iTWire - Most cloud pros saw at least one security incident in last year: survey

A study conducted among 501 professionals from C-level executives to IT experts in the United States, United Kingdom, and Germany aimed at identifying current industry patterns, discovered that 88% of them encountered a security breach linked to cloud technology within the past year.

SUSE, a vendor that focuses on open-source technology and is based in Germany, conducted a survey to bring attention to the current level of cloud native adoption and the major security issues that arise from it. The purpose of the survey was to explore ways to effectively address these concerns.

During this week's SUSECON, the company shared the findings of their survey in an official announcement.

According to the research, individuals who make IT decisions have confronted an average of four cyber security concerns related to cloud computing within the past twelve months. It has been noted that the number is slightly higher with five security incidents in the US, while those in Germany have experienced three.

Around 33 percent of participants in the survey identified that the primary issue related to cloud security was the protection of their data kept in cloud-based systems managed by external parties or vendors.

Other issues that were considered less important were unauthorized access attempts made by malicious individuals, the proper handling of security policies, joining together different systems, and the implementation of automatic processes.

The people who were asked spent roughly one-third of their IT funds on security that is specifically designed for cloud systems. The percentage for this was higher in America (42%) than in Europe (33%).

In terms of ensuring security measures, the utilization of security automation and container firewall was prevalent, with each equally representing 38%.

The company stated that American decision-makers tend to use both free and paid observability and security tools more frequently (33%) than their European counterparts (24%).

We can see a similar pattern with PSP (Policy Security Policy) or PSA (Policy Security Automation) policies, where 31% of respondents preferred it compared to 22%. As for Kubernetes network policies, 32% of respondents favored it in comparison to 15%. Lastly, there was also a difference in preference between using free CVE (Common Vulnerabilities and Exposures) or a paid scanner, with 26% picking the former and 18% selecting the latter.

One-third of the participants stated that in upcoming years, they would be worried about giving more attention to evaluating and ranking goals related to the auditability of source code. This method involves carrying out tests and manually inspecting the codebase to identify any potential bugs.

Forty-five percent of Americans surveyed assigned greater importance to the ability to audit source code, while 36 percent identified the depth, quality, and security of SBOM as vital components in guaranteeing that supply chain security objectives are met.

Germany and the United Kingdom had lower priorities when it came to auditing source code, with only 23% and 26% respectively, and their investing in security for cloud-native systems is less than other countries.

However, respondents from Europe (40%) were significantly more prone to expect a review of objectives concerning construction standards in contrast with their American counterparts (15%).

Dr. Thomas Di Giacomo, who is the chief technology and product officer at SUSE, acknowledged the fact that all businesses are undergoing a digital transformation. He thinks that open-source solutions can speed up this transformation process.

The trend report 'Securing the Cloud' showcases the insights of IT groups dealing with the increasing usage of intricate cloud-based technologies.

The security challenges around the world are always changing and becoming more complex. Our company is ready to assist organizations that want to use secure open source technologies for important and innovative projects that are migrating to the cloud.

Sign up for the ITWIRE UPDATE Newsletter by clicking here and become a part of our iTWireTV YouTube community by joining here. For more of the latest news, click here to go back.

Advertise Your Webinar On ITWire

The focus is on Webinars.

Nowadays, marketing funds are primarily directed towards hosting webinars along with generating potential leads.

We suggest running a marketing campaign for your Webinar for a minimum of 3 to 4 weeks leading up to the actual event, in order to ensure maximum exposure and attendance.

Our iTWire campaign is set to involve a lot of advertising on our very own News Site, itwire.com. As well as this, we'll be promoting our Newsletter on our website https://itwire.com/itwire-update.html and sharing Promotional News & Editorial. But that's not all - we'll also be conducting a video interview with the main speaker which will be featured on iTWire TV https://www.youtube.com/c/iTWireTV/videos. This interview will be used to promote the campaign on the iTWire Home Page through various posts.

As Lockdown measures are being lifted, iTWire is shifting its focus to help you with your webinars and campaigns. We offer support through part payments and extended terms, as well as a Webinar Business Booster Pack and other supportive programs. Additionally, we can help you with your adverts and written content, and we are able to coordinate your video interviews.

We are excited to talk to you about your campaign objectives. Kindly click on the button provided below.