Guide To Securing The Hybrid Cloud Datacenter in The Age of Digital Transformation
Guide To Securing The Hybrid Cloud Datacenter in The Age of Digital Transformation
Hybrid datacenter solutions address many of the security pain points enterprises
have with visibility, portability, and scalability for on-premises private and hybrid cloud
solutions.
Introduction AT A GLANCE
Today, many organizations are not only shifting more workloads to the
cloud but also modernizing their datacenters. They are creating hybrid
cloud environments with distributed workloads that must be secured. KEY STATS
Over the next five years, 59% of
The modern datacenter and network require the flexibility of a hybrid
organizations will shift more workloads to
cloud security architecture that uses automation and artificial intelligence the cloud while 65% will modernize their
to scale threat prevention performance on demand both on premises and datacenters.
in the cloud, with a simplified and unified management system. The hybrid
datacenter security challenge is one of the untold stories of the enterprise KEY TAKEAWAYS
digital transformation (DX) journey. » A modern hybrid datacenter solution can
extend shared architecture, rules, and
The DX journey for many organizations began pre-pandemic. During that era, policies from an on-premises private cloud
to the public cloud. This allows
enterprises were using broadband to connect the datacenter with public
organizations to maximize their
clouds. It was also the beginning of the "lift and shift" of workloads from the institutional investments and reduces
datacenter to the cloud. The shift to the cloud was the easy part. What's not retraining or upskilling.
easy is managing the cloud environment. DX was still in its infancy, the » Modern hybrid datacenters utilize
confidence and trust in cloud had yet to take hold, and many were still cloud-based platforms to provide artificial
tunneling or backhauling remote offices and users to the datacenter. intelligence and machine learning
automated threat management and
Once COVID-19 hit, transformation plans accelerated, but so did the response. These security policies not only
complexities. When work from home began globally, enterprises secured streamline and add efficiency for
Ops teams but also reduce the need for
the cloud using services such as infrastructure as a service (IaaS) and manual change controls, lowering the risk
software as a service (SaaS). At the same time, cybercriminals increased of human error and breaches as a result.
the frequency and sophistication of their cyberattacks. Cloud services were
not immune to attack. As security risks increased, both the benefits and
the complexities of leveraging cloud services became apparent.
All organizations need to ensure control over their data and business operations. However, those in highly regulated
industries such as financial services, healthcare, and retail must take additional measures, including keeping specific data
and workloads on premises to be compliant. An on-premises private cloud is the most efficient solution.
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
Modernizing the datacenter is no longer tied to only avoiding downtime; it's also about safety, security, resilience, and
optimization to meet the demands of the new digital economy. Make no mistake: These initiatives have a domino effect.
The aged "piecemeal" solutions that lead to complexities have run their course. In IDC's 2021 Datacenter Operational
Survey, enterprises identified the importance of modern datacenter initiatives, including making data security and
compliance the top priority (see Figure 1). Next is recognition that integrating a hybrid cloud solution into the modern
datacenter brings us closer to ensuring data security and compliance, improving network performance, improving
existing IT utilization rates, and many other benefits revealed in the survey. Organizations looking to optimize compute
and storage while taking advantage of managing changes via APIs should consider the benefits of "cloudifying" their
on-premises datacenters.
Optimization
Resilience
Safety, security
n = 400
Source: IDC's Datacenter Operational Survey, 2021
#US48616921 Page 2
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
In the past, many customers of security services may have waited until an emergency, such as a breach, occurred before
implementing a cloud posture or hygiene strategy. The reasons for waiting could be traced back to insufficient staffing,
skills/training, and complex tools. However, the rate of breaches has intensified. According to IDC's 2020 EDR and XDR
Survey, over the past two years, most organizations have had from one to six or more major security breaches
on premises, which involved spending significantly extra resources to rectify. As a result, these organizations then began a
shift to the cloud. IDC's 2020 Cloud Security Survey found that most organizations' IaaS cloud environments have also
been breached with the same outcome that involved the spending of significant extra resources to rectify. It should be
noted that less are reporting "no breaches" in the cloud compared with on premises. This is largely due to the shared
infrastructure model found in public clouds where the cloud service provider becomes a security custodian for varying
levels of responsibility beginning in IaaS with the physical, infrastructure, network, and virtualization. Additional services
are provided by third-party vendors.
