Story image

Migration away from on-prem data centres stalled by security

07 Feb 2019

Despite the surging cloud adoption that is rife around the world, a new study from SecurityFirst and the Ponemon Institute has revealed there’s still a lack of understanding around security.

The study delves into perceptions surrounding on-premises and cloud-based data storage technologies from 483 information technology and (IT) and IT security professionals familiar with the benefits of object storage technology.

And according to the survey, 65 percent of IT professionals would like to store object data in the cloud, but nearly half (47 percent) either don't believe or are not sure if data in the cloud is as secure as in their own data centre.

The primary reasons stated for wanting to move data into a cloud-based object storage environment included to reduce storage costs, to avoid new data centre investments, and to achieve better resiliency or disaster recovery - only 12 percent put increasing security as their primary reason.

"There is a prominent security gap delaying the mass migration of data to the cloud."We see an overwhelming desire among organisations to move to the cloud and leverage the cost/value of object storage,” says SecurityFirst president and CEO Jim Varner.

“However, they often take an outsourced approach to cloud security instead of a unified, comprehensive approach, including integration with their existing security infrastructure and careful control of security keys. Object data has the same security and privacy requirements as any other data and a structured, controlled approach needs to be taken seriously."

There were a number of other key findings from the report, which included:

  • While 79 percent of respondents are not currently using object storage, 38 percent are piloting or assessing object storage which indicates that migration of data to the cloud is continuing

  • A significant percentage are moving personal data into object storage, with 55 percent moving customer profile data, 37 percent employee records, and 26 percent protect health records

  • 51 percent prefer cloud data to be distributed across multiple suppliers, with 28 percent choosing to do so for security purposes and the remaining 23 percent to avoid vendor lock-in

"While IT professionals across many verticals are increasingly putting personal data into object storage, they are aware that they are risking the security of the data, in an environment in which regulatory oversight of data risk is increasing" says Ponemon Institute chairman and founder Dr. Larry Pomemon.

"These survey results confirm InfoSecurity Professionals' concerns about object storage, migration to the cloud, and resulting security risks".

The report also looked into how perceptions differed by industry. Out of all the various industries surveyed (including Healthcare, Services, Public Sector, Industrial, and Retail), the Financial Services were the most notable:

  • 64 percent of respondents in the financial services sector are more likely to store customer profile data in object storage compared to 55 percent across all industries

  • 35 percent of financial services respondents have all object storage in a cloud environment, compared to 29 percent for all industries

  • 27 percent of financial services respondents are already using object storage, while only 21 percent of respondents are across all industries

These findings suggest a more aggressive adoption of new technology, specifically object storage in a cloud environment, in the financial services sector.

Interview: Culture and cloud - the battle for cybersecurity
ESET CTO Juraj Malcho talks about the importance of culture in a cybersecurity strategy and the challenges and benefits of a world in the cloud.
Enterprise cloud deployments being exploited by cybercriminals
A new report has revealed a concerning number of enterprises still believe security is the responsibility of the cloud service provider.
Ping Identity Platform updated with new CX and IT automation
The new versions improve the user and administrative experience, while also aiming to meet enterprise needs to operate quickly and purposefully.
Venafi and nCipher Security partner on machine identity protection
Cryptographic keys serve as machine identities and are the foundation of enterprise information technology systems.
Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.
How blockchain could help stop video piracy in its tracks
An Australian video tech firm has successfully tested a blockchain trial that could end up being a welcome relief for video creators and the fight against video piracy.