View source for SECaaS (Security as a Service)

''Security-as-a-Service'' ('''SECaaS''') is a cloud-based method of outsourcing your cybersecurity. Outsourced security can cover data protection, VoIP security, database security, and general network security.  All of these can help an organization combat SECaaS threats, such as malware and botnets.

SECaaS is an increasingly popular data security solution for corporations because it is easier to scale as the business grows. It also makes it possible to circumvent the expense of establishing an elaborate on-premises security architecture.

== Categories of SECaaS ==
The Cloud Security Alliance (CSA) is an organization that is dedicated to defining and raising awareness of secure cloud computing. In doing so, the CSA has defined the following categories of SECaaS tools and created a series of technical and implementation guidance documents to help businesses implement and understand SECaaS. These categories include:

*Business continuity and disaster recovery (BCDR or BC/DR)
*Continuous monitoring
*Data loss prevention (DLP)
*Email security
*Encryption
*Identity and access management (IAM)
*Intrusion management
*Network security
*Security assessment
*Penetration testing
*Security information and event management (SIEM)
*Vulnerability scanning
*Web security
{| class="wikitable"
|+
|Network Security
|Network Security consists of security services that allocate network access, distribute, monitor, and protect network services
|-
|Vulnerability Scanning
|Vulnerability Scanning scans the target infrastructure or systems for security vulnerabilities via a public network.
|-
|Web Security
|Web Security offers real-time protection of public facing application services generally offered by proxying web traffic through the cloud service provider.
|-
|Email Security
|Email Security provides control over inbound and outbound email, protecting the organization from phishing, malicious attachments, and spam, and providing business continuity options.
|-
|Identity and Access Management (IAM)
|Identity and Access Management (IAM) provides identity administration, governance and access controls. This includes authentication, identity assurance, access intelligence, and privileged user management.
|-
|Encryption
|Encryption is the process of obfuscating data using cryptographic and numerical ciphers. Transforming clear-text into cipher-text to make it unreadable
|-
|Intrusion Management
|Intrusion Management is the process of using pattern recognition to detect statistically unusual events, prevent or detect intrusion attempts, and manage the incidents.
|-
|Data Loss Prevention (DLP)
|Data Loss Prevention is the monitoring, protecting, and verifying the security of data at rest, in motion, and in use.
|-
|Security Information and Event Management (SIEM)
|Security Incident and Event Management (SIEM) systems accept log and event information, correlation and incident data and provide real time analysis and correlation.
|-
|Business Continuity and Disaster Recovery (BCDR)
|Business Continuity and Disaster Recovery is the implementation of measures designed to ensure operational resiliency in the event of any service interruptions.
|-
|Continuous Monitoring
|Continuous Monitoring performs the function of continuous risk management presenting the current security posture of the organization.
|-
|Security Assessments
|Security Assessments are third party audits of cloud services based on industry standards.
|}

==Source==
*[https://www.fortinet.com/resources/cyberglossary/security-as-a-service fortinet.com]
*[[wikipedia:Security_as_a_service|wikipedia.org]]

[[Category:Cloud Computing]]
[[Category:Cloud]]
[[Category:Server]]