In the cloud, complexity for the organization is reduced. However, the reality is that Infrastructures
enterprises are adopting a hybrid datacenter solution with a presence in both an
on-premises private cloud and an off-premises public cloud:
change. Data
residency changes.
» The digital transformation journey leads many organizations to migrate to several Threats change.
IaaS cloud environments. Each cloud has different configurations, Some of the key
code vulnerabilities, and maintenance issues. Clouds are different.
benefits that a
» Managing multiple disparate private and public clouds means learning how to hybrid datacenter
use multiple tools to orchestrate and secure those environments without a solution can deliver
unified visibility, management, and compliance platform.
are based on
» The cloud shared infrastructure model means user controls decline as the resiliency — no
deployment model migrates to services. In an on-premises private cloud, the
matter what
organization retains full control. In a public cloud, the provider takes on more
responsibility and risk as the organization moves to higher levels of virtualization. change brings.
In a typical SaaS offering, the user retains control over only identity and data.
The complexity increases as more SaaS instances are added.
» A private cloud and a public cloud are optimized for different workloads and applications.
#US48616921 Page 3
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
Wide range of deployment options (e.g., hybrid cloud) for their services
across regions, in networks and on dedicated hardware in locations of
our choice
0 5 10 15 20 25 30 35 40 45
(% of respondents)
n = 198
Source: IDC's Future Enterprise Resiliency and Spending Survey, Wave 7, July 2021
» Portability and being resilient to changing global business conditions are fundamental in business today.
Organizations need to look at cloud in a holistic way to meet these elasticity demands. Hybrid datacenter solutions
meet this need by utilizing virtualization and being focused on security that is flexible and scalable.
» Unified visibility, policies, and centralized controls are necessary to ensure the system health and safety of
customer data from the datacenter private cloud to public cloud IaaS, platform as a service (PaaS) (containers),
function as a service (FaaS) (serverless), or SaaS. This need has increased given the distributed nature of SaaS
environments and the work-from-anywhere environment.
» Modern hybrid datacenters utilize cloud-based platforms to provide artificial intelligence and machine learning
automated threat management and response. These security policies not only streamline and add efficiency for
Ops teams but also reduce the need for manual change controls, lowering the risk of human error and breaches as
a result.
» Redundancy and disaster control are part of the hybrid datacenter fabric.
The cybersecurity talent shortage has been made even worse by the pandemic. IT teams have been stretched, and IDC
has observed that traditional roles — for example, help desk administrators — are now spending time on nontraditional
IT tasks such as cybersecurity. Taking advantage of the cloud means there will be time for security practitioners to triage
alerts and breaches while leaving other tier 1 functions to the cloud service provider. Anytime organizations can reduce
risk and complexity, it's a win.
#US48616921 Page 4
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
To maintain the pace of innovation in order to protect workloads against threats and vulnerabilities, ease of use,
compatibility with existing cyber-risk management tools, and ease of implementing security as new workloads are
instantiated in development and production are essential.
Key Trends
Digital transformation investment is on pace with — and, in some cases, ahead of — pre-pandemic spend. But who are
the decision makers, and what are the investment and cost optimization activities?
Digital transformation has ushered in a new set of technology buyers. According to IDC's Worldwide IT Spending Guide,
50% of technology spending comes from outside the IT department and is driven by the line-of-business (LOB) buyers.
In general, they prioritize creating revenue, good customer experiences, and cost savings. In IDC's August 2021 Future
Enterprise Resiliency and Spending Survey, Wave 8, 774 respondents were asked the following question: In the wake of
developments during the COVID-19 pandemic, how would you assess where your organization is with respect to its
digital transformation compared to peers? The majority of respondents (29.5%) indicated that their DX initiatives are
initiated at the function or LOB level, with some connection to enterprise strategy. IDC also found that chief information
security officers (CISOs) are rarely included in DX discussions. This seems like a trend organizations should explore.
