保护IT：快速部署与敏捷替代方案.pptxVIP

[Protected]Non-confidentialcontentWithWebApplicationSecuritySecuringShadowIT

[Protected]Non-confidentialcontent“Theactofpurchasingorusing

technologyfortheworkplacewithout

theapprovalorknowledgeofthe

ITdepartmentiscalledShadowITGartner

?2014CheckPointSoftwareTechnologiesLtd.3[Restricted]ONLYfordesignatedgroupsandindividualsShadowIT=HardwareorSoftware

thatisnotsupportedbytheITDevicesServicesApplications[Protected]Non-confidentialcontent

[Protected]Non-confidentialcontent

[Protected]Non-confidentialcontentPerceptiononITSo,WhyDoPeopleShadowIT?PerceptiononShadowITBureaucraticSlowResponseFastDeploymentAgileAlternativesITbuildapplicationsservicestolast

withgoodarchitecturetofitallscenariosBusinessprocessarebuildfornow

toanswerimmediateneedsAnywhereAccessCollaborationProductivity

[Protected]Non-confidentialcontentMorethanthreequarters(76%)ofITdecisionmakerssaydepartmentsintheirorganizationaresourcingandcommissioningproductsandserviceswithnoinputfromtheITdepartmentSHADOWIT–ISHERERecentsurveyfromBTGlobalServices.n=1000

[Protected]Non-confidentialcontentBiggestSecurityConcernsabout

Shadow-ITforCIOsRecentsurveyfromBTGlobalServicesn=1000Securityofalltheorganizationsdata75%SecurityoftheentireITinfrastructure73%

[Protected]Non-confidentialcontentSecurityRisksof

ShadowITDataLossReliabilityVulnerabilitiesCompliance

[Protected]Non-confidentialcontentSecurityRisksof

ShadowITAnyregulationthatrequiresyoutoKNOWandUNDERSTANDyourITecosystemwouldhaveanissuewithShadowIT.PCI-DSS:

Fundamentalrequirementtodefinethescopeofnetworkenvironment.NERCCIP(CriticalInfrastructure):

RequiresITownerstounderstandtheirITenvironmentindetailSarbanesOxley/CobiT5:

Firmsmustrecorddataontheirinternalandexternaloperatingenvironment

[Protected]Non-confidentialcontentWhatisneed