Skyhigh Security released The Data Dilemma: Cloud Adoption and Risk Report, focusing on the prevailing problem of how to protect data that is used, shared and stored in today’s hybrid and cloud-first enterprise environments. The report finds that, on average, organizations store 61% of their sensitive data in the cloud, and most have experienced at least one cybersecurity breach (90%), threat (89%) and/or theft of data (80%), with three quarters (75%) experiencing all three. Overall, the report underscores the need to address data security gaps by investing in comprehensive data protection that provides remote workforces with a secure and productive user experience.
“Today, data is everywhere, traversing devices, cloud applications, the web and infrastructure, so it comes as no surprise that one of the biggest challenges organizations face is securing their vital data,” said Rodman Ramezanian, global cloud threat lead, Skyhigh Security. “The problem is compounded by the increasing use of private and public cloud services, practices like Shadow IT and even economic factors. With so many variables, it begs the question: Are organizations trying to solve new problems with old methods? Our report findings reinforce the importance of a converged platform across data, web and cloud protection capabilities to cater for the needs of security teams today.”
Cloud adoption accelerates rapidly
Public cloud usage has jumped in the past several years, partly as a result of the pandemic, which forced most businesses to shift to a work-from-home or hybrid model. As the report points out, from 2019 to 2022, use of public cloud services increased to approximately 50% among survey participants. For example, 41% of organizations are using Software-as-a-Service (SaaS) application Microsoft 365 for email and/or file storage.
CIO INFLUENCE: Anglicare Leverages Ribbon and Switch Connect for Voice Consolidation and Path for Microsoft Teams Deployment
Organizations lack confidence in data protection efforts by cloud providers
While the cloud has many advantages and supports greater agility and collaboration, the report demonstrates that organizations are well aware they need better visibility into and more consistent control over where their data is going.
Of those that use SaaS, 28% percent of organizations report advanced threats and attacks against their cloud application providers, compared to 23% in 2019, and 23% say they are unable to prevent malicious insider theft or misuse of data, up from 17% in 2019. Overall, 37% of organizations lack trust in the public cloud to keep their sensitive data secure. This is equally, if not more concerning, in the private cloud. The report indicates that 26% (compared to only 9% in 2019) of organizations do not trust private cloud providers with their data and the percentage of those experiencing challenges related to a private cloud increased 15% since 2019 (from 82% to 97%).
CIO INFLUENCE: Datometry Releases Driver Integration for BigQuery, Further Future-Proofing Its Customers’ Investments
Personal device usage and Shadow IT multiply data risk
Adding to increased malicious activity in the cloud and lack of confidence in providers’ ability to adequately protect data, organizations worry about the proliferation of personal devices at work. Six out of 10 organizations permit employees to download sensitive data to personal devices, which further increases risk. Shadow IT, whereby employees commission cloud services without IT approval or involvement, is another area that continues to worry survey respondents. There has been a 25% increase in the number of organizations that say Shadow IT is undermining their ability to keep data secure – up from 50% in 2019 to 75% in 2022.
Organizations are beginning to take various measures to curb data loss and theft, but adoption is still low considering the prevalence of threats and incidents. According to the report, cloud access security broker (CASB) solutions are used by 42% of organizations, and secure web gateways (SWG) are used by 28% of organizations for added protection. When Shadow IT is discovered, 23% of organizations leverage data loss prevention (DLP) and encryption to keep data in cloud services secure. While deploying these technologies is a step in the right direction, most feel that cloud security could be simpler from an administrator’s (86%) and/or user experience (79%) perspective.
The research presented in the report points to the advantages of a single-vendor data-aware Security Service Edge (SSE) solution that converges multiple security services: CASB, SWG, Zero Trust Network Access and Cloud-Native Application Protection Platform. The findings suggest that IT decision makers look for a SSE solution with a single, centralized platform that simplifies cloud security and enables security teams to apply consistent data protection controls and policies across the web, cloud and private apps–from anywhere, any application and any device.
CIO INFLUENCE: Ericsson presents a Green Financing Framework
[To share your insights with us, please write to sghosh@martechseries.com]
