CASBs provide a solution to many of the security problems posed by the use of cloud services – both sanctioned and unsanctioned. They do this by interposing themselves between end users – whether they are on desktops, the corporate network or on mobile devices connecting using unknown networks – or by harnessing the power of the cloud provider’s own API.

The capabilities and functionality of different CASBs vary significantly, but at a minimum, Gartner suggests that CASBs should offer organizations:

• Visibility into cloud usage throughout the organization
• A way to ensure and prove compliance with all regulatory requirements
• A way to ensure that data is stored securely in the cloud
• A satisfactory level of threat protection to ensure that the security risk of using the cloud is acceptable