Cloud Security Survey Global Executive Summary Corporate Marketing August 1 8/15/ Copyright Trend Micro Inc.
Objective And Methodology Objectives: To understand more about global and regional virtualization and cloud adoption rates and barriers to adoption. To explore trends within the area of cloud technology and virtualization practices. Methodology: An online survey was conducted in June in seven countries: the US, Canada, the UK, Germany, Japan, India, and Brazil. This was the first year including Brazil and the second year for the other six countries. 1,400 respondents (200 per country) were surveyed: all were purchase decision makers or key influencers for one or more of the following three solutions/services: Cloud Computing Services, Server Virtualization, and/or Virtual Desktop Infrastructure (VDI). Companies were limited to 500+ employees. 8/15/ 2 Copyright Trend Micro Inc.
Executive Summary 8/15/ 3 Copyright Trend Micro Inc.
Cloud Is Not Secure. Almost Half Experienced Data Security Lapse Or Issue In The Last 12 Months Globally, 47% of the respondents who are currently using a cloud computing service reported they have experienced a data security lapse or issue with the cloud service their company is using within the last 12 months. India had the highest incidence (67%), followed by Brazil (55%). Incidence of data security lapse or issue increased from 43% in to 46% (excluding Brazil, which was not surveyed in ) in. India had the biggest increase of 12%, followed by Japan (7% increase) and Canada (6% increase). N/A Q: Has your organization experienced a data security lapse or issue with the cloud service your company is using within the last 12 months? 8/15/ Copyright Trend Micro Inc. 4
Increased Adoption of Cloud Service Correlated With Higher Incidence Of Data Security Lapse Or Issue With the adoption rate of cloud services increasing from to, there was also an increase in the incidence of data security lapse or issue with the cloud services companies are using. This correlation is particularly strong in India and Canada. N/A Incidence Of Data Security Lapse Or Issue With Cloud Service (%) N/A Cloud Service Adoption Rate* (%) Q: Has your organization experienced a data security lapse or issue with the cloud service your company is using within the last 12 months? *Cloud Service Adoption Rate: % of corporate decision makers who reported their company has currently deployed or is piloting public or private cloud 8/15/ Copyright Trend Micro Inc. 5
Enterprises Are Concerned About Using Cloud Computing Services More than half of the respondents indicated that apprehension over security is a key reason holding back their adoption of cloud technique and that shared storage is vulnerable without encryption. More than half expressed more willingness to consider using the cloud if cloud providers took a more hands on approach to securing data or if they knew more about how to secure their data in the cloud. Disagree Neither Disagree Nor Nor Disagree Agree Agree Shared storage is vulnerable without encryption If cloud service providers took a more hands on approach to securing our company data, this would increase our consideration of using the cloud Apprehension over security is a key reason holding back our adoption of cloud technologies An easy to administer cloud encryption service would give us reason to consider using more cloud services/cloud vendors If we knew more about how to secure our data in the cloud, this would increase our consideration of using the cloud We do not use public cloud services for any of our data that has security requirements Shared infrastructure of any kind is too risky A guaranteed SLA would drive us to use more cloud computing services/cloud vendors 11% 10% 11% 13% 13% 15% 12% 12% 13% 12% 16% 16% 14% 17% 10% 12% 34% 35% 36% 41% 34% 35% 36% 39% 34% 39% 34% 36% 36% 37% 40% 39% 55% 55% 53% 47% 53% 50% 53% 49% 53% 49% 50% 47% 50% 46% 50% 49% 0% 20% 40% 60% 80% 100% Q: How much do you agree or disagree with the following statements about cloud vendors / cloud computing services? 8/15/ 6 Copyright Trend Micro Inc.
Not All Cloud Providers Meet Enterprise IT Security Requirements Four in ten respondents indicated their IT security requirements are not being met by current cloud providers / offerings. Disagree Neither Disagree Nor Agree Agree -The lack of cloud computing standards prevents cloud to cloud portability 18% 38% 44% -The lack of cloud computing standards prevents cloud to cloud portability 18% 37% 44% -Our support service needs are not being met by current cloud offerings / cloud providers 24% 34% 42% -Our support service needs are not being met by current cloud offerings / cloud providers 25% 37% 38% -Our IT requirements are not being met by current cloud offerings / cloud providers 25% 34% 41% -Our IT requirements are not being met by current cloud offerings / cloud providers 27% 35% 38% -Our IT Security requirements are not being met by current cloud offerings / cloud providers 28% 32% 40% -Our IT Security requirements are not being met by current cloud offerings / cloud providers 25% 36% 40% -Our business requirements are not being met by current cloud offerings / cloud providers 27% 33% 40% -Our business requirements are not being met by current cloud offerings / cloud providers 26% 36% 38% 0% 50% 100% Q: How much do you agree or disagree with the following statements about the current set of cloud computing service offerings in the market? 8/15/ Copyright Trend Micro Inc. 7
Some Enterprises Don t Even Know They Are Actually Using A Cloud Computing Service There is still confusion about what cloud computing services exactly are. When presented with a list of cloud services, 94% of the respondents said they are currently using at least one of them. However, 9% of these respondents indicated, on the other hand, that their company has no plans to deploy cloud computing services. This is consistent with where 7% said the same. Q: Which, if any, of the following vendors / services does your company currently use? 8/15/ 8 Copyright Trend Micro Inc.
