2012 global cloud_security_survey_executive_summary

Corporate Marketing

August 2012

Cloud Security Survey Global Executive Summary

8/15/20121 Copyright 2012 Trend Micro Inc.

Objective And MethodologyObjectives:• To understand more about global and regional virtualization and cloud

adoption rates and barriers to adoption.

• To explore trends within the area of cloud technology and virtualization practices.

Methodology:• An online survey was conducted in June 2012 in seven countries: the

US, Canada, the UK, Germany, Japan, India, and Brazil. This was the first year including Brazil and the second year for the other six countries.

• 1,400 respondents (200 per country) were surveyed: all were purchase decision makers or key influencers for one or more of the following three solutions/services:

– Cloud Computing Services, – Server Virtualization, and/or – Virtual Desktop Infrastructure (VDI).

• Companies were limited to 500+ employees.

8/15/2012 2Copyright 2012 Trend Micro Inc.

Executive Summary


Cloud Is Not Secure. Almost Half Experienced Data Security Lapse Or Issue In The Last 12 Months

• Globally, 47% of the respondents who are currently using a cloud computing service reported they have experienced a data security lapse or issue with the cloud service their company is using within the last 12 months. India had the highest incidence (67%), followed by Brazil (55%).

• Incidence of data security lapse or issue increased from 43% in 2011 to 46% (excluding Brazil, which was not surveyed in 2011) in 2012. India had the biggest increase of 12%, followed by Japan (7% increase) and Canada (6% increase).

Q: Has your organization experienced a data security lapse or issue with the cloud service your company is using within the last 12 months?


N/A

Increased Adoption of Cloud Service Correlated With Higher Incidence Of Data Security Lapse Or Issue

Q: Has your organization experienced a data security lapse or issue with the cloud service your company is using within the last 12 months? *Cloud Service Adoption Rate: % of corporate decision makers who reported their company has currently deployed or is piloting public or private cloud


Incidence Of Data Security Lapse Or Issue With Cloud Service (%)

Cloud Service Adoption Rate* (%)

N/A

N/A

• With the adoption rate of cloud services increasing from 2011 to 2012, there was also an increase in the incidence of data security lapse or issue with the cloud services companies are using. This correlation is particularly strong in India and Canada.

Enterprises Are Concerned About Using Cloud Computing Services

Q: How much do you agree or disagree with the following statements about cloud vendors / cloud computing services?8/15/2012 6Copyright 2012 Trend Micro Inc.

11%10%11%13%13%15%

12%12%13%12%

16%16%

14%17%

10%12%

34%35%36%

41%34%

35%36%

39%34%39%34%36%

36%37%

40%39%

55%55%53%

47%53%50%

53%49%

53%49%50%47%

50%46%

50%49%

0% 20% 40% 60% 80% 100%

Shared storage is vulnerable without encryption

If cloud service providers took a more hands on approach to securing ourcompany data, this would increase our consideration of using the cloud

Apprehension over security is a key reason holding back our adoption of cloud technologies

An easy to administer cloud encryption service wouldgive us reason to consider using more cloud services/cloud vendors

If we knew more about how to secure our data in the cloud, this would increase our consideration of using the cloud

We do not use public cloud services for any of our data that has security requirements

Shared infrastructure of any kindis too risky

A guaranteed SLA would drive us to use more cloud computing services/cloud vendors

Disagree Neither Disagree Nor Disagree Agree

2012201120122011201220112012201120122011201220112012201120122011

Neither Disagree Nor Agree

• More than half of the respondents indicated that apprehension over security is a key reason holding back their adoption of cloud technique and that shared storage is vulnerable without encryption.

• More than half expressed more willingness to consider using the cloud if cloud providers took a more hands on approach to securing data or if they knew more about how to secure their data in the cloud.

26%

27%

25%

28%

27%

25%

25%

24%

18%

18%

36%

33%

36%

32%

35%

34%

37%

34%

37%

38%

38%

40%

40%

40%

38%

41%

38%

42%

44%

44%

0% 50% 100%

2011-Our business requirements are not being met by current cloud offerings / cloud providers

2012-Our business requirements are not being met by current cloud offerings / cloud providers

2011-Our IT Security requirements are not being met by current cloud offerings / cloud providers

2012-Our IT Security requirements are not being met by current cloud offerings / cloud providers

2011-Our IT requirements are not being met by current cloud offerings / cloud providers

2012-Our IT requirements are not being met by current cloud offerings / cloud providers

2011-Our support service needs are not being met by current cloud offerings / cloud providers

2012-Our support service needs are not being met by current cloud offerings / cloud providers

2011-The lack of cloud computing standards prevents cloud to cloud portability

2012-The lack of cloud computing standards prevents cloud to cloud portability

Disagree Neither Disagree Nor Agree Agree

Not All Cloud Providers Meet Enterprise IT Security Requirements

• Four in ten respondents indicated their IT security requirements are not being met by current cloud providers / offerings.

Q: How much do you agree or disagree with the following statements about the current set of cloud computing service offerings in the market?


Some Enterprises Don’t Even Know They Are Actually Using A Cloud Computing Service

• There is still confusion about what cloud computing services exactly are. When presented with a list of cloud services, 94% of the respondents said they are currently using at least one of them. However, 9% of these respondents indicated, on the other hand, that their company has no plans to deploy cloud computing services. This is consistent with 2011 where 7% said the same.

Q: Which, if any, of the following vendors / services does your company currently use?


