Enterprise Cloud Security Offering by GCP

In era of rapid digital transformation, when every organization is navigating the cloud journey, one of the major challenges they encounter is to ensure security of the workloads throughout the entire cloud migration lifecycle (before migration-during migration- after migration). The primary challenges enterprises face vis-à-vis cloud security include, constantly evolving cloud threat vectors, de-centralized view of cloud security posture, managing runtime security vulnerabilities and blending security with speed of cloud transformation

LTIMindtree’s Enterprise Cloud Security Offering is augmented by Google Cloud Protection and provides end-to-end managed security services that enable organizations to navigate their cloud transformation journey in a secured, accelerated, agile manners.

LTIMindtree’s Cloud Security Offereings

Cloud Security Posture & Risk Management (CSPRM)

Security & regulatory compliance hygiene
Policy engine / Security control framework
Beyond-Corp / Zero-Trust Arch (JIT/JEA)
Scan, detect, auto-response
Playbook/Automation, IAM
Data Security, Encryption, Network

Cloud Workload Protection & Risk Management (CWPRM)

Depth/Breadth protection
Vulnerability management, WAF/DDoS
Endpoint security (AV/ EDR)
DLP, Security incident detection
Securing Key/Secret/ Certificate
Shield VM, File integrity checks

Container Security & Risk Management

Protecting Container/ GKE/GC(A)R
Container Image/Artifact vulnerability scan
Container hardening
Security hygiene, Pod security
Trusted image assurance
Security incident detection (cluster, node)

Cloud Defense SIEM(Chronicle- Backstory)

Data source on-boarding
Data lake, Logging/Audit
Detection engine (MITRE ATT&CK)
Integrate TI, UEBA, ITSM, SOAR
Performing threat hunting, IoC/IoA detection
Security incident management, Playbook

Our Value Proposition

Visibility and Coverage

Real-time, centralized 360-degree view for entire cloud estate.

Managing Workload Protection

Secured endpoint protection with best-in-class EDR/AV, vulnerability scanning solution.

Prevention from Data Leakage

Assurance of data security by applying encryption (at-rest, in-transit), data leak prevention policy.

Protection from Unauthorized Access

Elimination of over-permissive, deprecated, external user access to workload.

Handling of Security incident

Real-time incident monitoring and response through customized MITRE ATT&CK detection rules, playbook, workbook, threat intelligence, UEBA.

Automation, Speed & Efficiency

Real-time, fully automated security incident/event/ hygiene detection, qualification, and response with

Workload Security-by-design

Secure landing platform with zero-trust network architecture, blueprint, template for protecting cloud resource from external/internal attacks & data breaches.

Delivering Workload Compliance

Assurance of workloads compliant with security and regulatory compliance standards, strengthens security hygiene, regulatory compliance hygiene, IAM hygiene, network hygiene, zero-trust arch, endpoint hygiene, IoT security hygiene, Kubernetes/container registry hygiene.

Google Cloud Security-Technology Landscape

SCC, SHA, CGCETD, CTD, Organization policyChronicle-BackstoryCloud Ops suite

Pub/SubBeyond-Corp Ent.IAP, ACM, VPC FWWeb Security ScannerContainer Analysis

Cloud DLP, IAMAnomaly DetectionNW IntelligenceNetwork SecurityWAF, Cloud Armor

Google Cloud