About the complexity of multi-cloud environments and the lack of skilled workers
Check Point has published its Cloud Security Report 2022. With enterprises heavily using the cloud, with 35 percent running more than half of their workloads on Azure, AWS and GCP, they are struggling to manage the complexity of securing their cloud infrastructures across multiple cloud platforms – especially as they are also suffering from a shortage of skilled workers at the same time.
According to Check Point’s report, misconfigurations were the main cause of cloud incidents in 2021. It is therefore a plea for a uniform security solution across all platforms of cloud providers.
The global report, which is based on a survey of 775 experts, also shows that the number of security incidents in the cloud has increased by ten percent compared to the previous year 2020. Software vendors recorded the largest increase with 146 percent more attacks than in 2020. Of the respondents, 27 percent of companies now have misconfiguration as the cause of incidents in the cloud, far ahead of other common problems, such as the disclosure of data or the theft of accounts.
Companies are also finding IT difficult to integrate IT security into the DevOps cycle, which is exacerbated by the shortage of skilled workers complained of by 45 percent of companies. Only 16 percent of respondents said they have extensive DevSecOps capabilities, and 37 percent are just beginning to integrate DevSecOps into their cloud application development process.
While cost savings and ease of use were originally the main reasons for using the integrated security of cloud providers, it is increasingly becoming apparent that the complexity of managing three or four different security platforms of the respective cloud providers makes little sense. This speaks in favor of an independent cloud security solution to uniformly optimize security across all cloud platforms. In fact, 54 percent of respondents believe that an independent security provider is better suited to their needs than the provider of a cloud platform. An important consideration when deciding between integrated cloud security and a third-party security solution provider is the reduction in complexity, which was mentioned by 56 percent of respondents.
Among other factors that increase the complexity of multi-cloud security, 57 percent of respondents cited ensuring data protection and privacy for each environment, 56 percent cited the presence of the right skills to deploy and manage a complete solution for all cloud environments, and 50 percent cited understanding the options for service integration as other factors that increase the complexity of multi-cloud security. Again, this speaks in favor of the consolidated security solution as a countermeasure.
There is also an increasing need to implement application protection in the cloud, with this capability having increased by 11 percent in the last year and being the third largest focus with 53 percent of survey respondents as advocates. According to the report, 57 percent of respondents said they expect to run more than half of their workloads in the cloud over the next twelve to 18 months. Among these, about 76 percent already used two or more cloud providers.
TJ Gonen, VP of Cloud Security at Check Point
With the increasing shift to the cloud, the ability to simplify cloud security is becoming more and more important. 75 Percent of organizations want a single, unified security platform with a single dashboard where they can configure all the policies needed to protect data in the cloud.
Currently, 80 percent of organizations need to work with three or more separate dashboards for security solutions to keep their cloud under control.
TJ Gonen, VP of Cloud Security at Check Point, commenting on the report: “This independent survey clearly shows that the security forces perceive the increasing dependence on the cloud as a challenge. With the shortage of skilled workers, companies need to do everything they can to simplify the management of their cloud security. An integrated third-party solution that covers all cloud platforms with a single dashboard would relieve much of the pressure and reduce the risk of increasingly frequent misconfigurations. This was the main reason for Check Point to develop its CloudGuard Cloud Security Suite.”