Download Publication
Who it's for:
- C-Suite
- Decision-makers
- Risk managers
- Security professionals
Measuring Risk and Risk Governance
Release Date: 06/21/2022
- Assessing the maturity of public cloud consumption and risk management in enterprises
- Understanding current challenges and perceived effectiveness of risk management in public cloud
- Analyzing the challenges of measuring risk in the cloud
- Identifying best practices to reduce risk and address risk tolerance in the cloud
- 70% of organizations reported not effective or somewhat effective processes for assigning risk to cloud assets
- The majority of respondents use 2 or more IaaS platforms (59%)
- The top security concern when running applications in the public cloud was loss of sensitive data
- When asked about the vendors or tools used to quantify risk, the most common response was “None” (51%)
Download this Resource
Prefer to access this resource without an account? Download it now.
Related Resources
.png)
Acknowledgements
Alex Kaluza
Research Analyst, CSA
Nick Godfrey
MK Palmore
Hillary Baron
Senior Technical Director - Research, CSA
Chris Rezek
Product Manager for Security and Privacy at Google
Phil Venables
Google Cloud
Catherine Nelson
Josh Buker
Research Analyst, CSA
Etienne De Burgh
John Yeoh
Global Vice President of Research, CSA
With over 15 years of experience in research and technology, John excels at executive-level leadership, relationship management, and strategy development. He is a published author, technologist, and researcher with areas of expertise in cybersecurity, cloud computing, information security, and next generation technology (IoT, Big Data, SecaaS, Quantum). John specializes in risk management, third party assessment, GRC, data protection, incid...
Taylor Lehmann
Related Certificates & Training
.png){kind=logo}
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
For those who want to learn from the industry's first benchmark for measuring Zero Trust skill sets, the CCZT includes foundational Zero Trust components released by CISA and NIST, innovative work in the Software-Defined Perimeter by CSA Research, and guidance from renowned Zero Trust experts such as John Kindervag, Founder of the Zero Trust philosophy.
Learn more