Cloud App Development

New Cloud Security Alliance Survey Finds 67% of Organizations Already Store Sensitive Data in Public Cloud Environments

Cloud Security Alliance
The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, today released Sensitive Data in the Cloud, the findings of which provide deeper insight into the industry’s knowledge, attitudes, and opinions regarding sensitive data in the cloud.

“Increasingly, organizations are overcoming their initial apprehension around the cloud and its perceived security insufficiencies and are storing their sensitive data in public cloud environments with a growing use of Confidential Computing to protect workloads and ensure trust. In general, organizations have reservations about their own ability to protect their sensitive data in the cloud. By shedding light on these issues, we can find ways to address and eventually close the gap between the perceived effectiveness of cloud service providers’ (CSP) security controls and organizations' lacking confidence in their abilities to protect sensitive data in the cloud,” said Hillary Baron, Senior Technical Director for Research, Cloud Security Alliance, and a lead author of the report.

The survey, which was sponsored by Anjuna Security, sought to better understand organizations' needs pertaining to cloud use and data security, as well as their familiarity with the technologies surrounding these environments. Additionally, respondents were asked to share their approach to hosting sensitive data in the cloud and what they saw as security challenges and priorities for the coming year.

Among the study’s key findings:
Most organizations already have sensitive data in the cloud. The majority of organizations surveyed (67%) host sensitive data or workloads in the public cloud.
89% of respondents found that CSP security controls are effective, but organizations still aren’t confident in their own ability to protect sensitive data in the cloud. Most organizations report that their CSP security controls are highly effective (38%) or somewhat effective (51%). However, just under a third of organizations (31%) were not confident or only slightly confident about their ability to protect sensitive data in a cloud environment and another 44 percent reported they were only moderately confident.
Over a fourth of organizations (27%) surveyed are already using Confidential Computing to protect workloads.
Additionally, over half of organizations (55%) have plans to implement Confidential Computing within the next two years.
The survey was conducted online by CSA in April 2022 and received 452 responses from IT and security professionals from various organization sizes and locations. CSA research prides itself on vendor neutrality, agility, and integrity of results. Sponsors are CSA Corporate Members who support the findings of the research project but have no added influence on the content development or editing rights to CSA research.

About Anjuna
Anjuna Security makes the public cloud secure for business. Confidential Computing software from Anjuna Security effortlessly enables enterprises to safely run even their most sensitive workloads in the public cloud. Unlike complex perimeter security solutions easily breached by insiders and malicious code, Anjuna leverages the strongest hardware-based secure computing technologies available to make the public cloud the safest computing resource available anywhere. Anjuna is based in Palo Alto, California.

About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem.

Spotlight

Spotlight

Related News

Cloud Storage

RemotePC is Offering a High Performance Remote Desktop Solution for Enterprise Customers - Now Including Unlimited Endpoint Cloud Backup

PR Newswire | December 28, 2023

RemotePC, one of the fastest and most reliable remote desktop services on the market, is offering enterprise users a highly affordable and scalable solution that now includes unlimited endpoint cloud backup space at little extra cost. With the high demand for remote work and the need for efficient tools to help boost productivity, RemotePC continues to enhance its offering, now by including unlimited cloud backup space from IDrive Backup for just $20/year. With the inclusion of this cloud backup space, users can remotely enable backup for selected computers from within the dashboard of their RemotePC account, quickly allowing them to perform, manage, and restore backups from wherever they are. This backup solution comes integrated with the user's RemotePC account, allowing for instant backup activation and deployment and ensuring data recovery in the event of an accidental data loss, data disaster, or ransomware attack. With a RemotePC Enterprise plan, IT admins for large organizations can now reliably scale to thousands of computers, giving businesses of any size an affordable and feature-packed service without sacrificing on performance, with near 60 FPS speed making it possibly the world's fastest solution. Along with the addition of unlimited cloud backup, enterprises have the opportunity to leverage one of the most robust and feature-packed remote access solutions available. Features include: Remote Deployment - allow deployment for users and grant them permission to install RemotePC on other computers and access them remotely. Computer Grouping - add computers, organize them into groups, and view the most recently accessed computers. User Management - create new user accounts, organize them into groups, provide access permissions and more. RemotePC Enterprise also offers unlimited user licenses. Attended Access - secure and instant access to any computer by entering a shared session code. Mass Deployment - remotely install the RemotePC™ application on multiple target PCs and Macs in one-go. Logs and Reports - track activities across the entire account or individual users with remote access logs and web activity logs. Compliance - RemotePC™ assists businesses in ensuring the remote access solution meets regulatory compliance governing their industry. Single sign-on - allow users to access RemotePC by signing in to a central identity provider. RemotePC utilizes TLS v 1.2/AES-256 encryption for transferring user authentication data between the remote computer and local computer, ensuring remote sessions are secure. Personal Key, a unique password set for each computer, acts as an extra layer of protection. Pricing for RemotePC Enterprise starts at $599.50/year for 100 computers, with the option to add-on computers as needed, and custom plans are also available by contacting the RemotePC sales team. The company also offers a full-featured free 7-day trial with no credit card required. About IDrive IDrive Inc. is a privately held company specializing in cloud storage, online backup, file sharing, remote access, compliance and related technologies. Core services include IDrive®, RemotePC™ and IBackup. The company's services help over 4 million customers back up over 500 Petabytes of data.