Cloud and datacenter activities are linked. As shown in Figure 3, resources are being allocated based on a five-year plan
for most organizations plotting out their cloud platform and datacenter strategies. In IDC's 2021 Datacenter Operational
Survey of 400 respondents, 59% of enterprises will shift more workloads to the cloud while 65% will modernize their
existing datacenters. Organizations know that they are only as strong as their weakest link. These actions demonstrate
the value and trust put into the hybrid datacenter model.
65%
59%
36%
21%
n = 400
Source: IDC's Datacenter Operational Survey, 2021
#US48616921 Page 5
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
The last trend, the one we are focused on the most, is the increase in breaches where organizations have multiple IaaS
cloud environments and how those security breaches positively correlate with the elapsed time in investigated triaged
alerts. The fewer breaches, response time goes up within an hour and vice versa. This stands to reason given the talent
shortage and increase in breaches due to advanced malware, which includes ransomware as a service.
#US48616921 Page 6
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
Organizations can also leverage Check Point Infinity SOC for advanced incident detection and response along with
Check Point's ThreatCloud global threat database, which consolidates threats that are local to the network and global.
Through ThreatCloud, Check Point leverages anonymized threat data from its own appliances and from external
resources such as law enforcement to collect and enhance threat intelligence. The dashboards and security metrics
offered in Infinity SOC are also used by the Check Point research team internally. The benefits of these platforms include
eliminating false positives and redundant alerts and, importantly, freeing up valuable personnel.
Check Point differentiates itself from the rest of the market by continuing to innovate, adding ecosystem partners, and
closing the cybersecurity gaps with strategic acquisitions, most recently Avanan. Integrating Avanan into the Check Point
portfolio provides a secure email security offering designed to protect the remote workforce.
Challenges
Check Point has done well in the on premises datacenter and network security marketplace with the Quantum family of
security appliances, Maestro Hyperscale Security Orchestrator, and Infinity-Vision Unified Security Management. As more
enterprises adopt the hybrid datacenter architecture, Check Point would benefit by continuing to grow its cloud security
products and services. Check Point has expanded its CloudGuard security offerings recently with acquisitions such as
Dome9 for posture management, Protego for serverless, and Avanan for email security. Check Point recently entered the
cloud container security market, but its first version lacked application control. Check Point container security does offer
URL filtering, threat prevention, and autonomous access policy. Check Point should continue to expand cloud security
features for applications, APIs, and microservices including containers and serverless functions.
Conclusion
IDC believes the hybrid datacenter is a "best of both worlds" scenario, taking advantage of modern datacenter and
hybrid cloud services and innovations. As companies begin their modernization and cloud journeys, they would do well
to work with a vendor that will help facilitate a multiyear plan and that values a DevSecOps approach and recognizes that
performance metrics should include trust as a key element. The hybrid datacenter market will continue to grow along
with hybrid cloud. Given the Check Point Hybrid Datacenter security portfolio enables enterprises to confidently secure
their cloud and datacenter environments under a single unified security management system, the company has a
significant opportunity for continued success.
#US48616921 Page 7
IDC VENDOR SPOTLIGHT Guide to Securing the Hybrid Cloud Datacenter in the Age of Digital Transformation
The content in this paper was adapted from existing IDC research published on www.idc.com.
IDC Research, Inc. This publication was produced by IDC Custom Solutions. The opinion, analysis, and research results presented herein are drawn from
140 Kendrick Street more detailed research and analysis independently conducted and published by IDC, unless specific vendor sponsorship is noted. IDC
Custom Solutions makes IDC content available in a wide range of formats for distribution by various companies. A license to distribute
Building B IDC content does not imply endorsement of or opinion about the licensee.
Needham, MA 02494, USA External Publication of IDC Information and Data — Any IDC information that is to be used in advertising, press releases, or promotional
T 508.872.8200 materials requires prior written approval from the appropriate IDC Vice President or Country Manager. A draft of the proposed
F 508.935.4015 document should accompany any such request. IDC reserves the right to deny approval of external usage for any reason.
Twitter @IDC Copyright 2022 IDC. Reproduction without written permission is completely forbidden.
idc-insights-community.com
www.idc.com
#US48616921 Page 8