18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

|
Transform
/ Transform Our Company All Microsoft

Our Products

Blogs & Communities

Press Tools

PERSPECTIVE

PwC: Seizing cloud security in a cyberthreat world

Bill Briggs Apr 16, 2018

Cyberthreats are intensifying. For many businesses, the cloud has become a security imperative when
it comes to locking down data and blocking breaches.

PricewaterhouseCoopers (PwC) is working with Microsoft to develop and deliver custom-built

cybersecurity tools that help customers safely unleash their digital transformation. The two
companies announced a cyber-alliance Monday at the RSA Conference in San Francisco.

PwC, a global professional services firm, has a long history of building proprietary tools and offering
advisory practices for clients based on Microsoft technologies. That collaboration now includes PwC’s
integration of the Microsoft Graph security API, which helps users safely connect to data in the cloud.

Prakash Venkata, a PwC principal and a leader of the company’s cybersecurity and privacy practice,
recently sat for an interview to share his views on bolstering data security and enabling customers to
safely go digital

TRANSFORM: What’s the role of cloud and intelligence in staying ahead of contemporary threats?

PRAKASH VENKATA: When used properly, cloud platforms and threat intelligence can be powerful
tools in staying ahead of – or at least on pace with – contemporary threats. In the past year, many
significant attacks, such as WannaCry and a few high-profile breaches, took advantage of known
vulnerabilities to cause billions of dollars in harm.

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 1/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

Utilizing/ cloud platforms and their highly integrated and flexible security integrations, such as
Transform
Microsoft Azure and Microsoft 365, can help to keep systems up to date and reduce risks related to
known vulnerabilities.

Secondly, even though many attacks follow similar attack vectors, fewer than half of organizations
conduct vulnerability assessments, and many struggle to utilize it effectively. Utilizing a threat
intelligence platform can help organizations leverage other organizations’ experiences to understand
and protect against current cybersecurity threats.

Lastly, many businesses also experience challenges with maintaining a healthy cybersecurity posture
in a rapidly changing enterprise. Utilizing cloud services allows organizations to effectively scale
without sacrificing security in the process.

TRANSFORM: How does the Microsoft Graph security API enhance and protect security?

VENKATA: The Microsoft Graph serves as the common interface for integrating across various
Microsoft products and services, connecting a wealth of resources, relationships and intelligence,
through a single endpoint.

Microsoft Graph gives IT professionals and developers the ability to provide consistent, streamlined
services across the enterprise. For example, being able to manage Azure Active Directory (AD)
through this API allows organizations to accurately manage their environment.

The new security API for Microsoft Graph adds support for both the ingestion of diverse threat
intelligence data and the collection of normalized and actionable security data points, all within the
context of an API integrated with Microsoft products, services and partners. This two-way
communication of security information into an integrated platform provides organizations with the
context they need to take steps to mitigate their cybersecurity risks.

The security API provides new avenues to perform security analytics, creating a much simpler and
adaptable process for correlating and enriching security data with additional context from Microsoft
Graph.

TRANSFORM: In what ways does the Graph security API enable product security?

VENKATA: Microsoft Graph is able to integrate disparate products together with Microsoft resources
in a standardized format, providing the ability to effectively integrate with a wide range of
applications. It simplifies the coding process for developers, helping streamline this process and
reduce the amount of coding errors.

By extending Microsoft Graph to enable integration between security products and services, the
Security API serves as a powerful tool in understanding an organization’s assets and securing them
appropriately.

Overall, Microsoft Graph provides a powerful but agile toolkit, helping to provide increased product
security through improved visibility and protection.

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 2/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

TRANSFORM: Can you describe your experience using the Microsoft Cloud in terms of security and
/ Transform
securing data?

VENKATA: I see this as two separate aspects – securing your Azure environment and securing your
broader environment using the Microsoft Cloud.

In terms of securing Azure environments, Microsoft provides a number of capabilities. For example,
Azure provides tools to control privileged identities, such as the Azure AD Identity Protection and
Azure AD Privileged Identity Management.

Azure also provides a great deal of control for assets and resources using native capabilities,
including Web Application Firewall, risk scoring and easy integration for web application vulnerability
scanning.

In terms of securing data using the Microsoft Cloud, capabilities such as Azure Information Protection
provide strong data protection capabilities that are easy for end users to apply on a daily basis.

Of particular interest for many of our clients is leveraging Azure AD Join and Intune for endpoint
management. Many of our clients tackling mergers and acquisitions will be able to accelerate their
integrations, while also reducing the risk of existing security challenges related to lateral movement
and privileged account management.

TRANSFORM: As organizations embrace emerging technologies to do business, how does your

company help them achieve this transformation securely?

VENKATA: Many organizations are embarking on digital transformation, trying to leverage emerging
technologies including the Internet of Things, artificial intelligence, robotic process automation,
augmented reality and new types of cloud services, all to provide differentiated services to their
clients.

PwC views itself as a trusted partner, allowing us to provide cybersecurity solutions that are adaptable
to clients’ changing needs. PwC brings industry experience and an understanding of this changing
business environment.

Our company also brings relationships with our clients to help create agile solutions capable of
managing the cybersecurity risks of our clients while enabling their digital transformation journey
according to their unique needs.

More Stories

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 3/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

/ Transform

NEWS

How Walgreens is using HoloLens 2 to provide a fresh retail experience 

By Deborah Bach

Jan 12, 2020 

PERSPECTIVE

Retail 2020: Your next grocery run or closet refresh may be powered by Microsoft and
our customers embracing tech intensity 
https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 4/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform
By Shelley Bransten
/ Transform
Jan 9, 2020 

PERSPECTIVE

Microsoft’s resolution for 2020 is to empower tech intensity in its customers and
partners 
By Deb Cupp, Corporate Vice President of Worldwide Enterprise and Commercial

Dec 18, 2019 

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 5/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

FEATURE
/ Transform
Hackers hit Norsk Hydro with ransomware. The company responded with
transparency 
By Bill Briggs

Dec 16, 2019 

Follow us: Share this page:

What's new Microsoft Education Enterprise Developer Company

Store
Surface Pro X Microsoft in Azure Microsoft Visual Careers
Account profile education Studio
Surface Laptop 3 AppSource About Microsoft
Download Office for Windows Dev
Surface Pro 7 Center students Automotive Center Company news

Windows 10 apps Microsoft Store Office 365 for Government Developer Privacy at
support schools Network Microsoft
Office apps Healthcare
Returns Deals for TechNet Investors
students & Manufacturing
Order tracking parents Microsoft Diversity and
Financial services developer inclusion
Store locations Microsoft Azure program
in education Retail Accessibility
Buy online, pick Channel 9
up in store Security
Office Dev
In-store events Center

Microsoft Garage

 English (United States)

Sitemap Contact Microsoft Privacy & cookies Terms of use Trademarks Safety & eco About our ads
© Microsoft 2020

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 6/7
18/01/2020 PwC: Seizing cloud security in a cyberthreat world | Transform

https://news.microsoft.com/transform/pwc-seizing-cloud-security-in-cyberthreat-world/ 7/7