Security
Headlines
HeadlinesLatestCVEs

Headline

Cyera Survey Finds One in Three Respondents Want to Minimize Cloud Data Risk

Multiple providers say ‘cloud data sprawl’ makes managing cloud data risk a priority initiative within the next 12 months.

DARKReading
#web#google#microsoft#amazon#oracle#intel#aws#alibaba#ibm

SAN MATEO, Calif. and TEL AVIV, Israel , Sept. 28, 2022 /PRNewswire/ – Cyera, cloud data security company, released the results of a survey of 200 cybersecurity professionals today that found 33% of organizations want to minimize cloud data risk and 48% want to improve governance or policy management of cloud data access.

Cyera’s survey polled nearly 200 cybersecurity professionals on their security focus areas for the next 12 months and found that:

  • 43% prioritize data protection in their public cloud infrastructure as a top priority.
  • 31% rank discovering and classifying cloud data a priority.
  • 35% utilize at least two public cloud providers from a list that included Amazon Web Services, Google Cloud, Microsoft Azure, Alibaba, IBM and Oracle; 17% of respondents rely on three or more.

“The survey data affirms that security teams are struggling to keep pace with data proliferation across their cloud environments,” said Yotam Segev, Cyera co-founder and CEO. “The cloud provides obvious business advantages, but the sheer volume of data moving to the cloud, lack of visibility and the use of multiple cloud service providers all increase the threat surface exponentially.”

Migrating to the cloud can cut operating costs by nearly 40%. It also boosts development agility, reduces time spent maintaining traditional IT infrastructure, and offers flexibility and scalability benefits over traditional on-premises infrastructure. But cloud providers only offer limited visibility into what data customers have, how sensitive it is, and how to improve the security and risk posture of that data across their cloud estate. This results in greater cyber-resilience and compliance risks stemming from exposed sensitive data, overly permissive access, and free movement of data between environments and individuals.

Common examples include sensitive data in non-production environments, customer and employee personally-identifiable information that is accessible to users that have no business justification to access them, and poor backup management. In the latter case, a business may believe that they no longer have a reason to manage data from a given application and decommission the cloud data stores associated with it.

Recently, Cyera found ghost data in over 30% of cloud data stores. These are typically found in non-production environments that are not secured with the same rigor as a production environment, where sensitive data they contain is more susceptible to inadvertent disclosure or exfiltration. They also represent a potential GDPR (EU General Data Protection Regulation) violation, because maintaining personal data when there is no longer a business purpose to maintain it violates the statute.

“Cloud data security requires a new approach to addressing the secular growth in data volumes, cloud migration, and risks posed by data regulation and cyber attackers,” said Phillipe Botteri, partner at Accel. “CISOs and security teams are in need of rapidly-deployable, comprehensive and innovative solutions.”

Cyera is purpose-built to deliver protection for cloud data and provide complete, detailed context on data, access and identities. Intelligent and context-rich, the platform creates a bridge between business imperatives and security controls. With Cyera, security teams can reduce access risk, contain data sprawl and ensure encryption from a unified view that provides continuous visibility without impacting security or performance. Cyera empowers customers to realize the speed and scale that the cloud promises, allowing their teams to innovate and build value with security as an enabler.

About Cyera

Cyera is the cloud data security company that gives businesses context and control over their cloud data. The company’s mission is to empower security teams to enable innovation, securely. As the industry’s most advanced cloud data protection platform, Cyera instantly provides companies a strong baseline for all security, risk management, and compliance efforts and ensures the entire organization operates with the same policies and guardrails. Backed by leading investors including Sequoia, Accel, and Cyberstarts, Cyera is defining the way companies do cloud data security. To learn more, visit www.cyera.io.

DARKReading: Latest News

Iranian APT Group Targets IP Cameras, Extends Attacks Beyond Israel