2017云安全报告（英文版）_35页_2mb

CLOUD SECURITY REPORT SUMMARY

Core Content

This report provides an in-depth analysis of cloud security concerns, adoption trends, and the strategies organizations are employing to address these challenges. It highlights the evolving landscape of cloud security, emphasizing the need for new tools, skills, and approaches to secure cloud environments effectively.

Main Points

Cloud Adoption Trends

• 90% of organizations are in some stage of cloud adoption.
• 49% are already operating in a live cloud environment.
• SaaS remains the most popular cloud service model, with 67% of organizations using it.
• IaaS and PaaS are also widely adopted, at 50% and 38% respectively.
• Microsoft and AWS are the leading cloud providers, with Amazon and Microsoft tied for the top spot.

Cloud Security Concerns

• The top three cloud security concerns are:
  • Data loss (57%)
  • Threats to data privacy (49%)
  • Breach of confidentiality (47%)
• 41% of organizations still perceive a higher risk of security breaches in the cloud compared to traditional IT environments.

Cloud Security Challenges

• Visibility into cloud infrastructure is the biggest security management headache, affecting 37% of respondents.
• Compliance is the second biggest challenge, with 36% of respondents concerned.
• Setting consistent security policies is the third challenge, impacting 33% of organizations.
• Traditional security tools are not well-suited for cloud environments, with 78% of respondents stating they don't work well or have limited functionality in the cloud.

Barriers to Cloud Adoption

• Security risks are the top barrier to cloud adoption (33%).
• Lack of staff and expertise has risen to 28%, surpassing legal and regulatory concerns (24%).
• Other barriers include:
  • Loss of control (23%)
  • Management complexity (20%)
  • Internal resistance and inertia (18%)
  • High costs (18%)
  • Fear of vendor lock-in (18%)

Cloud Security Budgets

• 33% of organizations predict an increase in cloud security budgets over the next 12 months.
• Cloud security is receiving the largest share of budget increases among all IT security areas.

Cloud Security Solutions

• Data encryption is the most effective security control, with 74% of respondents citing it.
• Access control is the third most effective control at 52%.
• Security monitoring is also popular, with 57% of organizations using it.
• Penetration testing (60%), security monitoring (57%), and web application firewalls (47%) are the most popular application security measures.
• CASB solutions are seen as a key part of cloud security, with 7% already deployed and 24% planning to deploy them in 2017 and beyond.

Cloud Security Impact on DevOps

• 37% of respondents say security slows down DevOps.
• 19% ignore security completely in their DevOps process.
• Cloud-native security products that integrate with DevOps are essential to maintain agility and security.

Security Confidence Builders

• Data encryption (51%) is the most requested capability to increase confidence in cloud adoption.
• Setting and enforcing security policies across cloud environments (49%) and creating data boundaries (41%) are also key confidence builders.

Cloud Application Usage

• Microsoft Office 365 is the leading cloud application, used by 27% of organizations.
• Salesforce is also widely used, at 27%.
• Email is the most common corporate information stored in the cloud (44%), followed by customer data (39%) and employee data (35%).

Key Information

• Cloud security is a critical concern for organizations, with 57% worried about data loss and 49% about data privacy.
• SaaS continues to be the dominant cloud service model, showing an increase in adoption.
• Compliance is a growing challenge, especially as organizations mature their cloud strategies.
• Traditional security tools are not designed for the dynamic nature of cloud environments, prompting a shift toward cloud-specific solutions.
• CASB solutions are gaining traction as they help in enforcing security policies and protecting data across cloud platforms.
• Training and certification of IT staff are the most common strategies to address cloud security needs, with 53% of organizations planning to do so.
• Active Directory is the most commonly used authoritative directory for identity and access management in cloud environments, with 73% of organizations using it on-premise.

Summary

Cloud security is a critical area of focus for organizations as they continue to adopt cloud services. While cloud computing offers significant benefits such as flexible capacity, improved availability, and cost reduction, it also presents new security challenges that require updated skills and tools. The primary concerns include data loss, data privacy, and confidentiality breaches, with compliance and visibility into cloud infrastructure emerging as major headaches. Organizations are increasingly relying on data encryption, access control, and security monitoring as the most effective controls, while also exploring CASB solutions to enhance cloud security. The adoption of cloud messaging apps is hindered by compliance, inadequate security, and cost concerns, and DevOps processes are impacted by security constraints. Overall, cloud security budgets are expected to grow, reflecting the increasing importance of securing cloud environments.