90 Percent of IT Pros Worry About Public Cloud Security


A recent Bitglass survey of more than 1,000 IT and IT security practitioners found that one third of respondents have suffered more security breaches with the public cloud than with on-premise applications.

According to the company's 2015 Cloud Security Report, fully 90 percent of respondents expressed concern over public cloud security.

Just 5 percent said they weren't concerned at all about security in the cloud.

Respondents' leading cloud security concerns are as follows: unauthorized access (63 percent), hijacking of accounts (61 percent), malicious insiders (43 percent), insecure interfaces/APIs (41 percent), and denial of service attacks (39 percent).

Key barriers to cloud adoption included general security concerns (45 percent), data loss and leakage risks (41 percent), loss of control (31 percent), and legal and regulatory compliance (29 percent).

(A recent BitSight survey found that 79 percent of IT security and risk management decision-makers said ensuring that business partners and third parties comply with their security requirements is a top priority over the next 12 months.)

Thirty-six percent of respondents said they believe even leading cloud applications like Salesforce and Office 365 are less secure than on-premise applications.

Still, 38 percent of enterprises store intellectual property in the cloud, 31 percent store customer data, 19 percent store sensitive financial data, and 8 percent store employee healthcare data in the cloud.

And 43 percent of respondents said employees are allowed to access personal storage services from the corporate network.

"Almost 80 percent of managers are concerned about personal cloud storage services operated by employees or visitors, and the risk they pose regarding data privacy and leakage," the report states.

A recent SailPoint survey of 1,000 enterprise employees found that those managers' concerns are justified -- 1 in 5 respondents to that survey said they had uploaded proprietary corporate data to a cloud app "with the specific intent of sharing it outside the company."

"The report confirms that the cloud is increasingly part of enterprises' IT plans, with some 72 percent of organizations saying they are either planning to implement or are actively implementing cloud environments," Bitglass CEO Nat Kausik said in a statement.

"At the same time, organizations are concluding that SaaS applications are less secure, slowing widespread adoption of these technologies," Kausik added.