Cisco Systems - Federal News Network

Listen Live

Industry Exchange Cyber Image of Cisco's Peter Romness — Industry Exchange Cyber '24 Youtube Thumbnails (2)

Federal Insights

Industry Exchange Cyber 2024: Cisco’s Peter Romness on unifying your data security approach for cloud and on premise
Insight by Cisco

Start with your organization’s endpoints to secure users and data, recommends Cisco’s Peter Romness in a conversation with the Federal Drive’s Tom Temin. The same approach and tools can be applied to data on premise and in commercial clouds, he explains.

Cloud Computing

Cloud Exchange 2023: Cisco’s Peter Romness on why multicloud cyber requires end-to-end visibility
Insight by Cisco Systems

Commentary

Shared services: The path to success

Commentary

Are we missing the forest with IT modernization?

Ask the CIO

Exclusive Federal CIO exit interview: Defining moments turned into forcing functions

Reporter's Notebook

HHS IT executives finding new homes

Off the Shelf

The challenges of supply chain risk management

White House

Federal Drive

Richard Spires & Alan Balutis: Expectations for upcoming presidential transition

Federal Insights

Don't Risk IT!

Businessman Using Laptop Besides Multiethnic Colleagues

Commentary

Want culture change? Time to push baby boomers into retirement

<iframe title="YouTube video player" src="https://www.youtube.com/embed/ozQwalHQwGI?si=9GKVNrOl1GBHKiYp" width="560" height="315" frameborder="0" allowfullscreen="allowfullscreen"></iframe>

Cloud computing adoption by federal agencies has matured because IT staffs have gained more understanding of which workloads do well in the cloud and which don’t.

“Oftentimes, cloud is not as cost-effective as it first appears,” said Peter Romness, cybersecurity principal for the CISO Advisors Office at <a href="https://www.cisco.com/c/en/us/solutions/industries/government.html">Cisco</a>. “So a lot of organizations are starting to pull back some applications — for better cost control and better control of their own data.”

Yet, he observed, even when they operate both cloud instances and their own data centers, agencies want a unified way of handling data protection. This desire spawns the question: “How much visibility can you give to the people that have to manage to all of their data, no matter where it is?” Romness during Federal News Network’s<em> <a href="https://federalnewsnetwork.com/cme-event/federal-insights/federal-news-networks-industry-exchange-cyber-2024/"><strong>Industry Exchange Cyber 2024</strong></a></em>.

“At Cisco, we’ve worked really hard so that it’s almost transparent as to where your data is,” he added. “You have many of the same capabilities of managing it and protecting it, whether it’s in your data center or it’s in one of the major cloud provider data centers.”

Romness noted that customers also demand a unified set of tools for their cloud and on-premise environments to make management operations less complex.

And make no mistake, Romness cautioned: Security for an agency’s data in the cloud is ultimately the agency’s responsibility, no less than for on-premise data. Applications or data maintained insecurely on premise won’t be more secure by moving those applications to the cloud. And agencies, he said, need to use FedRAMP and other certifications to have assurance that cloud providers maintain a high level of security.
<h3>To unify security, start at the edge</h3>
Wherever housed, all datasets have one thing in common. They will be accessed with an application operating from an endpoint. That fact, Romness said, has given rise to the concept of the secure service edge (SSE), also called the security service edge.

“Security service edge takes the idea of, where does my control start and where does it end? And the place that I see it at most is on the endpoint,” Romness said.

SSE should protect users and their data as it goes in and out of their endpoints, he said. Security operations need “a secure channel to all users so that [security team] can see what’s going on in their machines and control it,” Romness said. “As part of that control, I want to not only protect data, but I also want to give good user experience.”

Providing a good user experience requires a risk-based policy approach, he said. Policy might let a user go directly to an external website or application but require a sign-on to a secure channel to access enterprise applications. For still other applications, policy might require multifactor authentication.

“I can granularly control access to every bit of data and applications that a user would go to and protect it along the way,” Romness said. “And that’s kind of what this whole secure service edge is all about.”

SSE is a state, but it requires a product stack to get there, Romness said.

“It’s a matter of putting the different tools in place,” he said. “Often, you already have the tools.” He cited Cisco’s AnyConnect client for endpoint devices, a virtual private network product enhanced with security controls and visibility into the security operations center. Only a small agent resides on the device that communicates to cloud-hosted security services, he said.

Whatever product stack you use, Romness said, it’s important to monitor and “be able to see what’s in your environment and be able to react to it. And having this secure connection is what’s important for that.”

<strong><em>Discover more tips and tactics shared during by cybersecurity experts on our </em><a href="https://federalnewsnetwork.com/cme-event/federal-insights/federal-news-networks-industry-exchange-cyber-2024/"><em>Industry Exchange Cyber event page</em></a></strong><strong><em>.</em></strong>

Federal Insights

Don’t Risk IT!

Cisco John Stewart

Federal Drive

John Stewart: Hackers and the security industry

Federal Acquisition, GSA

Technology

Security measure stirs defense contractors