Understanding CASB: Securing Cloud Access at Scale

This document provides an overview of Cloud Access Security Brokers (CASBs), outlining their four core functions—visibility, compliance, data security, and threat protection—plus deployment models (API, proxy, hybrid) and use cases such as shadow IT detection, cloud DLP, OAuth risk mitigation, and anomalous login detection; it also emphasizes complementing CASBs with third‑party monitoring (SecurityScorecard SCDR) to strengthen supply‑chain and vendor risk visibility.