2023-12-13-Thales-2023年云安全调查报告_18页_1mb

报告摘要

2023 Thales Cloud Security Study Summary

Overview

The 2023 Thales Global Cloud Security Study highlights the increasing complexity of securing data in multicloud environments. Organizations face significant challenges due to human error, inadequate encryption, and regulatory concerns, with multicloud adoption on the rise.

Key Findings

Multicloud Prevalence: Average of 2.3 cloud providers per organization, up 35% in two years, increasing operational complexity.
SaaS Growth: High SaaS adoption (97% of respondents using 60+ applications), making it a top attack target for attackers.
Human Error: Identified as the leading cause of cloud data breaches (55%), exacerbated by misconfigurations and limited automation.
Encryption Challenges: Only 45% of sensitive cloud data encrypted on average, with low adoption despite improvements from previous years.
Data Sovereignty Concerns: 83% of respondents express high concern about digital sovereignty, impacting cloud deployment and compliance.
Operational Complexity: 55% find cloud data management more complex than on-premises, with key management issues affecting 62% using multiple systems.

Main Challenges

Threat Landscape: SaaS and cloud storage are primary attack targets; data breaches increased by 4 percentage points, likely due to expanded cloud environments.
Data Security: Most sensitive data unencrypted; factors like developer resistance and legacy strategies limit encryption coverage.
Sovereignty and Regional Compliance: Digital sovereignty requirements pose significant hurdles, with challenges in controlling data location and access.

Recommendations for Improvement

Identity and Access Management: Strengthen multi-factor authentication (MFA) adoption (65% reported use).
Centralized Encryption Control: Consolidate key management to improve encryption scalability and reduce operational overhead.
Automation and Zero-Trust: Implement security automation to enhance efficiency; increase zero-trust adoption for networks and infrastructure.
Simplification and Training: Focus on streamlining security operations to mitigate human error and simplify multicloud environments.

Conclusion

Organizations must address human error, encryption gaps, and sovereignty issues through automation, centralized security controls, and a multi-cloud tailored strategy to better secure cloud assets.

展开完整摘要