A factual study on hybrid multi cloud cyber security threats and proposed methodologies to enable cyber resilience

A hybrid multi cloud integrates infrastructure components of on-premises, private, and public cloud sources into one centralized, distributed computing environment. Hybrid multi cloud security must operate at all levels of the distributed network and must be resilient to external threats. Since there is a continuous data exchange between different layers, any gap in privileges and insecure communications can expose vital sensitive data to unauthorized access and loss, leading to data breach. Data governance with dispersed logging and monitoring capabilities leads to inefficient audit trails. In this paper we are presenting a factual study and statistical evaluation on the importance of data categorization as a tool for sensitive data in such an environment, data integrity during data life cycle status changes and escalation of privileges highlighting the missed security compliances. The paper also proposes few methodologies like a centralised status management monitor, event based data synchronisation, centralised master data distribution, integration testing automation and the best practices to be considered by the product teams for a secured product.