A new report from the Cloud Security Alliance (CSA) found that many executives and IT managers feel concerns about the security of data are a top challenge holding back cloud projects.
The CSA's Cloud Adoption, Practices and Priorities Survey Report fielded responses from 212 participants from IT security (33 percent), IT (25 percent), compliance and audit (10 percent), and other (32 percent) professional roles over a five-week period between the third and fourth quarters of 2014. Participants were spread out globally across 17 different countries.
According to the survey, 73 percent said concerns about the security of data are a top challenge holding back cloud adoption. In addition, other top responses include concerns about regulatory compliance (38 percent) and loss of control over IT services (38 percent). Some 72 percent admitted they did not know how many shadow IT apps were within their organization but wanted to.
"As companies move data to the cloud, they are looking to put in place policies and processes so that employees can take advantage of cloud services that drive business growth without compromising the security, compliance, and governance of corporate data," said Jim Reavis, CEO of the CSA, in a statement. "We hope that this report provides companies with some good peer insight so that they can make better decisions to help confidently and responsibly accelerate the use of cloud services in their environment."
Despite concerns about security, companies are still largely going forward with the adoption of cloud services. Seventy-four percent said they are proceeding either "full steam ahead" or "moving with caution" in regards to their adoption of cloud services. Large corporations are more likely than others to have policies and procedures in place for managing the cloud. The survey found that companies with more than 5,000 employees are more likely to have a cloud governance committee (35 percent versus 12 percent), have a policy on acceptable cloud usage (61 percent versus 45 percent), and have a security awareness training program (26 percent versus 20 percent) compared to companies with less than 5,000.
Large enterprises however were found to be slower to invest heavily in cloud services, with only 36 percent of them spending more than 20 percent of their IT budget on cloud services. This compared to 49 percent for companies with fewer than 5,000 staffers. Sixty-one percent of respondents overall said the security of data residing in the cloud is a executive or board-level concern.
"The past few years have marked a paradigm shift in IT’s role, from provider to enabler,” said Rajiv Gupta, CEO of Skyhigh Networks, in a statement. "This survey, the largest of its kind, illustrates that companies are aware of the consumerization of IT but have room to more proactively address the security concerns of cloud adoption."