Security - CIOInsight
Home arrow Security arrow Cloud Security Survey Reveals Gap Between IT, Compliance Officers

Security Slideshow:
Cloud Security Survey Reveals Gap Between IT, Compliance Officers

By Bob Violino on 2011-11-23


A study by the Ponemon Institute, sponsored by security technology vendor Vormetric Inc., shows that less than half of the 1,018 U.S.-based IT security practitioners and compliance officers surveyed think their organizations have adequate technology in place to secure their cloud computing infrastructures. The two groups of executives—IT security and compliance—disagree sharply on whether the cloud is as secure as on-premise data centers. They also have differing opinions on who is responsible for cloud data security and what security measures companies should use. Ponemon Institute’s report, “Data Security in the Cloud Survey of U.S. IT Operations, IT Security and Compliance Practitioners,” surveyed the executives online over a three-week period ending in October 2011. “While we were surprised by the different attitudes towards cloud security among IT practitioners and compliance officers, the findings did reveal that security in the cloud is a concern for both groups, especially in IaaS environments,” says Larry Ponemon, chairman and founder of the Ponemon Institute. What is most troubling, Ponemon says, is that while respondents feel they lack adequate technologies to secure their cloud environments, ownership of security in the cloud is dispersed throughout the organization.

LATEST STORIES

BLOGS
 
  • of

1.Different opinions


Only one third of IT security executives polled think cloud infrastructure environments such as Infrastructure-as-a-Service (IaaS) are as secure as on-premise data centers, while about half (49%) of the compliance officers polled think IaaS is just as secure.

2.More different opinions


52% of compliance executives surveyed think their organizations have sufficient policies and procedures to enable safe and secure use of cloud infrastructure. Only 34% of IT security executives surveyed think that’s that case.

3.Responsibilities


21% of compliance officers polled say they are responsible for defining security requirements in the cloud, while 22% of IT security respondents think business unit leaders are responsible for defining security requirements in the cloud.

4.Lacking technologies


Only one third of IT security practitioners polled (35%) polled think their organizations have adequate technologies to secure their IaaS environments; 43% of compliance officers polled agree.

5.Auditing


59% of IT security executives surveyed and 55% of compliance officers surveyed say their organization’s internal audit review does not provide feedback on security in the cloud infrastructure environment.

6.88%


88% of IT security executives surveyed say their organization has firewalls in place to protect sensitive or confidential information placed into cloud environments, while 85% have antivirus/antimalware software in place and 50% have identity and access management.

7.Encryption shortfall


Only 31% of the all respondents say their organization’s major cloud providers use encryption to protect data from insider threats.

8.Data in the cloud


If the data were encrypted, 69% of all the respondents say they would place non-regulated customer data such as purchase history, email address lists and shipping information in the cloud environment. If data were not encrypted, more than half 52% say they would still place this data in the cloud.

9.Increasing budgets


On average, about 20% of the IT budget in organizations participating in the study is allocated to cloud services. This is expected to increase to about 31% over the next 12 to 24 months.

10.56%


More than half (56%) of IT practitioners say that security concerns will not keep their organizations from adopting cloud services.

  • More slideshows

FEATURED SPONSORED VIDEOS

FEATURED SPONSORED ARTICLES

Erasable E-Paper Saves Trees, Cuts Costs

Why Smart Companies Should Adopt the Lessons of Gaming

Interest in Mobile WiFi Hotspots Fuels New Solutions

A Closer Look at Public Cloud Security

View More Articles

  Brought to You By
Click Here



 

Advertisement

Sponsored Links
  • Try Windows Azure free for 90 days

  • Introducing the world's first family of systems with integrated expertise

  • FREE Securing Smartphones & Tablets for Dummies Book from Sophos
  • 77% of the Fortune 500 Manage Content Securely with Box.
  • Leverage your virtual computing environment with Dell.
  • Build an IT Infrastructure That Delivers the Future
  • 5 New Technologies That Will Change Enterprise ITAdvertisement
  • eWEEK Quick LInks

     
    Close this advertisement