Study finds 48% of Canadian organizations have no cloud security
More than three-quarters of senior IT executives feel it’s not adequately addressed.
TORONTO — More than three quarters (77%) of Canadian organizations feel they aren’t doing enough to address cloud security on both the IT and business sides, according to a study by Scalar Decisions Inc.
The study involving senior IT executives from across Canada found a shortfall in the implementation of several key items that underpin cloud security.
Respondents said they have yet to implement data classification and accountability (54%), client and end-point protection (57%), identity and access management (48%) or application-level controls (59%).
Cloud-based delivery is becoming mainstream for approximately 60% of the organizations that have adopted cloud as an IT delivery model – yet almost half (48%) have no formal cloud security policy in place.
Across all levels of expertise – from experienced cloud users understanding the complexities of cloud transformation, to novice users – security was cited by 75% as the number one ongoing post-adoption issue to be addressed.
“Security remains the number one expressed concern across all levels of cloud experience, yet there is an evident disconnect between organizations’ worries regarding cloud security and the actions being taken to mitigate the existing risks,” said Neil Bunn, chief technology officer of Scalar Decisions.
Growth of workloads transitioning to the public cloud is not slowing down. The research, commissioned by Scalar and independently conducted by IT researcher IDC Canada, found Canadian organizations anticipate the percentage of workloads hosted in the public cloud will increase significantly over the next 12 to 36 months. Respondents expect increases from 31% to 35% in 12 months, and to 41% in 36 months.
Similarly, IT decision makers anticipate significant increases in the percentage of their budgets allocated to the public cloud. On average, respondents estimate their budgets to increase from 20% to 25% in 12 months, and to 29% in 36 months.
The research also examined users’ experience with the cloud in relation to their level of sophistication. Experienced users, representing one-in-five respondents (19%), were found to have significantly stronger planning, assessment and design foundation than novice users.
On average, 86% of experienced cloud users have formally documented processes compared to only 42% of novice users. Those with cloud experience were also found to understand the complexity of cloud transformation, and are more likely to recognize the need for specialized experience.
Among the experienced respondents surveyed, nearly all (95%) indicated that cloud security is an expertise or skillset where external partners can provide value.
Notably, all (100%) IT departments at experienced users surveyed have a formal roadmap for moving other workloads to the cloud.
All responses were captured in August and September via a web-based survey conducted by IDC Canada. The final sample was 355 respondents, comprised of 211 senior-level IT and business decision makers at Canadian headquartered organizations ranging in size from 50 to 500-plus employees, as well as 144 screened decision makers from on-premise only organizations that do not utilize cloud IT.
Click here to download the study.