Safeguarding Data in the Cloud Era: Insights from Cybersecurity Expert Cheyenne Lightfoot

As a cybersecurity expert with over a decade of experience focused on cloud data security, Cheyenne Lightfoot has seen the threat landscape evolve dramatically. From her vantage point as an account executive helping businesses prevent breaches and achieve compliance, she has a deep understanding of what it takes to protect sensitive information in our increasingly digital world. I sat down with Cheyenne to get her insights on the biggest cybersecurity challenges facing organizations today and her advice for staying secure.

The State of Cybersecurity in 2024

The numbers paint a stark picture of the scale of the cybersecurity crisis. According to IBM‘s Cost of a Data Breach Report, the average cost of a data breach reached $4.35 million in 2022, a 12.7% increase from the prior year. Ransomware attacks surged by 41%, with victims paying an average of $812,000 to recover their data. And with the rise of remote and hybrid work models, the attack surface for most organizations has expanded significantly.

"The pandemic forced a lot of abrupt changes in how we work and where data is accessed from," Lightfoot noted. "Many businesses had to scramble to support remote workers and stand up cloud infrastructure, often without proper security controls in place. Cybercriminals were quick to exploit those gaps."

Other top cyber threats on Lightfoot‘s radar for 2024 include:

• Supply chain attacks: Bad actors are increasingly targeting software suppliers and other third-party providers to infiltrate downstream customers. The SolarWinds hack that impacted 18,000 organizations was a wake-up call for the industry.
• Insider threats: Whether due to malicious intent or simple negligence, employees and contractors with access to sensitive data pose a major risk. The Verizon DBIR found that 20% of breaches in 2022 involved an insider.
• AI-powered attacks: Cybercriminals are starting to leverage machine learning to automate and scale their efforts. MIT researchers showed that AI can be used to alter malware code to evade detection by antivirus software.

Best Practices for Cloud Security

For businesses embracing cloud computing, Lightfoot emphasizes the importance of a shared responsibility model. "Your cloud provider secures the underlying infrastructure, but securing your data and who can access it is on you," she explained. "You need to treat the cloud with the same rigor as you would an on-premises data center."

Her top recommendations for cloud security include:

1. Data classification and segregation: Not all data is equally sensitive. Segment your data by sensitivity level and apply granular access controls based on the principle of least privilege.
2. Encryption: Encrypt data both at rest and in transit using industry standard algorithms like AES-256. Use a different encryption key for each customer‘s data.
3. Network monitoring: Implement tools to monitor network traffic for suspicious activity and potential threats. Set up alerts for anomalous behavior.
4. Penetration testing: Conduct regular pen tests to identify vulnerabilities in your cloud environment and remediate them promptly.
5. Compliance: Achieve relevant compliance certifications like SOC 2, ISO 27001, and HIPAA to demonstrate your security controls to customers and partners.

"A lot of organizations are also using CASB (Cloud Access Security Broker) solutions now," Lightfoot added. "They sit between users and cloud applications to enforce security policies and provide visibility into shadow IT."

Securing the Remote Workforce

With the pandemic normalizing work-from-home arrangements, cybersecurity perimeters have dissolved. Lightfoot advises several measures for securing remote workers:

• Mandate the use of company-issued devices that are properly configured and patched
• Require multi-factor authentication (MFA) for access to all business applications
• Deploy a Zero Trust network access model to validate users and devices before granting access
• Use a secure remote access solution like a virtual private network (VPN) or virtual desktop infrastructure (VDI)
• Provide security awareness training to employees on topics like phishing and handling sensitive data

"It‘s also critical to have an incident response plan that‘s been practiced with your remote workforce," Lightfoot stressed. "Everyone needs to know their role and how to quickly triage and contain an incident when people aren‘t all in the same location."

Managing Cyber Risk Holistically

While strong cybersecurity controls are essential, no organization is immune to breaches. Lightfoot is seeing more businesses explore cyber insurance as a way to transfer some of that risk. "The insurance market is still maturing, but it can be a valuable backstop to help cover the financial impact of a breach," she said. "More carriers are also offering pre-emptive services like threat intel and incident response."

However, she cautions that cyber insurance premiums are rising sharply, in part due to the increase in ransomware claims. Marsh‘s Global Insurance Market Index showed cyber rates increasing by 110% in the US in Q4 2021. "Insurers are becoming much more selective and conducting deeper assessments of a company‘s security controls before underwriting a policy," Lightfoot warned. "You can‘t treat insurance as a replacement for investing in your own cybersecurity posture."

The Cybersecurity Skills Gap

Perhaps the biggest challenge in cybersecurity today is the massive skills shortage. A 2022 survey by (ISC)2 found a global gap of 3.4 million cybersecurity workers. "We simply don‘t have enough skilled defenders to keep up with the volume and complexity of threats," Lightfoot lamented. "Addressing that gap will require a major investment in training and upskilling, as well as finding ways to attract more diverse talent to the field."

She sees automation powered by AI and machine learning as part of the solution. "We need to be able to scale our defenses and sift through massive amounts of security telemetry more efficiently. Well-trained AI models can help identify threats and even respond to certain types of incidents autonomously."

Lightfoot is also excited about the potential of blockchain technology to bolster security. "Blockchain‘s distributed ledger could enable more secure, decentralized identity management and supply chain tracking. And quantum computing could one day render current encryption methods obsolete, so we need to be investing in post-quantum cryptography now."

The Future of Cybersecurity

As our reliance on technology continues to grow, Lightfoot believes cybersecurity will only become more crucial. "Our digital lives and the digital economy depend on trust and resilience in our IT systems. Maintaining that trust in the face of ever-evolving cyber threats is one of the most important challenges we face as a society."

She predicts that cybersecurity will become even more embedded into the fabric of business operations and product development going forward. "We need to move away from treating security as a compliance checkbox and start seeing it as a fundamental enabler of digital transformation. That means making it a core part of every IT decision and every employee‘s job, not just the CISO‘s problem."

Lightfoot also hopes to see a continued focus on international collaboration and public-private partnerships to combat cybercrime. "Threat actors don‘t respect borders, so neither can our defenses. We need more mechanisms for cross-border law enforcement operations, intelligence sharing, and holding nation-states accountable for harboring cybercriminals."

Despite the daunting challenges ahead, Lightfoot remains optimistic about the future of cybersecurity. "I‘m continually inspired by the brilliant, dedicated professionals working to keep us all safe online. By working together and staying vigilant, I believe we can create a more secure and resilient digital world for generations to come."

For more insights from Cheyenne Lightfoot, follow her on Twitter @CheyenneLightfoot and read her other blog posts on the latest cyber threats and best practices.