Gartner Outlines CNAPP Capabilities for Prioritizing Cloud Security Risk
Summary
The article summarizes Gartner’s view that integrated CNAPPs can help organizations prioritize cloud security risks, and highlights capabilities and evaluation guidance for enterprises considering them.
Key points
- Gartner describes CNAPPs as integrating cloud workload protection, cloud security posture management, entitlement management and other capabilities.
- The article cites Gartner projections that enterprises will consolidate cloud security tools and that more CSPM purchases will be part of integrated CNAPP offerings.
- A well-architected CNAPP should provide integrated services, unified policies and a shared data model.
- Gartner recommends linking application components, security posture, permissions and connectivity to identify and prioritize risk.
- Evaluation teams should include cloud, container and application security staff, along with developers or DevSecOps representatives.
- The article recommends prioritizing CNAPPs with relationship-graph analytics to help identify risk causes, responsible teams and remediation priorities.
Article Details
- Topic
- Gartner’s guidance on how CNAPP platforms integrate cloud security capabilities and prioritize risk across the application lifecycle.
People
Charlie WincklessNamed author of the Gartner Market Guide for Cloud-Native Application Protection Platforms cited in the article.Dale KoeppenNamed author of the Gartner Market Guide for Cloud-Native Application Protection Platforms cited in the article.Neil MacDonaldNamed author of the Gartner Market Guide for Cloud-Native Application Protection Platforms cited in the article.