NextLabs Data Centric Security in the Hybrid Cloud

Cloud services offer flexibility and faster delivery of applications, but most organizations now operate in hybrid IT environments spanning on-premises systems, cloud services, and combinations of both, while also needing to share information securely with suppliers and partners. This creates compounded security and compliance challenges, including uncertainty about where data is stored and processed, potential access by unauthorized actors, lawful government access to cloud-held data without customer permission, intellectual property theft risks when using public services, and the impact of GDPR from May 2018 for organizations holding European personal data. Addressing these issues requires governance-led security supported by technology that provides visibility and consistent control across the entire hybrid landscape.

Cloud Access Security Brokers (CASBs) aim to meet parts of this need by detecting cloud service usage, controlling access to approved services, protecting data via classification and enforcement (often alongside DLP or rights management), reducing cyber risk, and supporting regulatory compliance with prebuilt capabilities. However, many CASBs focus primarily on cloud delivery, whereas a broader, information-centric approach is needed regardless of where data resides or which technologies are involved.

NextLabs provides data-centric security software (founded 2004; privately held; headquartered in San Mateo with multiple international offices) built on standards and a substantial patent portfolio. Its Data Centric Security Suite unifies entitlement management and enterprise digital rights management on a centralized policy platform (Control Center) that enforces dynamic, attribute-driven policies at runtime without modifying applications. Entitlement Management uses ABAC to make fine-grained, context-aware authorization decisions and can be extended via SDKs. Rights Management protects files as they move and are shared beyond the network perimeter across devices and applications. Smart Classifier automates discovery and classification across repositories and many file types. Audit and Compliance adds inventory, entitlement auditing, activity monitoring, dashboards, and out-of-the-box regulatory reporting. NextLabs integrates with major cloud services and enforces controls through SaaS enforcement points, but it does not detect shadow cloud usage and has limitations in out-of-the-box SaaS coverage.

• Many organizations operate hybrid IT environments with services delivered on-premises, through the cloud, or through both.
• Government authorities can legally require access to cloud-processed data without seeking permission from the cloud customer.
• GDPR came into force in May 2018 and affects organizations holding personal data relating to people in Europe.
• NextLabs was founded in 2004 and is a privately held company headquartered in San Mateo, California.
• NextLabs has offices in London, Hangzhou, Singapore, and Malaysia.
• NextLabs solutions incorporate 50 approved technology patents and more than 30 pending patents.
• NextLabs solutions are available as a cloud service and as on-premises software.
• NextLabs Smart Classifier supports file types including Word, Excel, PowerPoint, PDF, MSG, Visio, 2D & 3D CAD, rich media, and source code.
• NextLabs controls access to data held in cloud services including Microsoft Office 365, Google Apps, Box, Dropbox, AWS, and Azure.
• NextLabs Data Centric Security Suite does not provide tools to detect shadow cloud usage.

• “In order to meet these challenges, organizations need to take a governance led approach.”
• “This means taking an information centric approach to governance and security irrespective of where the data is stored or what IT technology is used.”
• “NextLabs dynamically applies the correct combination of user and data attributes across all systems and applications to protect data wherever it resides or moves.”
• “Policy changes can be made without modifying the application and are automatically enforced at run time.”
• “ABAC ensures that the most current information is used to make authorization decisions.”
• “Therefore, information can no longer be contained within the network perimeter.”
• “Legitimate users now require access to data at any time, from anywhere, and using any device.”
• “Accurately classifying data is a cornerstone to ensuring that sensitive data is adequately protected.”
• “Access controls are implemented independently of the application or the service that holds the data.”
• “An information centric approach to security and compliance is preferable to a technology centric one.”