PDF Archive

Easily share your PDF documents with your contacts, on the Web and Social Networks.

Share a file Manage my documents Convert Recover PDF Search Help Contact



Cloud Security Report 2016 .pdf



Original filename: Cloud-Security-Report-2016.pdf

This PDF 1.7 document has been generated by Adobe InDesign CC 2015 (Windows) / Adobe PDF Library 15.0, and has been sent on pdf-archive.com on 13/07/2016 at 01:42, from IP address 122.173.x.x. The current document download page has been viewed 182 times.
File size: 4.1 MB (39 pages).
Privacy: public file




Download original PDF file









Document preview


CLOUD SECURITY

Group Partner

Information
Security

PRESENTED BY

2016 SPOTLIGHT REPORT

TABLE OF CONTENTS

CLOUD SECURITY
SPOTLIGHT REPORT

Overview
Key survey findings

3
4

CLOUD ADOPTION TRENDS
Cloud benefits
Cloud investments
Cloud adoption stages
Barriers to cloud adoption
Top cloud service delivery & providers
Most popular cloud workloads
Data stored in the cloud
Applications deployed in the cloud
Most popular cloud apps

6
7
8
9
10
11
12
13
14

CLOUD SECURITY CHALLENGES
Cloud security concerns
Cloud security incidents
Security risks in the cloud vs. on-premise
Cloud apps vs. on-premise apps
Biggest security threats in public clouds
Cloud security concerns
Biggest cloud security headaches
Personal cloud storage policy

16
17
18
19
20
21
22
23

CLOUD SECURITY SOLUTIONS
Paths to stronger security
Cloud confidence builders
Traditional security tools in the cloud
Most effective cloud security technologies
Most popular cloud security controls
Drivers of cloud-based security solutions
Barriers to cloud-based security solutions
Cloud application security
Access to cloud applications
Security impact on DevOps

25
26
27
28
29
30
31
32
33
34

Methodology & Demographics
Sponsors
Contact us

35
36
39

OVERVIEW
Cloud investment continues
to grow over 20% annually as
organizations are looking to reduce
IT cost, increase agility and better
support business functions.

In this new report, you will learn how your peers are
approaching cybersecurity in the era of cloud,
including the latest trends and benchmarks to gauge
how your own organization stacks up.
Many thanks to our sponsors for supporting this

Security of critical data and
systems in the cloud remains a
key barrier to adoption of cloud
services. This report, the result
of comprehensive research in
partnership with the 300,000+
member Information Security
Community on LinkedIn, reveals
the drivers and risk factors of
migrating to the cloud. Learn how
organizations are responding to
the security threats in the cloud
and what tools and best practices
IT cybersecurity leaders are
considering in their move to
the cloud.

research project: AlienVault, Bitglass, Cato
Networks, CloudPassage, Dell Software, Dome9,
FireLayers, IMMUNIO, (ISC)2 and Randtronics.
We hope you will enjoy this report.

Holger Schulze

Holger Schulze
Group Founder
Information Security
Community on LinkedIn
hhschulze@gmail.com

SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

Group Partner

Information
Security

3

KEY SURVEY FINDINGS

1

Security concerns top the list of barriers to cloud adoption led by general security concerns
(53%, up from 45% in last year’s survey), legal and regulatory compliance concerns (42%, up
from 29%), and data loss and leakage risks (40%). The rise in specific concerns about compliance
and integration suggests that companies are moving from theoretical exploration of cloud
models to actual implementation.

2

53% of organizations see unauthorized access through misuse of employee credentials and
improper access controls as the single biggest threat to cloud security. This is followed by
hijacking of accounts (44%), and insecure interfaces / APIs (39%). One in three organizations
say external sharing of sensitive information is the biggest security threat.

3

Verifying security policies (51%), visibility into infrastructure security (49%) and compliance
(37%) were named as the top three cloud security challenges that cause the biggest headaches
for IT security professionals.

4

Organizations moving to the cloud have a variety of choices available to strengthen cloud
security. 61% of organizations plan to train and certify existing IT staff, 45% partner with a
managed security services provider, and 42% deploy additional security software to protect data
and applications in the cloud.

5

Encryption of data at rest (65%) and in motion on networks (57%) top the list of most effective
security technologies to protect data in the cloud. This is followed by intrusion detection and
prevention (IDP) with 48% and access control technologies such as Cloud Access Security
Brokers (CASB) with 45%.

SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

4

CLOUD ADOPTION TRENDS

CLOUD BENEFITS
After a few years of operating workloads in the cloud, organizations are confirming the benefits match the original
promise of cloud computing. Availability (46%), cost reduction (41%) and flexible scalability (36%) top the list.
Cloud is still falling short of expectations in the areas of regulatory compliance (13%) and the promise of reduced
complexity (14%).

46%
Availability

41%

36%

Cost Reduction

Flexible Scalability

Cloud Benefits

14%

Reduced
Complexity

13%

Regulatory
Compliance

Moved expenses from fixed CAPEX (purchase) to variable OPEX (rental/subscription) 32% | Accelerated deployment and provisioning 31% |
Increased agility 28% | Improved performance 27% | Increased efficiency 26% | Increased geographic reach 24% | Increased employee productivity 23% |
Improved security 19% | Accelerated time to market 18% | Align cost model with usage 18% | Not Sure/Other 25%

Q: What benefits have you realized from your cloud deployment?
SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

6

CLOUD INVESTMENTS
For over a third of organizations (38%), cloud investments represent up to 15% of overall IT infrastructure
investment. Half of all organizations have over 15% of their IT invested in the cloud.

38%

50%

Organizations invest more
than 15% of all IT in cloud

21%
IT infrastructure

13%

12%

0%

1-15%

16-25%

26-50%

9%
51-75%

7%
+75%

Share of cloud relative to overall IT investment

Q: Cloud infrastructure investments represent what percentage of your overall infrastructure footprint (in terms of servers/workloads/instances)?
SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

7

CLOUD ADOPTION STAGES
79% of respondents are either in planning or trial stages, currently implementing or in active production cloud
environments.

30% 25% 24% 21%
Private Cloud

Public Cloud

Hybrid Cloud

No Plans

41%
Deployed

20%

Implementing

16%

Trial

23%

Planning

41%

34%

20%
19%

20%
18%

20%

28%

Cloud computing can be classified by location and ownership of the cloud infrastructure:
Private Cloud - Cloud infrastructure and
services are dedicated to a particular
organization. Private clouds can reside
on premise or be hosted by a third party.

Public Cloud - Cloud services and
infrastructure are hosted by a third-party
cloud provider and resources are shared
among multiple cloud tenants / clients.

Hybrid Cloud - Cloud computing environment
in which single applications are split across
private and public cloud, often to dynamically
accommodate spikes in server demand.

Q: What cloud service delivery model(s) is your organization using?
SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

8

BARRIERS TO CLOUD ADOPTION
Cloud security concerns not only top the list of perceived barriers to cloud adoption, they are further increasing.
General security concerns (with 53% up from 45% in last year’s survey), legal and regulatory compliance concerns
(42% up from 29%), data loss & leakage risks (40% slightly down from 41%), integration with existing IT environments
(35% up from 29%) and lack of expertise (26% up from 16%) top the list of barriers to cloud adoption. However, it
is important to put this in context as the number of reported breaches in enterprise environments far exceed the
reported exposure from cloud platforms.

Cloud Adoption Barriers

#1

#2

#3

#4

#5

53%

42%

40%

35%

26%

General
security risks

Legal & regulatory
compliance

Data loss &
leakage risks

Integration with
existing IT environments

Lack of
expertise

8% p.p.
from last year

13% p.p.
from last year

1% p.p.
from last year

6% p.p.
from last year

10% p.p.
from last year

Loss of control 23% | Management complexity 20% | Increased agility 28% | Fear of vendor lock-in 18% | Internal resistance and inertia 18% |
Lack of staff resources 17% | Lack of transparency and visibility 15% | Lack of maturity of cloud service models 14% | Cost/Lack of ROI 13% | Lack of budget 13%
Performance of apps in the cloud 12% | Lack of management buy-in 10% | Lack of customizability 9% | None 9% | Dissatisfaction with cloud service offerings/
performance/pricing 7% | Billing & tracking issues 7% | Lack of support by cloud provider 6% | Availability 5% | Not sure/Other 10%

Q: What are the biggest barriers holding back cloud adoption in your organization?
SHARE THE CLOUD SECURITY SPOTLIGHT REPORT

9


Related documents


retail cloud market size
cloud security report 2016
managed security services risks and benefits min
aarkstore global encryption software market
physical security market
infrastructure as a service iaas market


Related keywords