Skyhigh - Cloud Access Security Broker

One platform for all cloud servicesSkyhigh Logo

BSI partner with Skyhigh Networks to provide a Cloud Access Security Broker (CASB) solution to our clients. We partner with market leading providers to complement our offering. Skyhigh is a Gartner and Forrester solution trusted by enterprises to protect their data in thousands of cloud services.With Skyhigh, organizations can leverage a single cross-cloud platform to gain visibility into cloud usage and risks, meet compliance requirements, enforce security policies, and detect and respond to potential threats.

Discover all cloud services in use and standardize approved services

Skyhigh helps you discover all cloud services that are in use and provides a 1-10 Cloud Trust rating of your organizations readiness for each service. It reveals gaps in cloud policy enforcement and enables real-time coaching and policy enforcement to guide users to approved services.

Enforce data loss prevention policies to comply with industry regulations

Skyhigh identifies sensitive or regulated data in motion or at rest in cloud services using pre-built, customizable policy templates or policies from your on-premises data loss prevention solution. This helps you enforce policies to prevent violations and coach users on appropriate usage.

Detect and respond to insider threats, compromised accounts and malware

Skyhigh captures an audit trail of all user activity in the cloud and leverages user entity behaviour analytics (UEBA). This enables accurate detection of insider threats, compromised accounts, privileged user threats and malware proliferation via the cloud, or when using the cloud as a data exfiltration vector.

Maintain control over how data is accessed and shared

Skyhigh enables you to audit sharing permissions on files and folders and enforce collaboration policies. With Skyhigh you can also define and apply specific view, edit and download permissions in real time based on the user’s role, location and whether the device is managed.

Protect data from unauthorized access and meet data privacy requirements

Skyhigh delivers academia and peer-reviewed encryption for both structured and unstructured data. It enables enterprises to encrypt sensitive data while maintaining control of encryption keys and preserving format and critical end-user functionality such as search and sort.

Skyhigh's CASB provides a single point of control for all cloud apps - all users - all devices

Skyhigh Architecture

Visibility

Skyhigh continuously discovers cloud service usage. With the world’s largest and most accurate Cloud Registry, clients know they have a complete view into all cloud services in use, including thousands of services uncategorized by firewalls and web proxies.

Skyhigh enables enterprise-grade services in demand that can be enabled, as well as redundant services that can be consolidated to reduce cost and improve collaboration, and high-risk services that should be avoided.

  • Cloud registry
  • Cloud trust ratings
  • Cloud usage analytics
  • Cloud service governance
  • Cloud enforcement gap analysis
  • Coaching and enforcement
  • Customizable views and reporting
  • Activity drilldown
  • On-demand data scan
  • Collaboration analytics

 

Threat protection

Skyhigh analyzes cloud activity across multiple heuristics, to develop an accurate and continuously updated model of user behaviour that detects negligent and malicious user activity and takes real-time action to prevent data loss.

  • Cloud security operations centre (SOC)
  • Threat modelling
  • User behaviour analytics
  • Account access analytics
  • Privileged user analytics
  • Configurable sensitivity
  • Cloud activity monitoring
  • Data exfiltration analytics
  • Darknet intelligence
  • Outbound data intelligence

Compliance

Identify sensitive data in motion or at rest in cloud services and enforce data loss prevention (DLP) policies to comply with industry regulations and internal policies.

  • Cloud data loss prevention
  • Multimode DLP
  • Next generation DLP engine
  • Multi-tier remediation
  • Policy violation management
  • Match highlighting
  • Email coaching
  • Secure collaboration
  • Pre-built DLP templates
  • Closed-loop policy enforcement
  • Two-pass assessment

Data security

Enforce data-centric security policies including encryption with your own keys, contextual access control and information rights management.

  • Security configuration audit
  • Contextual access control
  • Contextual authentication
  • Unmanaged device control
  • Multimode encryption
  • Structured data encryption
  • Searchable symmetric encryption
  • Information rights management