Cloud data sharing and storage services are expanding rapidly; cloud security, however, is not improving at the same pace.<\/p>\n\n\n\n
New research reveals that 73 percent of respondents in a recent study have experienced a cloud-related security incident due to inadequate security practices. Symantec\u2019s Cloud Security Threat Report (CSTR), released June 24, finds that while 53 percent of respondents reported workloads moving to cloud applications, 54 percent said their security practices have not kept up at the same rate.<\/p>\n\n\n\n
The study covered around 1,250 different IT decision makers in about 11 different countries with about 10 percent coming from global government respondents, said George Teas, senior director of Systems Engineering at Symantec.<\/p>\n\n\n\n
According to the report, cloud technology is not responsible for data breaches. Instead, the authors point to three causes. They are:<\/p>\n\n\n\n
– Slow security modernization on cloud applications. <\/b>“Our research shows that 69 percent of organizations believe their data is already on the Dark Web for sale and fear an increased risk of data breaches due to their move to cloud,\u201d said Nico Popp, Symantec\u2019s senior vice president of cloud & information protection.<\/p>\n\n\n\n
– Complex IT systems.<\/b> According to the report, 64 percent of security threats are tied to the cloud and 25 percent of cloud security alerts go unaddressed. \u201cA data breach on information using a cloud application or taking an application that doesn\u2019t have the right security controls into it is a vulnerability of the entire network,\u201d Teas said.<\/p>\n\n\n\n
– Risky behaviors.<\/b> These behaviors run contrary to recommended security practices and expose data on the network to breach. The report cited oversharing as one of the most common risky behaviors, with 93 percent of respondents reporting oversharing as a problem on their networks. Teas refers to this data as \u201cshadow data.\u201d<\/p>\n\n\n\n
\u201cIt is basically customers putting data into cloud applications that are either overshared, i.e., they let too many people see the data, or the data should never reside in there.\u201d<\/p>\n\n\n\n
Embracing a zero trust model<\/b><\/p>\n\n\n\n
One solution the report suggests as a solution is a zero-trust model.<\/p>\n\n\n\n
“The idea behind zero trust is to have complete visibility into the data flow and the user traffic that is going to cross in accessing the application,\u201d Teas said.<\/p>\n\n\n\n
These security measures are especially important to federal government officials as they transition to the cloud, Teas said.<\/p>\n\n\n\n
\u201cThey are going to need the same policies regardless of if their data is on the premise or whether or not their data is on the cloud,” Teas said. “They need to have a holistic visibility approach.\u201d<\/p>\n\n\n\n
For federal governments, data security on cloud networks can have significant implications for national security, Teas said.<\/p>\n\n\n\n
\u201cFor national security we have to know what the data is, where the data is at, and who is it being shared with so that you can understand your risk exposure and who you are allowing to have access to that data,\u201d Teas said.<\/p>\n\n\n\n
To implement these practices, Teas said organizations need to change how they view security using what he calls development security operations.<\/p>\n\n\n\n
\u201cThey are building the application and then bolting security on top of that. What they need to start doing to get in front of this is actually building security into these applications so it is a foundational part, anytime they develop,\u201d Teas said.<\/p>\n","protected":false},"excerpt":{"rendered":"
Symantec\u2019s Cloud Security Threat Report finds that while 53 percent of respondents reported workloads moving to cloud applications, 54 percent said their security practices have not kept up at the same pace..<\/p>\n","protected":false},"author":7,"featured_media":27566,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":13,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"8":{"categories":["home","daily-brief","newsletters","it-cloud-report"],"primary_category":"it-cloud-report"}}},"categories":[106,29,13,32],"tags":[],"coauthors":[3112],"class_list":["post-28383","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-industry","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"VKREF5GZZBED3MANFDI77JFJKI","arc_canonical_url":"\/industry\/2019\/07\/02\/3-ways-security-is-compromised-on-the-cloud\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n