Majority of businesses don’t protect their sensitive data in the cloud, finds Thales

• 40% of global respondents reveal they dealt with a cloud breach in the last year
• Only 17% of businesses are encrypting at least half of the sensitive data they store in the cloud
• Only 34% of organisations retain total control of encryption keys

The 2021 Thales Global Cloud Security Study reports that 40% of organisations have experienced a cloud-based data breach in the past 12 months. Despite increasing cyber-attacks targeting data in the cloud, the vast majority (83%) of businesses are still failing to encrypt half of the sensitive data they store in the cloud, raising even greater concerns as to the impact cyber criminals can have.

Pandemic has accelerated cloud transformation

Cloud adoption is on the rise and businesses are continuing to diversify the way they use cloud solutions. Globally, 57% of respondents reported they make use of two or more cloud infrastructure providers, whilst almost a quarter (24%) of organisations flagged that the majority of their workloads and data now reside in the cloud. In fact, according to a recent study by McKinsey & Company, companies globally have accelerated their cloud adoption by three years compared to pre-pandemic adoption rates. This marks a significant shift in the use of cloud-based solutions, from being purely data storage solutions, to environments in which data is used transactionally and supports day-to-day business operations.

Security in the cloud is mixed
According to the study, one fifth (21%) of businesses host the majority of their sensitive data in the cloud, while 40% reported a breach in the last year. There are some common trends as to where companies turn when considering how to secure their cloud infrastructure, with 33% reporting multi-factor authentication (MFA) as being a central part of their cybersecurity strategy. However, only 17% of those surveyed have encrypted more than half of the data they store in the cloud. This figure drops to 15% where organisations have adopted a multicloud approach. Even where businesses protect their data with encryption, 34% of organisations leave the control of keys to service providers rather than retaining control themselves. Where large numbers of organisations fail to protect their data sufficiently with encryption, limiting potential access points becomes even more critical. However, nearly half (48%) of business leaders globally admitted their organisation does not have a Zero Trust strategy, and a quarter (25%) aren’t even considering one.

Complexity as a concern
Businesses share common concerns about the increasing complexity of cloud services. Almost half (46%) of global respondents claimed managing privacy and data protection in the cloud is more complex than on-premises solutions.

Hybrid models are common with many organisations not moving entirely to the cloud. 55% of businesses have indicated a preference for a ‘lift & shift’ approach to cloud adoption over re-architecting, as cloud becomes a more integrated part of the business infrastructure.

About the 2021 Thales Global Cloud Security Study
The 2021 Thales Cloud Security Study was commissioned by Thales and conducted by 451 Research, part of S&P Global Market Intelligence and includes the viewpoints from more than 2,600 executives with responsibility for or influence over IT and data security. Respondents were from 16 countries: Australia, Brazil, France, Germany, Hong Kong, India, Japan, Mexico, Netherlands, New Zealand, Singapore, South Korea, Sweden, the United Arab Emirates, the United Kingdom, and the United States. Organisations represented a range of industries, with a primary emphasis on healthcare, financial services, retail, technology, and federal government. Job titles ranged from C-level executives including CEO, CFO, Chief Data Officer, CISO, Chief Data Scientist, and Chief Risk Officer, to SVP/VP, IT Administrator, Security Analyst, Security Engineer, and Systems Administrator. Respondents represented a broad range of organizational sizes, with the majority ranging from 500 to 10,000 employees. The survey was conducted in January - February 2021.

About Thales
Thales (Euronext Paris: HO) is a global leader in advanced technologies, investing in digital and “deep tech” innovations – connectivity, big data, artificial intelligence, cybersecurity and quantum computing – to build a confident future crucial for the development of our societies. The Group provides its customers – businesses, organisations and governments – in the defense, aeronautics, space, transport, and digital identity and security domains with solutions, services and products that help them fulfil their critical role, consideration for the individual being the driving force behind all decisions.

Thales has 81,000 employees in 68 countries. In 2020 the Group generated sales of €17 billion.