26 April 2018
Bitglass CMO Rich Campagna says given the concerns and challenges highlighted by IT pros, cloud security is here to stay.
The cloud security market is growing largely because traditional security infrastructure has failed, claims Bitglass.
According to the global cloud security specialist, next-gen firewalls and built-in capabilities are “insufficient” for regulatory and internal compliance as well as cloud data protection.
In a recent survey conducted in partnership with the Information Security Community, Bitglass asked more than 570 cyber security and IT pros about their approach to cloud security (the company is unable to disclose the regional breakdown of where its respondents came from).
The study revealed that 84 per cent believe traditional security solutions don’t work or have limited functionality in the cloud.
It found that 69 per cent of organisations rely solely on endpoint solutions for malware protection, tools which Bitglass says cannot detect or block malware at rest in the cloud or employees’ BYO devices .
When asked about the biggest security threats to their organisations, most cited misconfigurations (62 per cent) followed by unauthorised access (55 per cent). Thirty nine per cent said external sharing was the most critical threat while 26 per cent highlighted malware and ransomware.
The survey also revealed that only 44 per cent have visibility into external sharing and data loss protection policy violations in their cloud application and environments.
More shocking, according to Bitglass, was the fact that 85 per cent acknowledged they were unable to identify anomalous behaviour across cloud applications.
Bitglass CMO Rich Campagna reckons the issues and challenges highlighted by survey respondents proves that cloud security is here to stay.
“Enterprise security teams are concerned about the next-generation of cloud threats that pose a risk to corporate data" he says. "There has already been immense progress in the past five years as security personnel come to the realisation that legacy security tools and processes are not enough to secure their ever-changing ecosystem.”