Read More

Cloud App Management

Volumez and Anodot Join Forces to Manage and Reduce Cloud Costs While Taking Data Infrastructure Performance to Unprecedented Levels

Anodot | December 19, 2023

Volumez, a revolutionary modern cloud data infrastructure company, announced a new customer and partnership relationship with Anodot, the market-leading AI-powered business and cloud optimization platform. Anodot selected Volumez to deliver persistent block storage on AWS for its large farm of PostgreSQL instances. Through a deep technical comparison of alternatives, Volumez was chosen after exhibiting 10x application performance improvements while reducing costs by more than 25%. The nature of database improvements core to customer-facing applications included dramatic increases in transactions per second and radical reductions in latency. Volumez, with its profound benefits, has been chosen to enhance Anodot's platform experience by improving efficiency and optimizing costs. This collaboration aims to deliver an exceptional user experience while maximizing overall value. Anodot users can now discover new levels of optimization and efficiently activate these improvements using Volumez, resulting in a highly cost-efficient and performant data infrastructure. The companies have solidified this collaboration through a partnership agreement, enabling Anodot to incorporate the Volumez SaaS service into its product portfolio and distribution channels. "We are delighted to call Anodot both a customer and partner," said Amir Faintuch, CEO of Volumez. "With Volumez, the Anodot cloud optimization platform can now enable remediations to costly and encumbered performance for data applications." "Volumez immediately created incredible performance and cost benefits to our database infrastructure, expanding value to solving problems we identify with Anodot," said David Drai, CEO of Anodot. "There is a direct line from our product offering to the Volumez solution, so we want to extend this to our customers through the Anodot/Volumez partnership to amplify the value we create." About Anodot Anodot enables organizations to leverage the transformational power of AI to optimize their business. Anodot's AI-driven, autonomous business monitoring solution identifies revenue-critical business incidents in real-time. Anodot's cloud cost management solution helps companies manage and optimize their cloud cost and resource utilization across AWS, GCP, Azure, and Kubernetes. Discover more at anodot.com. About Volumez Volumez is a revolutionary composable data infrastructure company businesses employ to realize the true potential of their data. With its innovative controller-less architecture, Volumez tackles latency and scalability challenges by establishing direct Linux data paths, ensuring exceptional performance and resiliency. Driven by cutting-edge technology and a customer-centric approach, Volumez offers comprehensive solutions that streamline data workflows, enhance data quality, and drive informed decision-making.

Read More

Cloud App Management

DriveNets and Acacia Announce Joint Network Cloud 400G ZR/ZR+ Solution

PR Newswire | January 16, 2024

DriveNets – a leader in innovative networking solutions – and Acacia today announced the completion of integrating multiple Acacia 400G ZR/ZR+ optical modules with DriveNets' Network Cloud platform. The combined DriveNets-Acacia solution will ensure quick adoption of this innovative disaggregated networking solution and accelerate large-scale network rollouts. DriveNets and Acacia have joint Tier-1 operator customers who will deploy the joint solution. Last September, DriveNets announced that Network Cloud was the first Disaggregated Distributed Chassis/Backbone Router (DDC/DDBR) to support ZR/ZR+ optics as native transceivers that can be inserted into any Network Cloud-supported white boxes. The combined Acacia-DriveNets solution announced today adds the initial collaboration between the companies, offering several benefits: The joint solution will deliver significant simplicity and cost savings by collapsing Layer-1 to Layer-3 communications into a single platform. The use of 400ZR/ZR+ eliminates the need for standalone optical transponders, lowering the number of boxes in the solution, and reducing operational-overhead, floor-space, and power. DriveNets and Acacia worked together to ensure that the DriveNets NOS (DNOS) supports the 400ZR/ZR+ modules beyond simply plugging them into the box. The collaboration ensures the 400ZR/ZR+ modules can be tunable, configurable, and manageable by DriveNets Network Cloud software. This integration also goes beyond interoperability validation. DriveNets Network Cloud offers full software support for the Acacia modules, including configuration (channel and power), monitoring, and troubleshooting for Acacia Bright 400ZR+ transceivers with transmit power greater than +1dBm. "Today's announcement is further proof of the growth of disaggregated networking solutions and demonstrates that more operators are looking for open solutions that will allow them to mix elements from multiple vendors and avoid being locked to a specific end-to-end vendor solution," said Nir Gasko, Vice President, Global Strategic Alliances for DriveNets. "By collaborating with Acacia, we enable our joint customers to quickly adopt cutting-edge technologies and evolve their networks faster." "Partnering with DriveNets on this joint solution will allow network operators to deploy Acacia's high-volume standard-based coherent pluggable portfolio in open disaggregated networks with less effort," said Fenghai Liu, Senior Director of Product Line Management for Acacia. "Through this collaboration customers can achieve significant capex and opex savings with router-based coherent optics." DriveNets Network Cloud is being adopted by more Tier-1 operators around the world. By partnering with world-class providers like Acacia, the company continues to expand its ecosystem to support its customers' desire to mix-and-match hardware and software from multiple vendors. Learn more about DriveNets here. About DriveNets DriveNets is a leader in high-scale disaggregated networking solutions. Founded in 2015, DriveNets modernizes the way service providers, cloud providers and hyperscalers build networks, streamlining network operations, increasing network performance at scale, and improving their economic model. DriveNets' solutions – Network Cloud and Network Cloud-AI – adapt the architectural model of hyperscale cloud to telco-grade networking and support any network use case – from core-to-edge to AI networking – over a shared physical infrastructure of standard white-boxes, radically simplifying the network's operations and offering telco-scale performance and reliability with hyperscale elasticity. DriveNets' solutions are currently deployed in the world's largest networks.

Read More