{"id":67302,"date":"2023-05-16T17:32:28","date_gmt":"2023-05-16T16:32:28","guid":{"rendered":""},"modified":"2023-05-16T17:32:31","modified_gmt":"2023-05-16T16:32:31","slug":"improve-your-security-hygiene-with-cloud-security-posture-management-cspm","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/technetuk\/2023\/05\/16\/improve-your-security-hygiene-with-cloud-security-posture-management-cspm\/","title":{"rendered":"Improve your Security Hygiene with Cloud Security Posture Management (CSPM)"},"content":{"rendered":"
\"A<\/figure>\n\n\n\n

Hi everyone!<\/p>\n\n\n\n

As I write this piece, I\u2019m on a plane to Singapore. I\u2019m super excited to have been selected to speak at Black Hat Asia, which \u2013 if you\u2019re not familiar with it \u2013 is one of the biggest and well-known security conferences globally. I attend conferences and speak all the time, but if I\u2019m honest, I\u2019m a little bit nervous about this one!<\/p>\n\n\n\n

We\u2019ve had a couple of security events in quick succession in the past few months: Microsoft Secure<\/a> and then RSA<\/a>, so there have been plenty of exciting announcements to talk about in the security space. I\u2019m not going to talk to you about Microsoft Security Copilot<\/a>: not because I don\u2019t think it\u2019s an exciting product, but because it\u2019s been hogging the limelight a bit (however, if you do want to find out more about it, watch our announcement here<\/a>).<\/p>\n\n\n\n

Have you heard about the product formerly known as Azure Security Center? It\u2019s now called Defender for Cloud<\/a> – the name changed about a year ago – and they have recently released their Defender for Cloud CSPM (Cloud Security Posture Management) module. In my humble opinion, CSPM capabilities are very underrated and everyone needs to be looking at getting this kind of capability into their environment. <\/p>\n\n\n\n

Essentially, CSPM tools will automatically assess your environment and will tell you where you can better your security hygiene across your IaaS and PaaS services (e.g. turn on MFA, apply patches, close ports, etc.) and \u2013 if you want them to – remediate it automatically. Research shows that around 95% of security breaches would have been mitigated by good security hygiene practices, but as any IT Pro\/sysadmin knows, it\u2019s hard to do in real life. CSPM tools really help with this ongoing challenge of keeping on top of security hygiene.<\/p>\n\n\n\n

Defender CSPM GA’d some new features that you may not have looked at before, such as a graph-based attack path which allows you to run queries to explore risk and surfaces contextual threat data to help prioritise remediation and uncover risk of sensitive data exposure and potential data breaches. We\u2019ve expanded the posture management capabilities to be data-aware, to help prevent sensitive data exposure and to fix issues both in code and runtime. <\/p>\n\n\n\n

In even better news, the Defender CSPM module free trial has been extended until August, so you have no excuse to not go and try it out! And before you ask: no, it\u2019s not just for Azure environments. Defender CSPM can provide posture monitoring across Azure, AWS, GCP and on-premises environments so you can assess your whole environment. You can read more about Defender CSPM here<\/a>.<\/p>\n\n\n\n

I think I got too much into the CSPM capabilities this time, but security hygiene is so, so important and these tools make it much easier to implement and manage so I want to spread the good word of CSPM.<\/p>\n\n\n\n

I wish you a fantastic May; don\u2019t forget that security is everybody\u2019s responsibility!<\/p>\n\n\n\n

Learn more<\/h3>\n\n\n\n