Connect with us

Tech

SLA promises, security realities: Navigating the shared responsibility gap | Computer Weekly

Published

on

SLA promises, security realities: Navigating the shared responsibility gap | Computer Weekly


The shared responsibility model (SRM) plays a central role in defining how security and operational duties are split between cloud providers and their customers. However, when this model intersects with service level agreements (SLAs), it introduces layers of complexity.

SLAs typically cover metrics like uptime, support response times and service performance, but often overlook critical elements such as data protection, breach response and regulatory compliance. This creates a responsibility gap, where assumptions about who is accountable can lead to serious blind spots. For instance, a customer might assume that the cloud provider’s SLA guarantees data protection, only to realise that their own misconfigurations or weak identity management practices have led to a data breach.

Organisations may mistakenly believe their provider handles more than it does, increasing the risk of non-compliance, security incidents and operational disruptions. Understanding the nuances between SLA commitments and shared security responsibilities is vital to safely leveraging cloud services without undermining resilience or regulatory obligations.

The reality of the SRM and SLAs

The SRM fundamentally shapes the scope and impact of SLAs in cloud environments. Let’s quickly understand the reality of cloud providers’ SRM.

  • Cloud providers secure the infrastructure they manage; you ensure what you deploy.
  • Customers are responsible for data, configurations, identities and applications.
  • Cloud providers often cite the model to deflect blame during breaches. 
  • Customers must secure the stack themselves, as cloud doesn’t equal safe-by-default -visibility, policy and controls are still on you.

While an SLA guarantees the cloud provider’s commitment to “the security of the cloud”, ensuring the underlying infrastructure’s uptime, resilience and core security, it explicitly does not cover the customer’s responsibilities for “security in the cloud.” This means that even if a provider’s SLA promises 99.99% uptime for their infrastructure, a customer’s misconfigurations, weak identity management or unpatched applications (all part of their responsibility) can still lead to data breaches or service outages, effectively nullifying the perceived security and uptime benefits of the provider’s SLA. Therefore, the SRM directly impacts the adequate security and availability experienced by the enterprise, making diligent customer-side security practices crucial for realising the full value of any cloud SLA.

Several controls should be a part of a comprehensive approach to gaining access to innovative cloud technology while safeguarding your enterprise:

  • Due diligence, gap analysis and risk quantification: Conduct an exhaustive review of the cloud provider’s security posture beyond just the SLA. Request and scrutinise security whitepapers, independent audit reports (eg FedRAMP, SOC 2 Type 2, ISO 27001) and penetration test summaries. Perform a detailed risk assessment that quantifies the potential impact of any SLA shortfalls on your business operations, data privacy and regulatory obligations. Understand precisely where the provider’s “security of the cloud” ends and your “security in the cloud” responsibilities begin, especially concerning data encryption, access controls and incident response.
  • Strategic contract negotiation and custom clauses: Engage in direct negotiation with the cloud provider to tailor the SLA to your infrastructure requirements. For significant contracts, cloud providers should be willing to include custom clauses addressing critical security commitments, data handling procedures, incident notification timelines and audit rights that exceed their standard offerings. Ensure the contract includes indemnification clauses for data breaches or service disruptions directly attributable to the provider’s security failures, and clearly define data portability and destruction protocols for an effective exit strategy.
  • Implement robust layered security (defence-in-depth): Recognise that the shared responsibility model necessitates your active participation. In addition to the provider’s native offerings, implement additional security controls covering, among others, identity and access management (IAM), cloud security posture management (CSPM), cloud workload protection (CWP), data loss prevention (DLP) and zero trust network access (ZTNA).
  • Enhanced security monitoring and integration: Integrate the cloud service’s logs and security telemetry into your enterprise’s security information and event management (SIEM) and security orchestration, automation and response (SOAR) platforms. This centralised visibility and correlation capability allows your security operations centre (SOC) to detect, analyse and respond to threats across both your on-premises and cloud environments, bridging any potential gaps left by the provider’s default monitoring.
  • Proactive governance, risk and compliance (GRC): Update your internal security policies and procedures to explicitly account for the new cloud service and its specific risk profile. Map the provider’s security controls and your compensating controls directly to relevant regulatory requirements (eg GDPR, HIPAA, PCI DSS). Maintain meticulous documentation of your risk assessments, mitigation strategies and any formal risk acceptance decisions.

By adopting these strategies, IT and IT security leaders can confidently embrace innovative cloud technologies, minimising inherent risks and ensuring a strong compliance posture, even when faced with SLAs that don’t initially meet every desired criterion.

The bottom line

Make sure to follow the principle “own your security posture” by implementing customised security policies and not relying solely on your cloud provider. Treat security as a core component of your infrastructure and not an add-on.  Adopt and deploy unified controls to align security strategies across all environments to strengthen defences against the expanding threat landscape, thereby reducing risk and boosting resilience. Shared responsibility doesn’t mean shared blame, it means shared diligence.

