A Cloud Security Access Broker (CASB) acts as an intermediary between an organization’s on-premises infrastructure and the cloud and provides a layer of security by enforcing enterprise security policies and ensuring compliance when users access cloud-based applications.