Security layer between users and cloud services that enforces security policies and provides visibility.
A Cloud Access Security Broker (CASB) sits between your users and cloud services to enforce security policies, provide visibility into cloud usage, and protect data. CASB capabilities include discovering shadow IT (unsanctioned cloud apps), enforcing access policies, preventing data loss, protecting against malware in cloud storage, and monitoring user behaviour. CASBs can operate as forward proxies (inline with traffic), API connectors (direct integration with cloud services), or both. Microsoft Defender for Cloud Apps is a CASB included in Microsoft 365 E5 and standalone licences.
Why It Matters
The DSC Perspective:
You can't secure what you can't see. CASB shows you which cloud services your people are using and lets you apply consistent policies. Critical for organisations concerned about shadow IT or needing to extend security policies to SaaS applications.