Dear OneIT,
The Information Security Office (ISO), along with the Cloud Operations (bCloud) team, is officially rolling out a new cloud security service using Prisma Cloud. This service is already monitoring all eligible accounts and starting November 1st, ISO will start sending tickets on security issues. As part of the ticketing rollout, security contacts will gain access to monitor the cloud environments registered to them.[1]
Benefits of this service:
- This service will work with the bCloud supported Amazon Web Services (AWS), Microsoft Azure (Azure), and Google Cloud Platform (GCP).[2]
- Extends intrusion detection and vulnerability scanning/monitoring to the cloud environments.
- Helps Campus cloud users meet MSSEI requirements 1.2, 1.3, 3.1, 4.1, 4.2, 4.3, 12.1, and 12.2.
- Improves your cloud security posture and reduces campus risk.
- Facilitates moving high-risk data into the cloud (P3 and P4 compliance).
- Provides cloud account administrators visibility into the security data used by ISO
To support security contacts with becoming familiar with the service and tool, training will be made available. We encourage everyone who is a security contact with cloud accounts to participate in one of the opportunities below.
Training Dates:
-
October 13th 2023, 1:00pm PST
-
November 13th 2023, 2:00pm PST
You can sign up for one of these sessions by completing the form at https://forms.gle/SyM7tv1SLFHA2mcf8
Thank you,
Information Security Office
Infrastructure Services
[1] Go to https://socreg.berkeley.edu/public/security_contacts/, click on the security contact(s) and check the “Cloud Accounts” tab for a list of associated cloud accounts.
[2] In GCP the service will be limited to certain, managed areas of the organizational tree. Most of the accounts that are not monitored will be class and individual accounts, though some accounts with heavy resource usage and low security requirements may be excluded as well.
Information Security Office