JULY - 2021ENTERPRISE SECURITY| | 19And when one considers the role of storage in data recovery (e.g., snapshots, replicas, and immutable copies); protecting storage & backup is now considered one of the most important layers of defense against ransomware.As such, it is time for more CISOs to acknowledge the risks, and properly secure these critical infrastructure layers, in order to thwart any attacks on their most valuable data.As the pioneers in the field, Continuity is moving the needle in the storage security space by launching the industry's first vulnerability management solution for storage & backup systems. This gives enterprises the peace of mind that their storage & backup systems can withstand ransomware and other attacks targeting their data. "Our mission is to increase awareness and industry knowledge around the importance of storage & backup security, and to provide practical recommendations on hardening storage and backup system configurations. We strive to share the values, recommendations and guidelines entailing storage & backup Doron Pinhassecurity," mentions Doron Pinhas, CTO of Continuity. The company began its journey by helping enterprises manage the maximum availability of mission-critical data centers. They have 16 years of expertise in proactively preventing outages and data-loss incidents on critical IT infrastructure. The company's proven technology and methodology encompass cyber-resilience, protecting mission-critical data residing in vulnerable storage systems against cyber-attacks, preventing data loss, and ensuring data recovery. Continuity's Resilience Assurance platform can automatically connect to enterprise IT environments and map the storage infrastructure exceptionally quickly. The platform automatically generates an inventory of storage systems, understands the configuration and relevant changes of stored security immediately, and gets continual gap analysis against the industry's best practices and regulatory frameworks. Complementing the clients' existing data-protection solutions, Continuity's StorageGuard is an enterprise-grade offering capable of securing data storage systems in any IT environment. StorageGuard proactively scans and identifies vulnerabilities and storage misconfigurations. It then automatically prioritizes the most urgent vulnerabilities, where organizations are most at risk.Imparting an added layer of security, the solution prevents attackers from penetrating storage and backup systems and reaching the mass of data stored there. Furthermore, the offering validates compliance to industry regulations and guidance around storage security, such as NIST, PCI DSS, and other regulatory bodies.In the first of its kind, Continuity published a new report that provides an analysis of the vulnerabilities and misconfigurations of enterprise storage systems.Owing to the value proposition of their offerings and the commitment to bridge the knowledge gaps around storage security, Continuity caters to a legion of clients, including Fortune 500 entities across various industries. With the help of its dedicated team of subject matter experts and R&D, the company will continue to leverage its expertise and help the community by bridging the knowledge gap in the storage security domain. ESKey findings6,300 discrete security issues detectedAn enterprise storage device has 15 vulnerabilitiesOut of 15 vulnerabilities, 3 are high or critical riskThe most common types of vulnerabilities include:1. Use of vulnerable protocols / protocol settings2. Unaddressed CVEs3. Access rights issues (over exposure)4. Insecure user management and authentication5. Insufficient logging
< Page 9 | Page 11 >