The rise of enterprise cloud computing has brought an even greateremphasis on data. According to an analysis compiled by Statista,two zettabytes of data were created, captured, copied, and consumedglobally in 2010. That figure will reach 97 zettabytes this yearand 181 zettabytes by 2025. As the adoption of cloud computingcontinued to evolve, so did how enterprises approached securingtheir data. Today, enterprises find their data scattered throughouttheir various cloud systems, and they have lost visibility intowhere their sensitive data resides. The problems are about whetherthere are any shadow data stores that developers left abandoned?Who can access all of the enterprise data on these clouds, and arethere excessive privileges? What data is at risk of being breachedand falling out of regulatory compliance? Moreover, the growingcomplexity of cloud computing is a big part of why breached datarecords have risen (according to the Identity Theft ResourceCenter) from 16 million in 2010 to more than 155 million today. Arecent survey from IDC found that 98% of organizations they queriedreported at least one cloud data breach in the past 18 months. Withall these challenges, cybersecurity professionals are faced withthe daunting task of understanding where their organization'scritical or regulated data exists across cloud platforms. Theprocess of identifying and securing cloud data is called the DataSecurity Posture Management. In this talk, we will go over certaintechniques for discovering, analyzing and securing data in variouscloud platforms. We will then look at challenging problems that areopening up more avenues for further investigation, and research.