A new report by Threat Stack and ESG (Environmental, Social Governance) raises major security concerns about the increasing public cloud environments and containers. The report reveals a notable gap in security and compliance readiness across the rapidly growing cloud-container environs.

The report discloses some significant facts as:

• 60 per cent of organizations regard security and compliance a hindrance to winning new business associates.
• 57 per cent of those surveyed complained of significant delays in the sales cycle blaming troubles created to meet customer security requirements.
• 31 per cent of those surveyed said they were unable to cope with the growing cloud and container environments. As a result, 62 per cent said they’re aiming for greater visibility into their public cloud workloads.
• 40 per cent of the respondents conveyed that in the next 12 months, they will have hybrid environments, which is an increase from the current 12 per cent. Meanwhile, 45 per cent of organizations plan on starting to test or deploy containerized environs, which is above the current 42 per cent of those who already do.
• 94 per cent of respondents believe containers give negative security implications for their organizations.

As the market democratizes, companies are adopting more complex technical solutions that were earlier reserved for only software giants.

This, experts believe, has led to creation of an opening for external as well internal threats as security teams catch up on cloud, containers, etc.

Sam Bisbee, Threat Stack CSO feels, “Containers originally focused on resource isolation, offering system building blocks to address specific operational needs that could be coupled with security solutions – they were not supposed to be a replacement for VMs, which is how most teams treat them”.

The post Cloud Security and Compliance Issues appeared first on Infosec Foundation.

Source: infoconglobal