Security News > 2023 > March > Cloud security, hampered by proliferation of tools, has a “forest for trees” problem
Over 60% of organizations have been operating in a cloud environment for three or more years, but technical complexities and maintaining comprehensive security still hamper their cloud migration efforts, according to the 2023 State of Cloud-Native Security Report.
In the report, the ideal cloud security solution is scalable and able to handle immediate security needs and additional use cases as the company expands cloud applications and uses.
The survey found that enterprises are split between a single security vendor/tool approach and a multiple security vendor/tool approach for each of their security needs.
Three quarters of the leaders Palo Alto surveyed said they struggled to identify which security tools were necessary to achieve their objectives, which led to deploying numerous single point security solutions - of the 30-plus security tools on average that organizations are using, six to 10 are dedicated to cloud security.
Security teams should have a comprehensive understanding of how their company goes from development to production in the cloud to find the least disruptive insertion points for security tools.
Don't end up with dozens of tools siloed for specific security use cases in the cloud, leading to what Palo Alto Networks calls a "Sprawl" of tools that bog down cloud security teams and leave visibility gaps.
News URL
https://www.techrepublic.com/article/cloud-security-tools-trees-problem/
Related news
- Whitepaper: Reach higher in your career with cloud security (source)
- Transforming cloud security with real-time visibility (source)
- Top 5 Cloud Security Automations for SecOps Teams (source)
- Microsoft lost some customers’ cloud security logs (source)
- How AI Is Changing the Cloud Security and Risk Equation (source)
- Strategies for CISOs navigating hybrid and multi-cloud security (source)
- SOC teams are frustrated with their security tools (source)
- Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools (source)
- Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers (source)
- Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security (source)