--- title: It's time to take cloud security to the next level description: Are Cloud Security Posture Management (CSPM) tools enough to prevent cloud-related data breaches? We think not. Upgrade your CSPM today! image: https://www.cloudnation.nl/hubfs/pexels-pixabay-270700.jpg --- Nederlands [ English](https://www.cloudnation.nl/en/inspiration/blogs/it-is-time-to-take-cloud-security-to-the-next-level) an IG&H company [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) Diensten Migreer [ Cloudmigratie Efficiënt en zorgeloos naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment Voordat je migreert naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator Het ideale startpunt voor elke cloudreis. ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie Benut de knowhow van onze beste experts ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie Moderniseer, versimpel en transformeer apps. ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance Security & compliancy voor goede nachtrust. ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center Verminder frictie & accelereer development ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud Combineer het beste van private en public. ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity Benut de cloud optimaal en creëer waarde. ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services Breng rust met mission-critical beheer ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen Benut van de kracht van artificial intelligence ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone Een veilige en schaalbare fundering voor je data operaties ](https://www.cloudnation.nl/diensten/data-landing-zone) [![aws-grey](https://www.cloudnation.nl/hubfs/aws-grey.svg) ](https://www.cloudnation.nl/partners/amazon-web-services) [![azure-grey](https://www.cloudnation.nl/hubfs/azure-grey.svg) ](https://www.cloudnation.nl/partners/microsoft) [![google-cloud-grey](https://www.cloudnation.nl/hubfs/google-cloud-grey.svg) ](###) [![oracle-ci-grey](https://www.cloudnation.nl/hubfs/oracle-ci-grey.svg) ](https://www.cloudnation.nl/partners) [ Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches Onze **cloud-native specialisten** hebben diepgaande **knowhow** en relavantie **ervaring** opgedaan in allerlei branches. [ Branches overzicht ](https://www.cloudnation.nl/branches/) [ Fintech Realiseer Fintech innovaties versneld met hoogstaande security. ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV Blijf toekomstbestendig en transformeer je applicaties door de cloud optimaal te benutten. ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie Verbeter de operationele efficiëntie, veiligheid en schaalbaarheid van je productie- en fabricageprocessen. ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives Versnel je groei en innovatie met onze *knowhow*, specifiek afgestemd op digitale voorlopers. ](https://www.cloudnation.nl/branches/digital-natives) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Plan een call ](https://www.cloudnation.nl/afspraak-maken) [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) Diensten Migreer [ Cloudmigratie Efficiënt en zorgeloos naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment Voordat je migreert naar de cloud. ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator Het ideale startpunt voor elke cloudreis. ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie Benut de knowhow van onze beste experts ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie Moderniseer, versimpel en transformeer apps. ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance Security & compliancy voor goede nachtrust. ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center Verminder frictie & accelereer development ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud Combineer het beste van private en public. ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity Benut de cloud optimaal en creëer waarde. ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services Breng rust met mission-critical beheer ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen Benut van de kracht van artificial intelligence ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone Een veilige en schaalbare fundering voor je data operaties ](https://www.cloudnation.nl/diensten/data-landing-zone) [![aws-grey](https://www.cloudnation.nl/hubfs/aws-grey.svg) ](https://www.cloudnation.nl/partners/amazon-web-services) [![azure-grey](https://www.cloudnation.nl/hubfs/azure-grey.svg) ](https://www.cloudnation.nl/partners/microsoft) [![google-cloud-grey](https://www.cloudnation.nl/hubfs/google-cloud-grey.svg) ](###) [![oracle-ci-grey](https://www.cloudnation.nl/hubfs/oracle-ci-grey.svg) ](https://www.cloudnation.nl/partners) [ Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches Onze **cloud-native specialisten** hebben diepgaande **knowhow** en relavantie **ervaring** opgedaan in allerlei branches. [ Branches overzicht ](https://www.cloudnation.nl/branches/) [ Fintech Realiseer Fintech innovaties versneld met hoogstaande security. ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV Blijf toekomstbestendig en transformeer je applicaties door de cloud optimaal te benutten. ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie Verbeter de operationele efficiëntie, veiligheid en schaalbaarheid van je productie- en fabricageprocessen. ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives Versnel je groei en innovatie met onze *knowhow*, specifiek afgestemd op digitale voorlopers. ](https://www.cloudnation.nl/branches/digital-natives) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Plan een call ](https://www.cloudnation.nl/afspraak-maken) [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) [ Let's talk ](https://www.cloudnation.nl/afspraak-maken) Menu [![_CN_Monogram_Color_White_rgb](https://www.cloudnation.nl/hubfs/_CN_Monogram_Color_White_rgb.png "Back to home") ![preview__CN_Logo_Left_Color_Black_rgb](https://www.cloudnation.nl/hubfs/preview__CN_Logo_Left_Color_Black_rgb.png "Back to home") ](https://www.cloudnation.nl) [ Let's talk ](https://www.cloudnation.nl/afspraak-maken) Menu Diensten Migreer [ Cloudmigratie ](https://www.cloudnation.nl/diensten/cloud-migratie) [ Cloud Readiness Assessment ](https://www.cloudnation.nl/diensten/cloud-readiness-assessment) [ Cloud Landing Zone Accelerator ](https://www.cloudnation.nl/diensten/cloud-landing-zone-accelerator) [ Advies & strategie ](https://www.cloudnation.nl/diensten/strategie) Verbeter & moderniseer [ Applicatiemodernisatie ](https://www.cloudnation.nl/diensten/applicatiemodernisatie) [ Cloud Security & Compliance ](https://www.cloudnation.nl/diensten/cloud-security) [ Cloud Competence Center ](https://www.cloudnation.nl/cloud-center-of-excellence-cloudnation) Integreer [ Hybrid cloud ](https://www.cloudnation.nl/diensten/hybrid-cloud) [ Netwerk & connectivity ](https://www.cloudnation.nl/diensten/networking-connectivity) [ Managed Cloud Services ](https://www.cloudnation.nl/diensten/managed-cloud-services) Data & AI [ AI oplossingen ](https://www.cloudnation.nl/ai-artificial-intelligence) [ Data Landing Zone ](https://www.cloudnation.nl/diensten/data-landing-zone) [Diensten overzicht ](https://www.cloudnation.nl/diensten) [ Succesverhalen ](https://www.cloudnation.nl/succesverhalen) Branches [ Fintech ](https://www.cloudnation.nl/branches/finance-fintech) [ ISV ](https://www.cloudnation.nl/branches/isv) [ Productie-industrie ](https://www.cloudnation.nl/branches/productie-industrie) [ Digital Natives ](https://www.cloudnation.nl/branches/digital-natives) [Branches overzicht ](https://www.cloudnation.nl/branches/) [ Inspiratie ](https://www.cloudnation.nl/inspiratie) Over ons [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ Onze partners ](https://www.cloudnation.nl/partners) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) [Let's talk ](https://www.cloudnation.nl/afspraak-maken) Nederlands [ English](https://www.cloudnation.nl/en/inspiration/blogs/it-is-time-to-take-cloud-security-to-the-next-level) [Terug ](https://www.cloudnation.nl/inspiratie/blogs/) [Cloud Security](https://www.cloudnation.nl/inspiratie/blogs/tag/cloud-security) [Kennis](https://www.cloudnation.nl/inspiratie/blogs/tag/kennis) [Partners](https://www.cloudnation.nl/inspiratie/blogs/tag/partners) # It's time to take cloud security to the next level ![](https://www.cloudnation.nl/hubfs/CloudNation%20logo%20in%20zwarte%20cirkel.png) **Safet Acifovic** Cloud Security Lead Publicatiedatum: 11 november 2020 ![](https://www.cloudnation.nl/hs-fs/hubfs/pexels-pixabay-270700.jpg?width=1600) [mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/it-is-time-to-take-cloud-security-to-the-next-level](mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/it-is-time-to-take-cloud-security-to-the-next-level) It is expected that the the global cloud computing market is to grow to more than [$800 billion by 2025](https://www.globenewswire.com/news-release/2020/08/21/2081841/0/en/Cloud-Computing-Industry-to-Grow-from-371-4-Billion-in-2020-to-832-1-Billion-by-2025-at-a-CAGR-of-17-5.html). At the same time, [Gartner](https://www.gartner.com/smarterwithgartner/is-the-cloud-secure/) has predicted that through 2025, at least 99% of cloud security failures will be the customer's fault. It should be clear by now that we live in a cloud-first world and that cloud (data) security is becoming increasingly important as we move data centers, business processes, applications and more to the cloud. It is time to step up cloud security!   ## It should be clear now that we live in a cloud-first world Many enterprises have already upgraded their cloud security by transitioning from manual checks to automatic tools. And this is often where Cloud Security Posture Management (CSPM) tools come in. A CSPM is a tool that continuously checks cloud platform accounts for compliance and infrastructure misconfigurations. These tools verify automatically whether your cloud configurations are following security best practises and compliance standards such as CIS (AWS or Azure), PCI, HIPAA or GDPR. This is a big leap forwards compared to a couple of years ago when no one had any visibility on whether their cloud environment was secure or compliant.   CSPMs play an important role in helping organizations stay compliant with major frameworks and address accidental risks, such as missettings that allow unauthorized access or misconfigured network security groups. CSPMs are becoming a necessary aspect of cloud security.   However, we should ask ourselves: is the CSPM approach enough? And will it be enough tomorrow? Or next year? Features are added every day by the cloud service providers. Cloud environments and cloud workloads are becoming more and more complex. By 2025, the cloud computing market will grow to more than $800 billion. We should pay very serious attentions to cloud security.    So, is the CSPM approach enough? We believe that the standard definition of CSPM is lacking. It only provide limited visibility. Let me demonstrate this with an example. Let's say we have a web server which is connected to the Internet and our internal virtual networks. The server has never been patched (it was neglected), and as a result it got infected with a crypto miner. As it stands today, none of the available CSPMs will give an alert. These issues are simply outside the scope of current CSPMs. A CSPM will only check your cloud (infrastructure) configurations.   ## None of the available CSPMs will give an alert Despite the fact that misconfigurations in the OS and application layer, such as software vulnerabilities are critical parts of your whole cloud security posture, they are not handled by today's CPSMs. A CPSM will detect a misconfigured data bucket or an overly permissive network security group, but it will not alert on patch issues, malware and weak authentication problems that are present on the server.   Cloud security posture management means managing the posture of your entire cloud environment, throughout the whole technology stack. CSPMs need to be supplemented with better defense and threat detection capabilities in order to truly address all aspects of security and compliance for your workloads in the cloud.   You should ask yourself: is my current cloud security approach / CSPM tool / security solution, the right one? To help you find an answer to this question, please consider the following four questions. 1. **How many tools will I need to avoid misconfigurations in the cloud?** You will need a macro view of the level of drift from established policies and the risks in the cloud. You will also need to be able to detect common use cases, such as misconfigured data buckets, vulnerable web instances, infected assets and machines that hold critical data but are publicly accessible. A centralized view of your assets and server in one place is essential in order not to miss any security issues. 2. **Will I be able to get results in context?** Security teams are overwhelmed with alerts, and fixing security issues comes down to context that enables prioritization. You need a good understanding of what is going on, and the ability to contextualize the findings. It is simply not enough that security solutions alert to potential areas of risk or threat. The security solution must  have an automated way to prioritize those alerts and assess threats in context. 3. **What is your Total Cost of Ownership?** When considering the various solutions for assessing your security in the cloud, ask yourself: how long will my team need to work in order to implement and administer the tool? How much intra-organization friction will it cause? Will I get good enough coverage after spending this amount of time? You need tools that contribute to the required collaboration necessary to achieve security and compliance in the cloud, without wasting resources. 4. **Are these tools born in the cloud and are they cloud-native?