Symantec Cloud Security Threat Report
2 likes•1,321 views
The June 2019 Cloud Security Threat Report highlights that 53% of all compute workloads are now in the cloud, but visibility and security measures lag significantly, with 93% of organizations struggling to monitor their cloud environments. Numerous risks are identified, including unauthorized data access leading to incidents, poor implementation of security practices like multi-factor authentication, and insufficient response to insider threats. The report emphasizes the need for improved governance, a zero-trust model, and enhanced cloud security skills to mitigate these evolving threats.
Symantec Cloud Security Threat Report
- 1. June 2019 Adapting to the New Reality of Evolving Cloud Threats Cloud Security Threat Report (CSTR)
- 3. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019 Key Insights Immature security practices add to risk: 65% don‘t implement MFA with IaaS 80% don’t use encryption Open door for Lateral Movement: 64% of cloud security incidents are due to unauthorized access Insiders can be a threat: accidental insider ranked #3 threat to cloud infrastructure Behind the times: 85% are not using CIS best security practices Users behaving badly: weak passwords (37%) and poor password hygiene (34%) top list of bad behaviors
- 9. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019 Skills and Best Practices are Lacking not using Center for Internet Security best practices* *Symantec Internal Data neglect to implement multi‐ factor authentication 65%85% 93% need to enhance cloud security skills
- 10. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019 Data Compliance Compromised by Immature Cloud Culture believe oversharing cloud stored files containing compliance data is a problem 93% 68% have evidence that their data had been for sale on the dark web
- 13. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019 Emerging Threats to Cloud Infrastructure THE TOP THREETHREATS Managing identity and authentication Phishing Accidental inside threats 45% 43% 42% The three highest threat categories, according to the external survey respondents, are:
- 16. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019 Best Practices: Building an Effective Cloud Security Strategy Symantec Cloud Security ‐ research results develop a governance strategy supported by a cloud center of excellence embrace a zero‐ trust model promote shared responsibility use automation and artificial intelligence wherever possible augment in‐house cloud security expertise with managed services