All Transform 2021 sessions are available on demand now. Watch now.
A survey of 300 cloud engineering professionals found that 36% of organizations experienced a cloud security data leak or serious breach in the past 12 months. Eight in ten are concerned that they are vulnerable to a major cloud data breach, with 64% saying the problem will get worse or stay the same over the next year. The findings are part of the report The State of Cloud Security 2021, prepared by Leakage other Sonatype.
As the scale of cloud environments grows, cloud teams say the risks – and the challenges and costs of addressing them – are increasing. The main causes of cloud misconfiguration are too many APIs and interfaces to govern, cited by 32%, 31% cited a lack of controls and oversight, 27% cited a lack of policy awareness, and 32% cited the team’s negligence. 21% do not verify Infrastructure as Code (IaC) before deployment, and 20% do not adequately monitor their cloud environment.
Cloud security teams tasked with preventing and eliminating cloud misconfiguration vulnerabilities are struggling with many family security issues, including false positives (cited by 27%), alert fatigue (21%) and human errors (38%). 36% have difficulty hiring and retaining cloud security professionals, and 35% cite challenges with training. Half say their teams are investing more than 50 engineering hours per week on IaC security, and a similar investment will go to runtime security in the cloud.
When asked what they need to manage cloud security more effectively, 96% say having a set of policies that works for both IaC and cloud runtime would be valuable. 47% say they need better visibility into their cloud environment, and 43% say better compliance auditing and reporting automation would help.
Fugue partnered with Sonatype to survey 300 DevOps, cloud and security engineers on the risks, challenges and organizational impact of cloud security. The online survey was conducted by Propeller Insights.
Read then full report of Fugue and Sonatype here.
VentureBeat’s mission is to be a digital urban plaza for technical decision makers to gain insight into transformative technology and transact. Our site offers essential information on data technologies and strategies to guide you as you run your organizations. We invite you to become a member of our community, to access:
- updated information on the topics of your interest
- our newsletters
- Exclusive content from thought leaders and discounted access to our treasured events, such as Transform 2021: Learn more
- network features and more
Become a member