Company > Blog

News and views from the leading voice in secure digital transformation

More From This Author

Profile picture for user Rich Campagna

Rich Campagna

SVP, Cloud Protection Rich joined Zscaler with nearly 20 years’ experience in technology marketing, sales, and product management. Prior to Zscaler, Rich worked at Balbix, a risk-based vulnerability management startup, and at Bitglass, a Cloud Access Security Broker. Earlier in his career, Rich held product management leadership positions at F5 Networks and at Juniper Networks.
Take Cloud Native Security to the Next Level with Integrated DLP and Threat Intel
Zero Trust Architecture
5 Min read

Take Cloud Native Security to the Next Level with Integrated DLP and Threat Intel

Securing public cloud environments with tools like Cloud Native Application Protection Platforms (CNAPP) has become a top priority for InfoSec leaders. In fact, cloud security spending has increased (statistics show that...
2023 Top Cloud Security Predictions
Zero Trust Architecture
5 Min read

2023 Top Cloud Security Predictions

Cloud transformation has become a strategic advantage for many organizations, providing convenience, cost savings, and near-permanent uptimes as compared to on-premises infrastructure. At the same time, the move to the c...
Public Cloud Compliance
Zero Trust Architecture
3 Min read

Your Secret Weapon for Cloud Compliance? It’s CNAPP.

Proving cloud compliance is an ongoing burden that many in our industry must shoulder. It’s often a manual process that must be repeated on a regular basis. For many organizations, there is more than one set of governing...
CNAPP_divide_and_conquer
Zero Trust Architecture
3 Min read

Divide and Conquer Cloud Risk with CNAPP

In the 50’s BC, Roman General Julius Caesar was able to conquer Gaul, a wealthy, advanced region that today consists of France, as well as large swaths of Germany, Belgium and Italy. Caesar conquered this region by emplo...
A digital cloud
Zero Trust Architecture
4 Min read

Using CNAPP to Prioritize "Big Rocks" in Cloud Application Security

The late Stephen Covey is best known for his highly successful bestselling book, The 7 Habits of Highly Effective People. The habits in the book continue to have a profound impact on me, even 20 years after I read it. Ha...
An aerial view of a person using a laptop
Zero Trust Architecture
5 Min read

The Top 5 Reasons to Deploy a CNAPP Now

A Cloud Native Application Protection Platform (CNAPP) is a comprehensive security and compliance platform that helps enterprises build, deploy, and run secure cloud native applications. CNAPPs eliminate the need for poi...
A digital network
Zero Trust Architecture
3 Min read

Applying Knowledge Graphs to Public Cloud Security

Graph theory has an interesting history, dating back to the 1700s when Leonhard Euler, who you might remember from Differential Equations in college, solved the Konigsberg bridge problem. The bridge problem involved trav...
A digital cloud
Zero Trust Architecture
4 Min read

Prioritizing and Remediating Cloud Risk with CNAPP

In my discussions with customers regarding public cloud security, two important problems come up more than any others. Both are people- and process-related challenges that form the basis for why we built Posture Control....
A man working on a laptop
Zero Trust Architecture
6 Min read

Introducing Posture Control by Zscaler, our Cloud Native Application Protection Platform (CNAPP)

One of our cultural values at Zscaler is customer obsession, where every employee is expected to not only go beyond customer expectations but deeply understand customer challenges to better help solve them. Conviction ab...
A digital cloud with a lock inside
Zero Trust Architecture
3 Min read

Shift Left and Shift Down with CWPP

In recent years, Cloud Workload Protection Platforms (CWPPs) have become an integral part of many organizations’ cloud security strategies. CWPPs provide visibility and control over the behavior of cloud workloads, helpi...
A man in a suit looks out of a high rise building
People and Culture
4 Min read

Reflecting on One Year at Zscaler

I just finished my first year at Zscaler, and as many do when they cross such milestones, I spent a little time reflecting on how my time at the company has gone so far. My gut-level feeling is that it has flown by and t...
A digital lock
Zero Trust Architecture
4 Min read

CNAPP and SASE: Two Platforms to Rule Them All

In the early days of a new market in B2B information technology, it is common for the vendor community to step up with dozens of point products, each with their own points of differentiation within their niche. Nowhere i...
The Growing Importance of the Cloud Native Application Protection Platform (CNAPP)
Zero Trust Architecture
2 Min read

The Growing Importance of the Cloud Native Application Protection Platform (CNAPP)

Over the past five years, public cloud adoption has shifted from mostly lift-and-shift of traditional VM workloads to a single cloud provider to today’s reality of rapid adoption of cloud native services. Today, multi-cl...
zero trust for multicloud networking
Zero Trust Architecture
4 Min read

Leveraging Zero Trust for Multicloud Networking

The vast majority of organizations—92 percent according to one recent study—now use, or intend to use, multiple cloud providers. How they arrived there varies. Some organizations developed a centralized, thought-out mult...
Exactly who has access to cloud resources?
Zero Trust Architecture
3 Min read

CIEM: Who (Or What) Can Access This AWS S3 Bucket?

