Guilty Until Proven Innocent
It’s time for organizations of all sizes to rethink their approach to information security. Cybercrime – especially ransomware – is the fastest growing crime in the U.S., and the attacks are increasing in number, scope, and sophistication. The Workspot Enterprise Desktop Cloud™ platform was designed to help you enforce zero trust security policy.
Today, as people use a variety of devices in many different settings, the attack surface is vast, making the case for adopting a Zero-Trust Security model. This means that no one is trusted, either inside or outside the organization. To support zero-trust, CIOs and CISOs should ask vendors the following questions about cloud desktop security:
- How does your architecture impact information security?
- Where does my data live? Who can see it? How is it protected?
- Where is my Active Directory running?
- What systems are shared between users?
Unlike many virtual desktop solutions, Workspot’s approach to cloud desktop security strengthens your Zero Trust Security model.
Workspot’s multi-layer approach to cloud desktop security is unique in the industry.
Control/Data Plane Separation is Essential
The architecture of the virtual desktop solution really matters when it comes to security. Workspot is the only solution available today that separates the control and data planes. Other cloud desktop solutions have integrated control and data planes. By definition, when the data and cloud desktop management planes are combined, customer data and authentication systems traverse the same system. Even the vendor could potentially see your data, and that breaks your Zero Trust Security policy.
Workspot’s massive architecture innovation carries with it significant advantages for security, scalability and performance.
Workspot’s innovative architecture separates the control and data plane, so the user’s tenant is completely isolated.
Multi-factor Authentication
Whenever you need to secure data or intellectual property, you should be using multi-factor authentication (MFA). Workspot was built for the enterprise, and the platform integrates with your chosen authentication systems. Most of our customers use Azure AD, Azure MFA, Okta, Duo and/or PingID. Workspot supports them all.
Workspot supports your existing MFA solution.
POLP: Principle of Least Privilege
In addition to the architecture decisions we made, Workspot follows the Principle of Least Privilege (POLP), closely tied to the Zero Trust Security policy, for enhanced cloud desktop security. POLP allows for people and processes to only have the bare minimum system access to complete a task. This means that everyone, including the cloud desktop vendors you are considering, needs to prove how they make your organization more secure. With Workspot, you can count on the following:
- An independent security layer prevents unauthorized access to data.
- Users are isolated; if there’s an attack, it’s localized to a single tenant.
- Active Directory is fully under your control, and only you have access.
- You can bring your existing corporate standard AV, AM, DLP and MFA into Azure – no need to create a separate security process.
A combined data and management plane (left) jeopardizes your security posture. Workspot separates the management and data planes for zero-trust security.
Big Data Visibility
Your IT organization must be able to proactively monitor your global cloud desktop infrastructure. Workspot Enterprise Desktop Cloud Platform is the only cloud desktop solution that gives you the power to view and manage your entire cloud desktop infrastructure from a single console. Our platform is deeply instrumented, providing a real-time events stream that captures user login attempts and location, as well as the gateways they traverse. APIs also allow you to export this data to other analysis tools like Splunk.
Workspot supports your existing MFA solution.
Additional Resources
We’re here to help! Access these valuable resources to help guide your journey to cloud desktops.
