Your knowledge safety is our precedence
At Databricks, we all know that knowledge is certainly one of your most useful belongings and at all times needs to be protected – that is why safety is constructed into each layer of the Databricks Lakehouse Platform. Like most software-as-a-service (SaaS) platforms, Databricks operates underneath a Shared Duty Mannequin which implies that the client should consider the safety features out there and accurately configure these vital to soundly meet their threat profile, defend delicate knowledge, and cling to their inside insurance policies or regulatory necessities. Summarized succinctly – Databricks is liable for the safety of the platform, and the client is liable for the safety in the platform.
Safety Finest Practices impressed by our most security-conscious prospects
Our safety crew has helped 1000’s of prospects deploy the Databricks Lakehouse Platform with these options configured accurately. Resulting from this experience, we now have recognized a risk mannequin and created a greatest apply guidelines for what “good” appears like on all three main clouds.
Some prospects have valued listening to how we got here up with this listing of greatest practices. The story began at a lunch with the Databricks Monetary Companies account groups in New York Metropolis in 2021. One in all our Answer Architects made a passionate case to assist prospects validate their configurations to keep away from inadvertently lacking something that may be essential to assembly their compliance or regulatory necessities. We realized that monetary providers firms processing delicate knowledge would apply virtually the identical safety controls to their Databricks deployments. For instance, they will run their enterprise and design their structure otherwise, however virtually all will use customer-managed keys (CMK), Personal Hyperlink, and retailer question outcomes inside their account.
As a way to cater for as many shoppers as potential, we break up the listing into “most” and “excessive safety” deployments. We additionally mapped out a risk mannequin primarily based on prospects’ major concerns about Databricks and the principle areas we needed our prospects to grasp.
The outcome was a set of safe configuration guides that present evidence-based suggestions for deploying Databricks securely, all pushed by the controls relied upon by our most security-conscious prospects. You’ll be able to obtain these safety greatest apply suggestions from our Safety and Belief Heart or examine them out immediately through the hyperlinks under:
Safety Evaluation Software (SAT)
In fact, even higher than greatest apply suggestions is an automatic safety well being examine that does the evaluation for you. In November, we launched the Safety Evaluation Software (SAT). SAT measures your workspace configuration towards our safety greatest practices, programmatically verifying them utilizing normal API calls and reporting deviations by severity, with hyperlinks that specify the way to lengthen your safety setup to fulfill any extra stringent necessities derived out of your inside insurance policies. And as of February, the SAT has now gone multi-cloud, thereby enabling prospects to measure their safety well being towards the perfect practices for every of the three main clouds.
Conclusion
We all know that safety is prime of thoughts for all our prospects, and that is why we now have made our safety greatest apply guides available on our Safety and Belief Heart. Immediately, you may obtain the suggestions in your chosen cloud(s) and begin with the Safety Evaluation Software (SAT). However we additionally suggest you bookmark the web page and return to it frequently to examine the newest and biggest suggestions for securing your knowledge. The unhealthy guys aren’t standing nonetheless, and neither must you!