Who can access this public cloud resource? It’s a simple question. A question you might ask for a number of reasons. Perhaps there has been a security incident related to the resource, and this is part of the investig...
Cloud Data Protection
Zero Trust Architecture
2 Min read

How to Find Externally Exposed Sensitive Cloud Data

Publicly exposed cloud data has led to dozens of high-profile security incidents for some very large organizations over the past few years. Many of the most well-known incidents related to AWS S3 buckets containing sensi...
window with clouds
Zero Trust Architecture
3 Min read

CIEM: The Solution to the Top Four Public Cloud Permissions Challenges

Adopting the public cloud is both a challenge and an opportunity for security professionals. It’s an opportunity because it means a blank slate where mistakes of the past, that you might have been living with for years, ...
CIEM and CSPM | Zscaler Solution
Zero Trust Architecture
2 Min read

CIEM vs. CSPM: Which is Better for Reducing Public Cloud Risk?

The vast majority of public cloud security incidents are the customer’s own fault. Most prominent among these has been the huge number of AWS S3 bucket exposures over the last several years, with big names like Verizon, ...
cloud security
Zero Trust Architecture
4 Min read

Entitlements: The Most Overlooked Risk in the Public Cloud

Understanding the threat vectors that introduce business risk is an important early step towards developing a strong cybersecurity strategy. The same is true as your organization embraces the public cloud. There are five...
microsegmentation
Zero Trust Architecture
5 Min read

Microsegmentation 101

Microsegmentation can be a very effective cybersecurity strategy, helping to stop lateral threat movement, thereby minimizing the blast radius and damage caused by a cybersecurity incident. Despite its huge potential, se...
abstract attack surface
Zero Trust Architecture
2 Min read

Eighty-Seven Percent of Your Network Paths are Only Used by Attackers

The first phase of deploying microsegmentation on a corporate network involves taking full inventory of your environment, mapping workload communication paths, and then analyzing that data to determine what needs to be a...
buildings with clouds
Zero Trust Architecture
2 Min read

The Growing Importance of Multicloud Networking

For many organizations, cloud migration has resulted in an unprecedented transformation in computing, dramatically improving agility, automation, scalability, and performance. Unfortunately, the same can’t be said of con...
lights
Zero Trust Architecture
3 Min read

Cloud Data Protection: Six Critical Challenges To Tackle

Data Loss Prevention (DLP) is the first term that comes to mind for most when thinking about data protection, but DLP is really just one piece of a broader cloud data protection strategy. DLP must build on a solid founda...
cloud to workload
Zero Trust Architecture
3 Min read

Cloud-to-Internet Communications: Six Key Challenges

Cloud workloads need access to the internet for a variety of reasons, and opening that access introduces risk. While your workloads (hopefully) don’t have web browsers installed from which users are browsing suspicious w...
security lock
Zero Trust Architecture
3 Min read

Applying Zero Trust to Cloud Workloads

Over the last few years, zero trust has achieved widespread acceptance and adoption, and rightly so. The zero trust security model significantly reduces risk by minimizing the enterprise attack surface and limiting the a...
woman and data
Zero Trust Architecture
4 Min read

The Four Critical Protection Points in your Cloud Attack Surface

Your attack surface represents all of the different ways that an attacker can gain access to sensitive data and compromise applications that your organization is trying to protect. There are hundreds of different attack ...
typing hands
Zero Trust Architecture
3 Min read

Seven Reasons Why Your Cloud Security is a Mess

The term “viral” is most commonly associated with consumer-related content, apps, etc., that rapidly grow in popularity as they spread from one person to the next. But pioneering enterprise software companies have also b...
data protection
Zero Trust Architecture
3 Min read

Simplifying and Automating Cloud Workload Protection

As enterprises migrate from legacy data centers to the cloud, agility and speed often come at the expense of security. This doesn’t mean that the cloud is inherently insecure, however. In fact, Gartner has predicted that...

Related Articles

Explore More Topics