Data gravity is a powerful tool that is helping cloud providers become not just data storage and processing providers, but also full-fledged cybersecurity companies. The concept of data gravity was implemented to reflect the idea that as more data is collected in one place, data starts to collect mass and has a gravitational pull that attracts services, applications, and products. This is particularly beneficial for cloud providers, as it allows them to easily host and sell cybersecurity applications and solutions from their marketplaces.
Rather than leaving customers to secure their data on their own, cloud providers are increasingly taking on a “shared fate” responsibility for securing data. In 2021, for example, Google Cloud moved to the shared fate model to provide guidance, tools, and security blueprints for customers at initial deployments and across their lifetime. Amazon AWS- the largest cloud provider- quietly adopted a similar approach last year with their security lake feature.
These measures are critical for adapting to the National Cybersecurity Strategy that seeks to shift the responsibility of cybersecurity away from individuals, small businesses, and local governments, and onto organizations that are best positioned to protect data. Microsoft, for one, has been investing heavily in security; they recently announced an identity and access offering, Microsoft Entra, and have released Microsoft Defender for individuals.
The cybersecurity talent shortage is an acute problem, so cloud providers’ security solutions are providing an abundance of much-needed resources and helping those without expertise in cloud configuration secure their data. Some experts are optimistic we may move away wholly from the shared responsibility model and give more control to cloud providers.
Leaders in the field, including Chris Hughes, are paving the way for this kind of approach. Hughes wrote about the evolution of the “shared responsibility” model into “shared fate”, to help stakeholders understand the changes better. Top executives from around the world will meet in San Francisco from July 11-12 to discuss how leading corporations are integrating and optimizing AI investments for success.
Overall, data gravity is helping cloud providers become true cybersecurity firms, as they have the potential to offer innovative solutions to data security problems. By rethinking the shared responsibility model and investing in cybersecurity technologies and applications, cloud providers are leading the way in the fight against cyber threats
