0165 a spo\u013eahlivos\u0165 poskytovate\u013eov cloudov\u00fdch slu\u017eieb:<\/strong> Pou\u017e\u00edvatelia sa \u010dasto spoliehaj\u00fa na poskytovate\u013eov cloudov\u00fdch slu\u017eieb, aby zaistili bezpe\u010dnos\u0165 ich d\u00e1t. Preto je d\u00f4le\u017eit\u00e9, aby poskytovatelia cloudov\u00fdch slu\u017eieb dodr\u017eiavali pr\u00edsne bezpe\u010dnostn\u00e9 \u0161tandardy a poskytovali transparentn\u00e9 inform\u00e1cie o svojich bezpe\u010dnostn\u00fdch opatreniach.<\/p>\n\n\n\nBezpe\u010dnos\u0165 v CLOUD prostrediach<\/h2>\n\n\n\n
\n
Office Purview umo\u017e\u0148uje organiz\u00e1ci\u00e1m klasifikova\u0165 svoje d\u00e1ta na z\u00e1klade citlivosti, d\u00f4le\u017eitosti alebo in\u00fdch krit\u00e9ri\u00ed. Klasifik\u00e1cia d\u00e1t umo\u017e\u0148uje lep\u0161ie porozumie\u0165 obsahu d\u00e1t a aplikova\u0165 vhodn\u00e9 bezpe\u010dnostn\u00e9 opatrenia a pravidl\u00e1 pr\u00edstupu.<\/li>\n\n\n\n
Office Purview poskytuje n\u00e1stroje na monitorovanie a spr\u00e1vu pr\u00edstupu k d\u00e1tam. To zah\u0155\u0148a sledovanie, kto m\u00e1 pr\u00edstup k ur\u010dit\u00fdm d\u00e1tam, a mo\u017enos\u0165 nastavenia pravidiel a polit\u00edk pre kontrolu a obmedzenie pr\u00edstupu.<\/li>\n\n\n\n
Pomocou Office Purview m\u00f4\u017eete identifikova\u0165 citliv\u00e9 d\u00e1ta, ako s\u00fa osobn\u00e9 \u00fadaje, finan\u010dn\u00e9 inform\u00e1cie alebo d\u00f4vern\u00e9 dokumenty, a sledova\u0165 ich pohyb a pou\u017eitie v r\u00e1mci organiz\u00e1cie.<\/li>\n\n\n\n
Office Purview automaticky analyzuje a spracov\u00e1va metad\u00e1t z r\u00f4znych zdrojov d\u00e1t, \u010do umo\u017e\u0148uje organiz\u00e1ci\u00e1m z\u00edska\u0165 lep\u0161\u00ed preh\u013ead o svojich d\u00e1tach a identifikova\u0165 mo\u017en\u00e9 bezpe\u010dnostn\u00e9 rizik\u00e1.<\/li>\n\n\n\n
Office Purview je integrovan\u00fd s \u010fal\u0161\u00edmi slu\u017ebami a n\u00e1strojmi v r\u00e1mci platformy Azure, ako je Azure Active Directory pre spr\u00e1vu ident\u00edt a pr\u00edstupu, Azure Sentinel na monitorovanie a anal\u00fdzu bezpe\u010dnostn\u00fdch udalost\u00ed alebo Azure Information Protection na \u0161ifrovanie a klasifik\u00e1ciu d\u00e1t.<\/li>\n\n\n\n
Office Purview umo\u017e\u0148uje organiz\u00e1ci\u00e1m vykon\u00e1va\u0165 auditovanie d\u00e1tov\u00fdch tokov, sledova\u0165 udalosti s\u00favisiace s d\u00e1tami a generova\u0165 spr\u00e1vy a reporty o pou\u017eit\u00ed d\u00e1t a dodr\u017eiavan\u00ed predpisov a \u0161tandardov.<\/li>\n<\/ol>\n\n\n\n
\n\n\n\nS\u00favisiace n\u00e1vody<\/h2>\n\n\n\n
\n\n