Netskope, Inc. · NASDAQ:NTSK

Netskope — Technical Presentation (February 2016)

28 slides from Netskope's technical presentation, Feb 17, 2016

  1. Slide 1: Managing the Challenges of the Cloud Under the New EU GDPR

    Managing the Challenges of the Cloud Under the New EU GDPR Sue Goltyakova, Netskope Andy Aplin, Netskope Netskope © 2015, Optiv Security Inc. © 2015

  2. Slide 2: EU General Data Protection Regulation

    EU GENERAL DATA PROTECTION REGULATION: ‣ Single regulation that supersedes all others ‣ Applies to European and non-European entities ‣ Penalties of 4% percent of global annual turnover, or €20m, whichever is the higher ‣ Adoption expected in 2016; enforcement in 2018 Netskope © 2015, Optiv Security

  3. Slide 3: Personal Data

    PERSONAL DATA = “…any information relating to an individual, whether it relates to his or her private, professional or public life.” “…can be anything from a NAME, a PHOTO, an EMAIL ADDRESS, BANK DETAILS, POSTS on social networking websites, MEDICAL INFORMATION, or a computer’s IP ADDRESS.” Netskope

  4. Slide 4: More Key Points to Consider

    MORE KEY POINTS TO CONSIDER Data Protection by Design and Data Protection by Default will become mandatory. Organisations will need to appoint a Data Protection Officer, or at the very least ensure that the duties of a DPO become the responsibility of a suitable officer in the organisation. A Data P

  5. Slide 5: Supervisory Authority, Controller, Processor, Data Subject

    SUPERVISORY CONTROLLER PROCESSOR DATA SUBJECT AUTHORITY ‣ Determines purposes and ‣ Processes data on behalf ‣ Individual who is or can be ‣ Public authority that means of processing data of controllers identified, directly or supervises and enforces ‣ Must have reason, use only indirectly GDPR for

  6. Slide 6: But do we know how many of these we have?

    DATA PROTECTION YOUR YOUR EMPLOYEE AUTHORITY FOR CLOUD APP ORGANISATION OR CUSTOMER YOUR MEMBER STATE But do we know how many of these we have? Netskope © 2015, Optiv Security Inc. © 2015

  7. Slide 7: Scenario 1 - Where are the apps & data, could data be leaked?

    Scenario 1 - Where are the apps & data, could data be leaked? YOUR ORGANISATION CLOUD APP YOUR EMPLOYEE OR CUSTOMER COMPETENT DATA PROTECTION AUTHORITY Netskope © 2015, Optiv Security Inc. © 2015

  8. Slide 8: Scenario 2 - Where are the apps & data, could data be leaked?

    Scenario 2 - Where are the apps & data, could data be leaked? YOUR ORGANISATION CLOUD APP YOUR EMPLOYEE OR CUSTOMER COMPETENT DATA PROTECTION AUTHORITY Netskope © 2015, Optiv Security Inc. © 2015

  9. Slide 9: Netskope at a glance

    ‣ Discover cloud apps and assess risk ‣ 250+ employees globally, including North ‣ Govern all apps and data America, throughout Europe, and Asia-Pacific ‣ Safely enable sanctioned cloud apps ‣ Early architects/executives from Palo Alto Networks, NetScreen, Cisco, McAfee, VMware ‣ 40+ patent claims a

  10. Slide 10: Cloud procurement happens outside of IT

    IT estimate: 40-50 Cloud procurement happens outside of IT More than just Dropbox and Actual: Evernote. HR, Finance, 769 Customer Relationship Management, etc. No visibility or control Source: Netskope Cloud Report Netskope © 2015, Optiv Security Inc. © 2015

  11. Slide 11: 28 ecosystem apps connected to Box alone

    28 “ecosystem”apps, on average, connected to Box alone Source: “Cloud App Ecosystems: Why They Should Matter to You,” Netskope Netskope © 2015, Optiv Security Inc. © 2015

  12. Slide 12: Netskope © 2015, Optiv Security Inc. © 2015

    Netskope © 2015, Optiv Security Inc. © 2015

  13. Slide 13: Just Block!

    In 2005 we said… Just Block! Netskope © 2015, Optiv Security Inc. © 2015

  14. Slide 14: Good but... these apps are good for business

    BUT… THESE APPS ARE GOOD FOR BUSINESS Netskope © 2015, Optiv Security Inc. © 2015

