Top Banner
ORACLE AND KPMG CLOUD THREAT REPORT 2019 Defining Edge Intelligence: Closing Visibility Gaps with a Layered Defense Strategy Read Full Report K EY RES EARCH FIN DI NGS 7 of 10 3.5x 93% Use more business- Increase in organizations Are dealing with rogue critical cloud with 50% of their data in the cloud app usage services YoY cloud 2018-2020 82% 45% 85% Of cloud users have Plan to deploy automated Are interested in replacing experienced security events patch management in the passwords with new forms of due to confusion over Shared next 24 months authentication Responsibility Security Models Machine learning, automation, the speed at which we can execute security processes – it’s all resulting in minimal downtime for some customers and the enhanced ability for all to use cyber security as a business enabler.” Shared Responsibility Security Model IaaS PaaS SaaS On-premises (Infrastructure-as-a-Service) (Platform-as-a-Service) (Software-as-a-Service) User Access/Identity User Access/Identity User Access/Identity User Access/Identity Data Data Data Data Application Application Application Application Guest OS Guest OS Guest OS Guest OS Virtualization Virtualization Virtualization Virtualization Network Network Network Network Infrastructure Infrastructure Infrastructure Infrastructure Physical Physical Physical Physical Customer Cloud Service Provider Responsibility Responsibility Contributing to an inability to process security events is an acute shortage of cybersecurity skills.” In which of the following areas do you believe your IT organization currently has a problematic shortage of existing skills? (Percent of respondents, N=586, multiple responses accepted) Cybersecurity IT architecture/planning Artificial Intelligence/Machine Learning (AI/ML) Data analytics/data science IT orchestration and automation Application development/DevOps Data protection 26% 26% 38% 35% 34% 33% 53% For which of the following types of cloud services do you find the shared responsibility security model the most confusing? (Percent of respondents, N=456, multiple responses accepted) Software-as-a-Service (SaaS) Infrastructure-as-a-Service (IaaS) Platform-as-a-Service (PaaS) Not applicable – I fully understand the shared responsibility security model for all types of cloud services 54% 47% 43% 18% Only 10% of CISOs state they fully understand the SRSM model (versus 25% CIOs) Read Full Report Copyright © 2019, Oracle and/or its affiliates. All rights reserved. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
1

Oracle and KPMG Cloud Threat Report 2019 · 2019-03-22 · currently has a problematic shortage of existing skills? ORACLE AND KPMG CLOUD THREAT REPORT 2019 Defining Edge Intelligence:

Apr 23, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Oracle and KPMG Cloud Threat Report 2019 · 2019-03-22 · currently has a problematic shortage of existing skills? ORACLE AND KPMG CLOUD THREAT REPORT 2019 Defining Edge Intelligence:

ORACLE AND KPMG CLOUD THREAT REPORT 2019

Defining Edge Intelligence: Closing Visibility Gaps with a Layered Defense Strategy

Read Full Report

K E Y R E S E A R C H F I N D I N G S

7 of 10 3.5x 93% Use more business- Increase in organizations Are dealing with rogue critical cloud with 50% of their data in the cloud app usage services YoY cloud 2018-2020

82% 45% 85% Of cloud users have Plan to deploy automated Are interested in replacing experienced security events patch management in the passwords with new forms of due to confusion over Shared next 24 months authentication Responsibility Security Models

Machine learning, automation, the speed at which we can execute security processes – it’s all resulting in minimal downtime for some customers and the enhanced ability for all to use cyber security as a business enabler.”

Shared Responsibility Security Model

IaaS PaaS SaaS On-premises (Infrastructure-as-a-Service) (Platform-as-a-Service) (Software-as-a-Service)

User Access/Identity User Access/Identity User Access/Identity User Access/Identity

Data Data Data Data

Application Application Application Application

Guest OS Guest OS Guest OS Guest OS

Virtualization Virtualization Virtualization Virtualization

Network Network Network Network

Infrastructure Infrastructure Infrastructure Infrastructure

Physical Physical Physical Physical

Customer Cloud Service Provider Responsibility Responsibility

Contributing to an inability to process security events is an acute shortage of cybersecurity skills.”

In which of the following areas do you believe your IT organization currently has a problematic shortage of existing skills?

(Percent of respondents, N=586, multiple responses accepted)

Cybersecurity

IT architecture/planning

Artificial Intelligence/Machine Learning (AI/ML)

Data analytics/data science

IT orchestration and automation

Application development/DevOps

Data protection

26%

26%

38%

35%

34%

33%

53%

For which of the following types of cloud services do you find the shared responsibility security model the most confusing? (Percent of respondents, N=456, multiple responses accepted)

Software-as-a-Service (SaaS)

Infrastructure-as-a-Service (IaaS)

Platform-as-a-Service (PaaS)

Not applicable – I fully understand the shared responsibility security model for all types of cloud services

54%

47%

43%

18%

Only 10% of CISOs state they fully understand the SRSM

model (versus 25% CIOs)

Read Full Report

Copyright © 2019, Oracle and/or its affiliates. All rights reserved. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.