Intelligent CIO Middle East Issue 49 | Page 18

Cloud Adoption and Risk Report LATEST INTELLIGENCE 2019 CLOUD ADOPTION AND RISK REPORT 2019 PRESENTED BY Download whitepaper here E Executive Summary Cloud services bring a momentous opportunity to accelerate business through their ability to quickly scale, allow us to be agile with our resources, and provide new opportunities for collaboration. As we all take advantage of the cloud, there’s one thing we can’t forget – our data. When using software-as-a- service (SaaS) we are responsible for the security of our data, and need to ensure it is accessed appropriately. When using infrastructure-as a-service (IaaS) or platform-as-a-service (PaaS), we are additionally responsible for the security of our workloads, and need to ensure the underlying application and infrastructure components are not misconfigured. Through analysis of billions of anonymized cloud events across a broad set of enterprise organizations*, we can determine the current state of how the cloud is truly being used, and where our risk lies. Consider that nearly a quarter of data in the cloud is sensitive, and that sharing of sensitive data in the cloud has increased 53% year-over-year. If we don’t appropriately control access and protect our data from threats, we put our enterprises at risk. 18 INTELLIGENTCIO IaaS/PaaS providers like AWS are increasing the productivity of our developers and making our organizations extraordinarily agile. However organizations on average have at least 14 misconfigured IaaS instances running at any given time, resulting in an average of 2,269 misconfiguration incidents per month. Prominently, 5.5% of all AWS S3 buckets in use are misconfigured to be publicly readable. We can see the risk of immediate and grand-scale loss of data starting to grow with these trends. We need to get the basics right, or face losing the opportunity for business acceleration before the gas pedal can hit the floor. The majority of threats to data in the cloud result from compromised accounts and insider threats. 80% of organizations are going to experience at least 1 compromised account threat in the cloud this month. 92% currently have stolen cloud credentials for sale on the Dark Web. Fortunately, the cloud is still bringing more opportunities than threats. Cloud use is extremely broad, with most organizations using www.intelligentcio.com