Cloud 101CircleEventsBlog
Register for CSA’s free Virtual Cloud Trust Summit to tackle enterprise challenges in cloud assurance.

Download Publication

State of Cloud Security Risk, Compliance, and Misconfigurations
State of Cloud Security Risk, Compliance, and Misconfigurations

State of Cloud Security Risk, Compliance, and Misconfigurations

Release Date: 09/17/2021

Cloud misconfigurations consistently are a top concern for organizations utilizing public cloud. Such errors lead to data breaches, allow the deletion or modification of resources, cause service interruptions, and otherwise wreak havoc on business operations. With recent breaches due to misconfigurations making major headlines, this survey was conducted to better understand the current state of cloud security programs, tools utilized to mitigate security risks, organizations’ cloud security posture, and barriers organizations face in reducing security risks.

The goal of this survey is to assess organizational readiness for mitigating public cloud security and compliance risks due to configuration mistakes. 

Key research topics include:
  • Current state of cloud security programs, including top risks and usage of security tools
  • Cloud Security Posture Management (CSPM) challenges faced by organizations in mitigating misconfiguration vulnerabilities
  • Organizational readiness, success KPIs, and teams responsible for different aspects of cloud security posture management
Key findings from the survey:
  1. Lack of knowledge and expertise continues to plague security teams
  2. Information security and IT operations are held responsible for reducing cloud misconfigurations
  3. DevSecOps approach to security is still out of reach
Download this Resource

Bookmark
Share
View translations
Related resources
The State of Security Remediation 2024
The State of Security Remediation 2024
Data Loss Prevention and Data Security Survey Report
Data Loss Prevention and Data Security Survey R...
Third-Party Vendor Risk Management in Healthcare
Third-Party Vendor Risk Management in Healthcare
How to Set Your Small Privacy Team Up for Success
How to Set Your Small Privacy Team Up for Success
Published: 04/17/2024
The Data Security Risks of Adopting Copilot for Microsoft 365
The Data Security Risks of Adopting Copilot for Microsoft 365
Published: 04/16/2024
How to Audit Your Outdated Security Processes
How to Audit Your Outdated Security Processes
Published: 04/16/2024
Cloud Relationships: Getting to Grips With the ‘Vendor of My Vendor’
Cloud Relationships: Getting to Grips With the ‘Vendor of My Vendor’
Published: 04/15/2024

Acknowledgements

Hillary Baron
Hillary Baron
Senior Technical Director - Research, CSA

Hillary Baron

Senior Technical Director - Research, CSA

This person does not have a biography listed with CSA.

John Yeoh
John Yeoh
Global Vice President of Research, CSA

John Yeoh

Global Vice President of Research, CSA

With over 15 years of experience in research and technology, John excels at executive-level leadership, relationship management, and strategy development. He is a published author, technologist, and researcher with areas of expertise in cybersecurity, cloud computing, information security, and next generation technology (IoT, Big Data, SecaaS, Quantum). John specializes in risk management, third party assessment, GRC, data protection, incid...

Read more

Sean Heide
Sean Heide
Technical Research Director, CSA

Sean Heide

Technical Research Director, CSA

This person does not have a biography listed with CSA.

Shamun Mahmud
Shamun Mahmud
Senior Research Analyst, CSA

Shamun Mahmud

Senior Research Analyst, CSA

This person does not have a biography listed with CSA.

Alex Kaluza
Alex Kaluza
Research Analyst, CSA

Alex Kaluza

Research Analyst, CSA

This person does not have a biography listed with CSA.

Josh Buker
Josh Buker
Research Analyst, CSA

Josh Buker

Research Analyst, CSA

This person does not have a biography listed with CSA.

Nikhil Girdhar Headshot Missing
Nikhil Girdhar

Nikhil Girdhar

This person does not have a biography listed with CSA.

Lauren van der Vaart Headshot Missing
Lauren van der Vaart

Lauren van der Vaart

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Related Certificates & Training