Common security violations in cloud service adoption

News by SC Staff

Identity and access management top category of concern for I/PasS deployments in organisations: a look at Amazon Web Services (AWS)

Intro (one para): Identity and access management top category of concern for I/PasS deployments in organisations: a look at Amazon Web Services (AWS)

Report type: Trends report

Source (author): Netskope

Title: Cloud Report

Topic: Cloud security

Description (a few paras): Netskope compiled the most interesting trends on cloud service adoption and usage based on aggregated, anonymized data from the Netskope Security Cloud™. Report findings are based on usage seen across millions of users in hundreds of accounts globally. In average number of cloud services in use per enterprise, there was an increase to 1,246 from 1,181 last report. Cloud infrastructure (e.g., IaaS, PaaS) was the focus of this report. We found that 71.5 percent of violations were in the Identity and Access Management category, Monitoring followed with 19.0 percent, Networking with 5.9 percent, and Logging with 3.6 percent. Common violations in the IAM category involved role access to resources and their configurations. EC2 led the way in the resource cut of violations at 66.2 percent of the violations, followed by CloudTrail 15.2 percent, S3 10.9 percent, IAM 4.5 percent, and "other" 3.2 percent. In severity, 86.3 percent of violations were of medium severity, 9.1 percent high, 4.0 percent critical, and 0.6 percent low. Netskope categorizes severity of violations across the CIS benchmark with a custom framework to help administrators prioritize which violations to address first

Link (to source website): https://resources.netskope.com/cloud-reports/netskope-cloud-report-october-2018

Click here to view our Report Tracker, a listing of cyber-security industry reports, blog postings, whitepapers, surveys and other valuable research information.

Find this article useful?

Get more great articles like this in your inbox every lunchtime

Upcoming Events