LATEST INTELLIGENCE
CLOUD ADOPTION AND
RISK REPORT
PRESENTED BY
E
Executive Summary
Cloud services bring a momentous opportunity to
accelerate business through their ability to quickly
scale, allow us to be agile with our resources, and
provide new opportunities for collaboration. As we
all take advantage of the cloud, there’s one thing we
can’t forget – our data. When using software-as-a-
service (SaaS) we are responsible for the security of our
data, and need to ensure it is accessed appropriately.
When using infrastructure-as-a-service (IaaS) or
platform-as-a-service (PaaS), we are additionally
responsible for the security of our workloads, and need
to ensure the underlying application and infrastructure
components are not misconfigured.
Through analysis of billions of anonymized cloud
events across a broad set of enterprise organizations*,
we can determine the current state of how the
cloud is truly being used, and where our risk lies.
Consider that nearly a quarter of data in the cloud
is sensitive, and that sharing of sensitive data in the
cloud has increased 53% year-over-year. If we don’t
appropriately control access and protect our data
from threats, we put our enterprises at risk.
IaaS/PaaS providers like AWS are increasing
the productivity of our developers and making
our organizations extraordinarily agile. However,
organizations on average have at least 14
misconfigured IaaS instances running at any
given time, resulting in an average of 2,269
misconfiguration incidents per month. Prominently,
5.5% of all AWS S3 buckets in use are misconfigured
to be publicly readable. We can see the risk of
immediate and grand-scale loss of data starting to
grow with these trends. We need to get the basics
right, or face losing the opportunity for business
acceleration before the gas pedal can hit the floor.
The majority of threats to data in the cloud result
from compromised accounts and insider threats.
80% of organizations are going to experience at
least 1 compromised account threat in the cloud this
month. 92% currently have stolen cloud credentials
for sale on the Dark Web. n
Download whitepapers free from www.intelligentcio.com/me/whitepapers/
www.intelligentcio.com
INTELLIGENTCIO
15