Cloud security for assets

We are Telefónica Tech

Solutions

Industries

Success Stories

ESG

News

Extended Detection & Response

Cloud Security

Move to the cloud with confidence

The digital transformation of companies is intimately linked to the adoption of the public cloud, which introduces a new paradigm of shared responsibility with providers (CSPs) and new security challenges

Download brochure

According to Gartner, 95% of cloud security issues are generated by the client itself. The radical change in the provision of services based on programmatic interfaces, the lack of visibility of workloads uploaded to the cloud or the Agile methodologies and DevOps practices associated with the cloud, where security often takes a backseat, make it quite easy to expose cloud infrastructure due to security problems such as configuration errors or vulnerabilities.

Telefónica Tech's Cloud Security is a security solution designed to identify, assess and manage all cloud challenges and threats in a comprehensive way. Companies need to protect workloads throughout their entire lifecycle, from the coding and CI/CD phases to the execution phase, when they are deployed in the cloud. The concept of “shift-left security” emerges, allowing organizations to build applications securely without losing agility.

OUR EXPERTS

#ProudToBeTech

"Gartner predicts that, in the next few years, 75% of organizations will adopt a digital transformation model based on the cloud as a fundamental platform. In this scenario, it is essential to respond to the growing demand for managed security services that adapt to the dynamic nature of the cloud."

Sergio Moya Asenjo

Cloud Security Pre-Sales Engineer
"In the Operations team we have managed to unify knowledge of cloud and security, which is essential to address the complexity, both technological and process-related, intrinsic to cloud security."

Laura Archilla Martín

Cloud Security Operations Team Lead

OUR VALUE PROPOSITION

Our service

The Managed Cloud Security service, Cloud Security, from Telefónica Tech aims to return control of security in the public and hybrid cloud to CISOs and security managers through capabilities that allow assets and applications to be protected throughout their life cycle.

The service is based on native cloud security technologies such as CNAPP (Cloud Native Application Protection Platform). On top of the technology, the service offers a set of processes and deliverables that will allow our clients to have a high-level view of cloud security based on KPIs and see its evolution based on continuous improvement.

What does it allow?

Posture Governance: for visibility and governance of assets deployed in the cloud. This capability provides a continuous security assessment according to a policy framework adapted to the customer's context.
Monitoring: runtime protection of workloads running applications. Detection of suspicious activity such as Malware & cryptomining or communication with disreputable IPs. A 24/7 triage and treatment of alerts.
Shift-left: bastioning of workloads, vulnerability scanning and best practices on compute workloads deployed in the cloud.
Workload Super-Vision: This capability moves security controls to the left: to the development and CI/CD phases. It includes scanning of container logs, code repositories or CI, among other functionalities.

BENEFITS FOR YOUR COMPANY

Deliverables dynamics

Our service delivers regular reports with breaches and vulnerabilities of cloud infrastructure and applications throughout their lifecycle. These reports are accompanied by an action plan and high-level indicators that will allow to see the state of security, its evolution and help determine the action plan, in order to continuously improve security.

24/7 monitoring

A 24/7 security alert triage system is included for security alerts that require proactive treatment, discarding false positives and including recommendations for remediation, in case the threat is confirmed.

The service is more than a security tool

Forget about managing complex cloud security platforms. This service offers a high-level view based on KPIs that allows you to monitor cloud security and see the evolution based on continuous improvement.

OUR DIFFERENTIAL VALUE

Our team is responsible for the delivery and configuration of the CNAPP platform used by the service, providing close guidance and support throughout the deployment and operation process.
Our Cloud Security team is focused on cloud security and integrated into iSOC.
Cloud Security is a customized service that adapts to the customer's context, both in the configuration of controls and policies as well as in remediation actions.