Aditya K Sood is vice president of security engineering and AI strategy at Aryaka.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

This Unique Air Fryer Cooks Your Food in Heat-Proof Glass—It’s on Sale Right Now

Published

on

This Unique Air Fryer Cooks Your Food in Heat-Proof Glass—It’s on Sale Right Now


Want to be the hero of your next Super Bowl party? Check out the Ninja Crispi Portable Glass Air Fryer, an intriguing twist on the air fryer that’s a perfect option for air frying your favorite frozen snacks at your next potluck—it’ll help you win the day by frying up a batch of wings at your buddy’s house. It’s currently marked down as low as $150 on Amazon, depending on your color preference.

  • Photograph: Matthew Korfhage

  • Photograph: Matthew Korfhage

  • Photograph: Matthew Korfhage

Ninja

Crispi Portable Glass Air Fryer

Basically, every other air fryer works by circulating hot air through a purpose-built, egg-like basket. But the genius of the Crispi is that its glass fryer tray doubles as a serving tray and a sealable fryer dish. The heating element and fan live in a hat-like unit with clamps that attach to heat-shock-resistant borosilicate glass frying baskets with ceramic-coated trays inside. While the actual “fry” setting can be a little intense, the “bake” setting works perfectly for softer foods like veggies. Either way, the results spoke for themselves in our testing, with crispy fries and nuggets even outside in freezing temperatures.

Our reviewer Matthew Korfhage found the “recrisp” setting particularly useful for bringing leftover pizza slices and noodle dishes back to life. That makes it a great choice for office lunchtimes, where you can leave the Crispi itself in a drawer at your desk and ferry leftovers from home. You only have to wash a normal glass dish, rather than the entire fry basket like most options, so this would also work well for dorms or even camping, if there’s an outlet nearby.

Of course, you’ll have to make a few compromises in order to take your precious air-fried snacks with you on the go. While the glass container does a surprisingly good job of insulating the food during cooking, the temperature range isn’t quite as exact as some of our other favorite air fryers.

You’ll also have to be a little bit flexible on your aesthetic choices. While the pastel-hued Cherry Crush, Frosted Lilac, and Ginger Snap colors are marked down to the lower $150 price, the less pronounced Sage, Stone, and Cyberspace Gray are slightly higher at $160, but still under the usual $180 price tag. There’s also a Racing Green Bundle that includes all three sizes of glass crisping tray for $190, if you think you’ll end up buying them anyway.



Source link

Continue Reading

Tech

All-Clad Is the Expensive Gold Standard. The Factory Seconds Sale Makes It More Affordable

Published

on

All-Clad Is the Expensive Gold Standard. The Factory Seconds Sale Makes It More Affordable


All-Clad Deals used to be difficult to find, but thankfully, the Factory Seconds Sale has come back around for a little while. These sales tend to only last for a few days—this one expires at midnight tomorrow, January 21—though they sometimes are extended. In any case, these sales offer a reliable way to score a solid deal on All-Clad kitchenware, which is normally very expensive. We love and swear by All-Clad, as do many professional chefs.

Factory Seconds are products with minor imperfections that still perform as intended. Sometimes an item is “second quality,” meaning it might have some blemishes or dents. Sometimes an item just has packaging damage. Every product page lists the exact reason for the “Factory Seconds” designation, as well as its warranty; most items are backed by All-Clad’s lifetime warranty. Note that you’ll need to enter your email to access the sale, and flat-rate shipping adds $10. Orders ship in 10 to 15 business days. We’ve highlighted our favorite deals below.

Make sure to check out our related buying guides, including the Best Chef’s Knives, Best Meal Kit Subscriptions, and Best Coffee Makers.

Best All-Clad Factory Seconds Deals

All-Clad D5 Essentials Pan

Photograph: All-Clad

We include this pan at every possible opportunity when it’s on sale because it’s such a solid kitchen companion. Many WIRED Reviews team members have it in their kitchens. The shape allows you to make a pan sauce or sear up some steaks. The high walls prevent grease splatter, and you can use it like a wok or Dutch oven in addition to a regular ol’ pan. It’s dishwasher-safe for easy cleanup.

This roaster is a staple in my kitchen during the colder months of the year. It’s safe to use in the oven and under the broiler at up to 600 degrees Fahrenheit, and it has enough room for roasting meats or vegetables in large portions (it can hold up to a 20-pound turkey). You can also transfer it to the stovetop to whip up a quick sauce with the roasted drippings. The manufacturer recommends hand-washing.

This hard-anodized nonstick pan is versatile enough to make just about anything. Eggs, vegetables, a pan sauce, and stir-fries are all contenders. It’s made with a PTFE coating. Make sure not to get it too hot, and use nonstick-safe tools and hand-wash it to preserve that coating for as long as you can.

