Report: 4 in 5 corporations have skilled a cloud safety incident

New analysis from cybersecurity firm, Venafi, discovered that 81% of corporations report that they’ve suffered a safety incident within the cloud over the past 12 months. And nearly half (45%) report that their group skilled not less than 4 incidents.

The analysis appeared to spotlight the elevated operational threat brought on by corporations migrating extra of their functions to the cloud as a result of complexity of cloud-native environments.

The truth is, Venafi additionally discovered that corporations presently host 41% of their functions on the cloud. That share is anticipated to rise to 57% all through the subsequent 18 months. Because it rises, the necessity for strong cloud safety will rise too.

With the complexity created by the cloud, machine identities have turn into a wealthy searching floor for menace actors concentrating on the cloud. Each container — together with Kubernetes cluster and microservices — wants an authenticated machine identification to speak securely, similar to a TLS certificates. Safety and operational dangers improve dramatically if one is compromised or misconfigured.

Venafi’s analysis additionally revealed that there isn’t a clear business customary for which the interior group is presently chargeable for securing the cloud. Mostly, this falls beneath the remit of enterprise safety groups (25%), adopted by operations groups chargeable for cloud infrastructure (23%), a collaborative effort shared between a number of groups (22%), builders writing cloud functions (16%) and DevSecOps groups (10%). 

There may be additionally not a transparent consensus amongst safety decision-makers about who must be chargeable for securing the cloud. Cloud infrastructure operations groups and enterprise safety groups (each 24%) are among the many hottest, adopted by sharing accountability throughout a number of groups (22%), builders writing cloud functions (16%) and DevSecOps groups (14%).

New approaches to safety should make use of a management airplane to embed machine identification administration into developer workloads, permitting groups to guard the enterprise with out slowing manufacturing.

For its analysis, Venafi polled 1,101 safety decision-makers at corporations with over 1,000 workers. Twenty-four % of these surveyed have been at corporations with greater than 10,000 workers.

Learn the full report from Venafi.