While the cloud presents new and unique threats, it also gives organizations a needed push to reassess some of their failings when it comes to securing their sensitive data.
As more companies move to cloud services, the cloud has overtaken databases and file servers as the top risk storing sensitive information, and privileged users were identified as an enormous threat to their organizations, according to the responses of IT decision makers in a new survey.
Charles Goldberg, senior director of product marketing at Vormetric, told the WHIR, “This means controlling access to [data] at a low level, securing it through encryption or tokenization to obscure data, and then also keeping the keys and methods of translating tokens secure. That’s often where things break down.”
Goldberg notes that corporate IT approaches the security of sensitive data on the cloud with a “healthy paranoia”, yet the move to a cloud solution can often be an opportunity to patch security holes that may have existed before. “As companies move to the cloud, they’re looking at protecting their data more aggressively than they have been in their own on-premise data centers,” he said.
Organizations are looking for cloud services that can give them a better chance of avoiding dangerous and costly data breaches.“If you look five years ago, a lot of security goals were driven by compliance… in the last 18 months, one of the big trends has been an increasing number of data breaches, and people are actually looking for security solutions and controls that essentially prevent data breaches.” It’s not about ticking off a checkbox; it’s a legitimate concern about someone stealing their data.
“The cloud and big data survey results demonstrate that there is both hope and fear when it comes to cloud and big data technologies,” said report author and Ovum lead analyst Andrew Kellett. “This fear can lead to slow implementation of these platforms, which stymies innovation and growth. But, there are steps enterprises can take and changes cloud and hosting providers can make that will increase adoption. For example, more than half of global respondents would be more willing to use cloud services if the provider offers data encryption with key access control.”
The survey found that countries embracing cloud like the US have higher levels of concern over cloud data breaches, reasoning that doing more research around the dangers of the cloud lead organizations to be more worried. Japan and Germany, which are more conservative when it comes to technology adoption, had low cloud adoption and a correspondingly low concern over the dangers of putting sensitive data on the cloud.