More Enterprises Are Moving To The Cloud Quickly In slightly over 10% of the respondents had cloud computing services in production. This almost doubled to 20% in for both public and private cloud services. Close to half are either implementing or piloting. Q: With regards to the following steps, please indicate where your company is in terms of usage/deployment (In Production; Implementing; In Trials/Piloting; In Discussions; No Plans To Deploy): Public Cloud Private Cloud Hybrid apps part in cloud, part local 8/15/ Copyright Trend Micro Inc. 9
And More Applications Are Moving To The Cloud; More Servers and Endpoints Are Being Virtualized For companies that have public cloud or hybrid apps currently in production, an average of 46% of the existing applications are already deployed in the cloud. An average of 53% of the new applications will be deployed in the cloud. For companies that have server virtualization currently in production, an average of 46% of their servers are currently virtualized. In the next 12 months, an average of 63% of their servers will be virtualized. For companies that have VDI currently in production, an average of 44% of their endpoints are currently virtualized. In the next 12 months, an average of 63% of their endpoints will be virtualized. The results are consistent with results. The percentage of endpoints currently virtualized increased slightly from 42% in to 44% in. The percentage of endpoints that will be virtualized increased by 3% from to. Qs: What percentage of your company s: % of EXISTING applications deployed in the cloud; % of NEW applications to be deployed in the cloud? % of Endpoints CURRENTLY Virtualized; % of Endpoints that WILL BE virtualized in the next 12 months? % of Servers CURRENTLY Virtualized; % of Servers that WILL BE virtualized in the next 12 months? 8/15/ Copyright Trend Micro Inc. 10
Security Is Important, But Performance and Availability Are Equally Important Security and performance/availability of cloud services continue to be the dominant barriers in adopting cloud computing services. Concerns over security (of data or cloud infrastructure) Performance / Availability of cloud service Unclear cost benefits / ROI Lack of transparency about data center facilities, hardware, and disaster recovery Compliance Billing and tracking of services used Complexity in integrating the cloud with existing IT operations Lack of access to our data Potential lock-in to the cloud service / Proprietary data models used by cloud Internal resistance / Internal inertia to do things the same way Current offerings do not meet our business needs 30% 34% 25% 27% 29% 27% 24% 26% 29% 26% 22% 25% 25% 25% 28% 23% 20% 20% 54% 50% 50% 48% 0% 20% 40% 60% 80% 100% Q: What risks/barriers do you perceive in adopting cloud computing services? 8/15/ Copyright Trend Micro Inc. 11
Encryption Is A Key Measure Taken To Secure Data In The Cloud For those who have public cloud in production, the vast majority, 87-89% said they encrypt their data stored in the cloud and keep a 1:1 copy of all data that is synched to the cloud. This is a slight increase from. Qs: Does your company encrypt any of your data stored in the cloud? Does your company keep a 1:1 copy of all data that is synched to the public cloud data? 8/15/ 12 Copyright Trend Micro Inc.
Companies That Have Server Virtualization In Production Have A Tendency To Also Move To The Cloud Use of server virtualization was significantly correlated to cloud services usage. Consistent with numbers, in, of the 848 respondents who have Server Virtualization in production or in pilot: 71% also have VDI in production/pilot 65% have Private Cloud Computing in production/pilot 62% have Public Cloud Computing in production/pilot Of the remaining 552 respondents: Only 25% also have VDI in production/pilot Only 24% have Private Cloud Computing in production/pilot Only 26% have Public Cloud Computing in production/pilot Q: Which of the following best describes your organization s use of the following technologies? (Currently Piloting; Currently Deployed / in Production; Planning To Deploy; Have No Plans To Deploy; Not Sure /Don t Know) Server Virtualization VDI Private Cloud Public Cloud 8/15/ 13 Copyright Trend Micro Inc.
Appendix Usage of Cloud Computing Services, Server Virtualization and VDI 8/15/ 14 Copyright Trend Micro Inc.
Adoption/Usage of Server Virtualization, VDI, Pubic Cloud and Private Overall, adoption Cloudrate for the various technologies is highest in the US and the UK, and is lowest in Japan. Adoption rate for all 4 technologies increased significantly in Canada. Adoption of public cloud and server virtualization also increased significantly in India. % that have currently deployed or are piloting among decision makers* TOTAL US JAPAN INDIA GERMANY UK CANADA BRAZIL Server Virtualization VDI Private Cloud Public Cloud 59% 61% 70% 71% 58% 60% 51% 59% 61% 67% 68% 63% 47% 56% 50% 52% 53% 62% 62% 42% 40% 48% 52% 55% 53% 63% 64% 45% 55% 47% 46% 48% 56% 57% 34% 39% 42% 43% 54% 54% 51% 53% 38% 48% 47% 45% 48% 54% 52% 37% 38% 38% 49% 48% 49% 52% 53% 42% 51% 46% *Decision makers: Enterprise IT professionals who make purchase decisions for cloud computing services, server virtualization or Virtual Desktop infrastructure (VDI) solutions. Q: Which of the following best describes your organization s use of the following technologies? (Currently Piloting; Currently Deployed / in Production; Planning To Deploy Within The Next 6 Months; Planning To Deploy In The Next 7 To 12 Months; Planning To Deploy But Do Not Know When; Have No Plans To Deploy; Not Sure /Don t Know) Server Virtualization VDI Private Cloud Public Cloud 8/15/ Copyright Trend Micro Inc. 15
Thank You! 8/15/ 16 Copyright Trend Micro Inc.