** Cloud security differs from what we are used to with on-premise environments. Mitigation strategies must also be adapted and relevant in the cloud. The same issues can have different a meaning in the cloud. We have asked ourselves these questions and we have concluded that we needed something different for our clients, something new and 'next-gen'. Securing the cloud requires complete visibility into all cloud assets, compromised resources, vulnerable software, and misconfigurations without the cost, complexity, and limitations of agents. In our search for a next-gen cloud security solution that can do all this, we came across **Orca Security**. ![](https://www.cloudnation.nl/hs-fs/hubfs/orca_logo-03-png-1.png?width=372&name=orca_logo-03-png-1.png) Delivered as a SaaS solution, Orca Security uses its patent-pending SideScanning™ technology to deliver instant and agentless deeper visibility into your cloud environment and ease compliance efforts. The solution works out-of-band and scans the entire cloud estate, down to the data layer to identify malware, vulnerabilities, misconfigurations, leaked passwords, sensitive data (PII) and more.   We are excited to announce that we have partnered with Orca Security to help you achieve full-stack visibility across your cloud environments, such as AWS, Azure and GCP.   ## Free trial with our HealthCheck Each [CloudNation HealthCheck](https://www.cloudnation.nl/cloudnation-healthcheck/) comes with a free trial1 of Orca Security to give you the opportunity to experience full-stack visibility yourself. The CloudNation HealthCheck is a security assessment we have developed to help you identify misconfigurations and other security risks within your cloud environment. It's quick, complete and comes with actionable recommendations to help you start fixing right away. Interested? For more information on Orca Security or our HealthCheck, please leave your contact information below or gives us a [call.](https://www.cloudnation.nl/connect/)   ## Contact us       1Terms and conditions may apply #### Meer weten? Neem contact op met Bart. We delen graag kennis en koffie. [Let's talk ](https://www.cloudnation.nl/contact) ![CloudNation, Contact met Bart](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/CloudNation%2c%20Contact%20met%20Bart.jpg) [mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/it-is-time-to-take-cloud-security-to-the-next-level](mailto:info@example.com?&subject=&body=https://www.cloudnation.nl/inspiratie/blogs/it-is-time-to-take-cloud-security-to-the-next-level) ![](https://www.cloudnation.nl/hubfs/CloudNation%20logo%20in%20zwarte%20cirkel.png) **Safet Acifovic** Cloud Security Lead Publicatiedatum: 11 november 2020 ## Meer kennis, updates en howto's over de cloud [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/Right%20Banner%20size%20%281%29-Sep-30-2025-02-06-34-0092-PM.png) Kennis Nieuws ## AI succesvol integreren: Antwoorden op de meest voorkomende uitdagingen Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/en/inspiration/blogs/ai-succesvol-integreren-antwoorden-op-de-meest-voorkomende-uitdagingen) [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/Right%20Banner%20size%20%282%29-3.png) Kennis Nieuws AI ## Waarom Cloud de strategische enabler is van een AI-First business Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/waarom-cloud-de-strategische-enabler-is-van-een-ai-first-business) [![](https://7979774.fs1.hubspotusercontent-na1.net/hubfs/7979774/How%20Roseman%20Labs%20expanded%20their%20platform%20reach%20with%20AWS%20expertise%20from%20CloudNation%20%282%29-2.png) Azure Kennis Nieuws ## Optimaliseren van cloud security kosten in Azure Lees verder ](https://www.cloudnation.nl/inspiratie/blogs/optimaliseren-van-cloud-security-kosten-in-azure) Volg ons op social: ##### Contact Kosterijland 10 3981 AJ Bunnik [![blue-chat-icon](https://www.cloudnation.nl/hubfs/Development%20assets/blue-chat-icon.svg)   Chat met ons ](https://www.cloudnation.nl/inspiratie/blogs/it-is-time-to-take-cloud-security-to-the-next-level#hs-chat-open) [![blue-phone-call](https://www.cloudnation.nl/hubfs/Development%20assets/blue-phone-call.svg)   +31 (0)6 48 016 896 ](tel:0031648016896) [![blue-mail](https://www.cloudnation.nl/hubfs/Development%20assets/blue-mail.svg)   info@cloudnation.nl ](mailto:info@cloudnation.nl) ![iso 27001](https://www.cloudnation.nl/hubfs/iso%2027001.svg)  ![gdpr compliant](https://www.cloudnation.nl/hubfs/gdpr%20compliant.svg)   ![iso 27001](https://www.cloudnation.nl/hubfs/iso%2027001.svg)  ![gdpr compliant](https://www.cloudnation.nl/hubfs/gdpr%20compliant.svg)   ##### Bedrijf [ Over CloudNation ](https://www.cloudnation.nl/over-ons) [ Werken bij ](https://www.cloudnation.nl/werken-bij) [ CloudNation Academy ](https://www.cloudnation.nl/cloud-academy) [ Contact ](https://www.cloudnation.nl/contact) ##### Partners [ Alle partners ](https://www.cloudnation.nl/partners) [ AWS ](https://www.cloudnation.nl/partners#aws-partner) [ Azure ](https://www.cloudnation.nl/partners#microsoft-azure-partner) [ En heel veel meer... ](https://www.cloudnation.nl/partners) ##### Kennis, howto's en inzichten van CloudNation direct in je mailbox