Cloud service usage risk assessment
A method of assessing a risk level of an enterprise using cloud-based services from one or more cloud service providers includes assessing provider risk scores associated with the one or more cloud service providers; assessing cloud service usage behavior and pattern of the enterprise; and generating a risk score for the enterprise based on the provider risk scores and on the cloud service usage behavior and pattern of the enterprise. The risk score is indicative of the risk of the enterprise relating to the use of the cloud-based services from the one or more cloud service providers.
1. A method of assessing a risk level of an enterprise using a cloud-based service from a cloud service provider, the method comprising:
generating, at a hardware processor, one or more cloud service usage analytics based on: data from a data network associated with the enterprise; and cloud service provider information associated with the cloud service provider and correlated to the data, the data relating to usage of the cloud service provider;
generating, using the hardware processor, a risk score for the enterprise based on the cloud service usage analytics and based on a cloud service provider risk score associated with the cloud service provider; and
generating, at the hardware processor, an output comprising a remediation suggestion based on the risk score generated.
2. The method of claim 1 , wherein the cloud service provider information is collected in one or more risk categories, and each of the one or more risk categories includes one or more attributes.
3. The method of claim 2 , wherein a weight value is assigned to each of the one or more risk categories.
4. The method of claim 1 , wherein the data reflects use of the cloud-based service by the enterprise.
5. The method of claim 1 , further comprising detecting an anomaly in the data.
6. The method of claim 1 , wherein the data is based on event logs.
7. A system of assessing a risk level of an enterprise using a cloud-based service from a cloud service provider, the system comprising:
memory; and
a hardware processor coupled to the memory and configured to:
generate one or more cloud service usage analytics based on: data from a data network associated with the enterprise; and cloud service provider information associated with the cloud service provider and correlated to the data, the data relating to usage of the cloud service provider;
generate a risk score for the enterprise based on the cloud service usage analytics and based on a cloud service provider risk score associated with the cloud service provider; and
generate an output comprising a remediation suggestion based on the risk score generated.
8. The system of claim 7 , wherein the cloud service provider information is collected in one or more risk categories, and each of the one or more risk categories includes one or more attributes.
9. The system of claim 8 , wherein a weight value is assigned to each of the one or more risk categories.
10. The system of claim 7 , wherein the data reflects use of the cloud-based service by the enterprise.
11. The system of claim 7 , wherein the hardware processor is further configured to detect an anomaly in the data.
12. The system of claim 7 , wherein the data is based on event logs.
13. A non-transitory computer-readable medium containing computer-executable instructions that, when executed by a processor, cause the processor to perform a method for assessing a risk level of an enterprise using a cloud-based service from a cloud service provider, the method comprising:
generating one or more cloud service usage analytics based on: data from a data network associated with the enterprise; and cloud service provider information associated with the cloud service provider and correlated to the data, the data relating to usage of the cloud service provider;
generating a risk score for the enterprise based on the cloud service usage analytics and based on a cloud service provider risk score associated with the cloud service provider; and
generating an output comprising a remediation suggestion based on the risk score generated.
14. The non-transitory computer-readable medium of claim 13 , wherein the cloud service provider information is collected in one or more risk categories, and each of the one or more risk categories includes one or more attributes.
15. The non-transitory computer-readable medium of claim 14 , wherein a weight value is assigned to each of the one or more risk categories.
16. The non-transitory computer-readable medium of claim 13 , wherein the data reflects use of the cloud-based service by the enterprise.
17. The non-transitory computer-readable medium of claim 13 , wherein the method further comprises detecting an anomaly in the data.
18. The non-transitory computer-readable medium of claim 13 , wherein the data is based on event logs.