This nonstick pot has a PTFE coating and therefore should be hand-washed. It can be used to simmer, stew, or steam thanks to its tall sides and included lid. It also comes with a steamer basket for all of your vegetable and/or dumpling needs. The pieces nest together for easier storage.

So technically, this thing isn’t a spatula, but in my house that’s what we’d call it. Whether you’re Team Turner or not, nonstick-safe tools can be difficult to come by and they’re crucial to keep around if you’re cooking on nonstick cookware. I like having backups so I don’t have to constantly do dishes. This turner is heat-safe up to 425 degrees Fahrenheit and will come in handy for everything from eggs to grilled cheese sandwiches.

The exact reasoning for this being a Factory Seconds item isn’t listed, but a good cast-iron skillet is indispensable for every home chef. It has two pour spouts for easier siphoning or serving, and the finish is resistant to scratches and stains. The skillet is oven-safe up to 650 degrees Fahrenheit.

What Are All-Clad Factory Seconds?

The Factory Seconds Event is run by Home and Cook Sales, an authorized reseller for All-Clad and several other cookware brands. The items featured in the sale (usually) have minor imperfections, like a scuff on the pan, a misaligned name stamp, or simply a dented box. Every product on the website lists the nature of the imperfection in the title (e.g., packaging damage). You’ll need to enter an email address to access the sale.

While the blemishes vary, the merchant says all of the cookware will perform as intended. Should any issue arise, nearly every All-Clad Factory Seconds product is backed by All-Clad’s limited lifetime warranty. (Electric items have a slightly different warranty; check individual product pages for details.) We’ve used more than a dozen Factory Seconds pots, pans, and accessories, and they’ve all worked exactly as advertised. Just remember that all sales are final, and note that you’ll have to pay $10 for shipping. It’s also worth noting that the “before” prices are based on buying the items new, but we still think it offers a good indication of how much you’re saving versus the value you’re getting.

Power up with unlimited access to WIRED. Get best-in-class reporting and exclusive subscriber content that’s too important to ignore. Subscribe Today.



Source link

Continue Reading

Tech

‘Veronika’ Is the First Cow Known to Use a Tool

Published

on

‘Veronika’ Is the First Cow Known to Use a Tool


Justice for Far Side cartoonist Gary Larson: A team of scientists has observed, for the first time, a cow using a tool in a flexible manner. The ingenuity of “Veronika,” as the animal is called, shows that cattle possess enough intelligence to manipulate elements of their environment and solve challenges they would otherwise be unable to overcome.

Veronika is a pet cow in Austria. Her owners don’t use her for meat or milk production. Nor was she trained to do tricks; on the contrary, for the past 10 years she has developed the ability to find branches in the grass, choose one, hold it with her mouth, and scratch herself with it to relieve skin irritation.

Until now, only chimpanzees had convincingly demonstrated the ability to employ tools to improve their living conditions. Recent studies also point to whales as the only marine animals capable of using complex tools. This European cow is about to join that exclusive group of ingenious animals.

Videos of Veronika circulating online caught the attention of veterinary researchers in Vienna. They visited the farm, conducted behavioral tests, and carried out controlled trials. “In repeated sessions, they verified that her decisions were consistent and functionally appropriate,” a press release stated.

Veronika’s abilities go beyond simply using a point to scratch herself, explain the authors of the study published in Current Biology. In the tests, the cow was offered different textures and objects, and she adapted according to her needs. Sometimes she chose soft bristles and other times a stiffer point. The researchers say she used different parts of the same tool for specific purposes and even modified her technique depending on the type of object or the area of ​​her body she wanted to scratch.

Although they consider using a tool to relieve irritation “less complex” compared to, for example, using a sharp rock to access seeds, the specialists greatly value Veronika’s ability. For now, she demonstrates that she can decide which part of the tool is most useful to her. The finding suggests that we have underestimated the cognitive capacity of cattle, according to the authors.

Why Is Veronika So Skilled?

The team acknowledges that it’s still too early to say that all cows can use tools with the same skill as Veronika. For now, the researchers are trying to determine how this cow developed an awareness of her surroundings.

Researchers believe her particular circumstances played a role. Veronika has lived for 10 years in a complex, open environment filled with manipulable objects—a very different experience from that of cattle raised for milk and meat production. These conditions fostered exploratory and innovative behavior, they say. They are now searching for more videos of cattle using tools to gather further evidence about their cognitive abilities.

“Until now, tool use was considered a select club, almost exclusively for primates (especially great apes, but also macaques and capuchins), some birds like corvids and parrots, and marine mammals like dolphins. Finding it in a cow is a fascinating example of convergent evolution: intelligence arises as a response to similar problems, regardless of how different the animal’s ‘design’ may be,” said Miquel Llorente, director of the Department of Psychology at the University of Girona, who was not involved in the study, in a statement to the Science Media Centre Spain.



Source link

Continue Reading

Trending