More Enterprises Are Moving To The Cloud Quickly• In 2011 slightly over 10% of the respondents had cloud computing services

in production. This almost doubled to 20% in 2012 for both public and private cloud services. Close to half are either implementing or piloting.

Q: With regards to the following steps, please indicate where your company is – in terms of usage/deployment (In Production; Implementing; In Trials/Piloting; In Discussions; No Plans To Deploy):

• Public Cloud• Private Cloud• Hybrid apps – part in cloud, part local


And More Applications Are Moving To The Cloud; More Servers and Endpoints Are Being Virtualized• For companies that have public cloud or hybrid apps currently in

production, an average of 46% of the existing applications are already deployed in the cloud. An average of 53% of the new applications will be deployed in the cloud.

• For companies that have server virtualization currently in production, an average of 46% of their servers are currently virtualized. In the next 12 months, an average of 63% of their servers will be virtualized.

• For companies that have VDI currently in production, an average of 44% of their endpoints are currently virtualized. In the next 12 months, an average of 63% of their endpoints will be virtualized.

• The 2012 results are consistent with 2011 results. – The percentage of endpoints currently virtualized increased slightly from 42% in 2011 to 44%

in 2012. – The percentage of endpoints that will be virtualized increased by 3% from 2011 to 2012.

Qs: What percentage of your company’s:• % of EXISTING applications deployed in the cloud; % of NEW applications to be deployed in the cloud? • % of Endpoints CURRENTLY Virtualized; % of Endpoints that WILL BE virtualized in the next 12 months?• % of Servers CURRENTLY Virtualized; % of Servers that WILL BE virtualized in the next 12 months?


Security Is Important, But Performance and Availability Are Equally Important

• Security and performance/availability of cloud services continue to be the dominant barriers in adopting cloud computing services.

Q: What risks/barriers do you perceive in adopting cloud computing services?


54%

50%

30%

25%

29%

24%

29%

22%

25%

28%

20%

50%

48%

34%

27%

27%

26%

26%

25%

25%

23%

20%

0% 20% 40% 60% 80% 100%

Concerns over security (of data or cloud infrastructure)

Performance / Availability of cloud service

Unclear cost benefits / ROI

Lack of transparency about data center facilities, hardware, and disaster recovery

Compliance

Billing and tracking of services used

Complexity in integrating the cloud with existing IT operations

Lack of access to our data

Potential lock-in to the cloud service / Proprietary data models used by cloud …

Internal resistance / Internal inertia to do things the same way

Current offerings do not meet our business needs

20122011

Encryption Is A Key Measure Taken To Secure Data In The Cloud• For those who have public cloud in production, the vast majority,

87-89% said they encrypt their data stored in the cloud and keep a 1:1 copy of all data that is synched to the cloud. This is a slight increase from 2011.

Qs: Does your company encrypt any of your data stored in the cloud?Does your company keep a 1:1 copy of all data that is synched to the public cloud data?

8/15/2012 12|Copyright 2012 Trend Micro Inc.

Companies That Have Server Virtualization In Production Have A Tendency To Also Move To The Cloud

• Use of server virtualization was significantly correlated to cloud services usage.

• Consistent with 2011 numbers, in 2012, of the 848 respondents who have Server Virtualization in production or in pilot:

– 71% also have VDI in production/pilot– 65% have Private Cloud Computing in production/pilot– 62% have Public Cloud Computing in production/pilot

• Of the remaining 552 respondents:– Only 25% also have VDI in production/pilot– Only 24% have Private Cloud Computing in production/pilot– Only 26% have Public Cloud Computing in production/pilot

Q: Which of the following best describes your organization’s use of the following technologies? (Currently Piloting; Currently Deployed / in Production; Planning To Deploy; Have No Plans To Deploy; Not Sure /Don’t Know)

• Server Virtualization• VDI• Private Cloud• Public Cloud


Usage of Cloud Computing Services, Server Virtualization and VDI

Appendix


Q: Which of the following best describes your organization’s use of the following technologies? (Currently Piloting; Currently Deployed / in Production; Planning To Deploy Within The Next 6 Months; Planning To Deploy In The Next 7 To 12 Months; Planning To Deploy But Do Not Know When; Have No Plans To Deploy; Not Sure /Don’t Know)

• Server Virtualization• VDI• Private Cloud• Public Cloud

Adoption/Usage of Server Virtualization, VDI, Pubic Cloud and Private Cloud• Overall, adoption rate for the various technologies is highest in the US

and the UK, and is lowest in Japan.

• Adoption rate for all 4 technologies increased significantly in Canada.

• Adoption of public cloud and server virtualization also increased significantly in India.

*Decision makers: Enterprise IT professionals who make purchase decisions for cloud computing services, server virtualization or Virtual Desktop infrastructure (VDI) solutions.

% that have currently deployed or are piloting among decision makers*

TOTAL US JAPAN INDIA GERMANY UK CANADA BRAZIL

2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2012

Server Virtualization 59% 61% 70% 71% 58% 60% 51% 59% 61% 67% 68% 63% 47% 56% 50%

VDI 52% 53% 62% 62% 42% 40% 48% 52% 55% 53% 63% 64% 45% 55% 47%

Private Cloud 46% 48% 56% 57% 34% 39% 42% 43% 54% 54% 51% 53% 38% 48% 47%

Public Cloud 45% 48% 54% 52% 37% 38% 38% 49% 48% 49% 52% 53% 42% 51% 46%


Thank You!


2012 global cloud_security_survey_executive_summary

Technology

virtual desktop

cloud computing

private cloud

public cloud

data security

cloud service

private cloud

cloud service