  15. Slide 15: Leading biotech, global bank, large retailer

    LEADING BIOTECH GLOBAL BANK LARGE RETAILER ‣ Processes petabytes of ‣ Uses cloud collaboration, ‣ Aggregates user data across clinical trial data research, portfolio stores around the world ‣ Results: Faster time-to- management and financial ‣ Results: Real-time decisions approval, competitive analy

  16. Slide 16: Controller's Obligation

    CONTROLLER’S OBLIGATION: ‣ KNOW which personal data are processed by workers using cloud apps ‣ IDENTIFY which cloud apps workers are using ‣ PREVENT personal data from being processed in unmanaged cloud apps ‣ PROTECT personal data stored or processed in cloud apps Netskope © 2015, Optiv Security I

  17. Slide 17: How Are You Addressing Cloud GDPR Compliance?

    How Are You Addressing Cloud GDPR Compliance? Netskope © 2015, Optiv Security Inc. © 2015

  18. Slide 18: Six steps across any device, including mobile and BYOD

    Across any device, including 1 2 3 mobile and BYOD Data processing Know location Take security measures agreement 4 5 6 Only “necessary” data; no “special” data unless No personal data for Data deleted exemption is in place other purposes post-service Netskope © 2015, Optiv Security Inc. © 2015

  19. Slide 19: 1. Know Location

    Are apps, data in EU? Could data be leaked? 1. KNOW LOCATION excellent high medium low Netskope © 2015, Optiv Security Inc. © 2015 poor

  20. Slide 20: 2. Take Security Measures

    Data security features such as encryption, cipher type, auditing, physical security? If not, compensating controls. 2. TAKE SECURITY MEASURES Features? If no, controls! Netskope © 2015, Optiv Security Inc. © 2015

  21. Slide 21: 3. Data Processing Agreement

    Find. Consolidate. Sanction. Execute agreement. 3. DATA PROCESSING AGREEMENT ✔ ✔ ✔ ✔ Netskope © 2015, Optiv Security Inc. © 2015 …

  22. Slide 22: 4. Only Necessary Data; No Special Data Unless Exemption

    Specify in agreement. Verify in practice. 4. ONLY “NECESSARY” 1011 DATA; NO 0110 0101 ‣ Assess app functionality ‣ Block non-necessary data “SPECIAL” ‣ Block “special” data unless 1011 exemption is in place DATA UNLESS 0110 0101 EXEMPTION IS SPECIAL IN PLACE 1011 Netskope © 2015, Optiv Security Inc.

  23. Slide 23: 5. No Personal Data for Other Purposes

    Understand privacy terms of discovered apps. Consolidate apps that don’t meet requirements. Specify in agreement for the rest. 5. NO PERSONAL DATA FOR OTHER PURPOSES Netskope © 2015, Optiv Security Inc. © 2015

  24. Slide 24: 6. Data Deleted Post-Service

    Understand data deletion terms after service terminated. Consolidate apps that don’t meet requirements. Specify in agreement for the rest. 6. DATA DELETED POST-SERVICE Netskope © 2015, Optiv Security Inc. © 2015

  25. Slide 25: Across all device types, including BYOD and mobile

    Across all device types, including BYOD and mobile devices, and sync clients … BYOD … … Netskope © 2015, Optiv Security Inc. © 2015

  26. Slide 26: In Summary

    In Summary… Only “Necessary” Data; No Regardless of where you are Know Location “Special” Data unless with or what device you’re on exemption No Personal Data for Other Take Security Measures Purposes Data Processing Agreement Data Deleted Post-Service Netskope © 2015, Optiv Security Inc. © 2015

  27. Slide 27: Know Your Cloud App Usage and EU GDPR Compliance Status

    Know Your Cloud App Usage and EU GDPR Compliance Status Take advantage of a Netskope Cloud Risk Assessment for the EU GDPR Contact your Netskope Account Executive or reach out at sales@netskope.com Netskope © 2015, Optiv Security Inc. © 2015

  28. Slide 28: Thank you! Questions?

    Thank you! Questions? email sue@netskope.com or andy@netskope.com Netskope © 2015, Optiv Security Inc. © 2015

Netskope — Technical Presentation (February 2016) on 6ix