Alexandra Borgeaud
Research expert covering cybersecurity and tech in Latin America
Cloud security - statistics & facts
Have you ever wondered whether the data, applications, and services that you decided to store in the cloud are safe? Likewise, as companies increasingly migrate their workloads to the cloud, security concerns such as data loss, ransomware, or account compromisation have become more important than ever. Over the past years, cyber threats have increased in numbers and variety, making security solutions essential to ensuring business continuity. Simply put, cloud security is about protecting digital assets stored on cloud computing platforms. It encompasses products and services that safeguard cloud resources through a set of technologies and policies designed to protect information while ensuring regulatory compliance. Successful cloud-based security solutions allow for faster scalability and time for deployment, as well as cost savings.
Cloud security is a shared responsibility
Cloud security is a shared responsibility between the customer and cloud provider. The shared responsibility model distinguishes between three categories of responsibilities. Security responsibilities for defending cloud infrastructure and networks always belong to the cloud provider. In contrast, the customer’s responsibilities include identity and access management, encryption and protection of cloud-based data assets, and compliance. The last category consists of responsibilities that vary based on the chosen service model: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS).The main cloud security risk remains the human factor
Security has always been more than a technology problem. Some of the biggest security threats include incorrect configuration and insecure interfaces along, as well as exfiltration of sensitive data. However, it was not until recently that companies globally began emphasizing the importance of security awareness training, access rights and privilege, regular data back-up, or otherwise stated good cyber hygiene. Over the past three years, the main barriers to migrating to cloud-based security solutions have been budget and lack of staff expertise. Organizations encounter similar challenges when securing their multi-cloud environments as well: over one half of cybersecurity professionals struggled with ensuring data protection and privacy for each cloud environment. As more public and private organizations migrate to the cloud, making sure that security teams and employees are trained to address these emerging challenges is of paramount importance.
