The June 2019 Cloud Security Threat Report highlights that 53% of all compute workloads are now in the cloud, but visibility and security measures lag significantly, with 93% of organizations struggling to monitor their cloud environments. Numerous risks are identified, including unauthorized data access leading to incidents, poor implementation of security practices like multi-factor authentication, and insufficient response to insider threats. The report emphasizes the need for improved governance, a zero-trust model, and enhanced cloud security skills to mitigate these evolving threats.

1. June 2019
Adapting to the New Reality of
Evolving Cloud Threats
Cloud Security Threat Report (CSTR)

2. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Key Insights
Cloud becoming the business backbone:
53% of all compute workload are in the cloud
Visibility is a challenge:
93% struggle to keep tabs on cloud workloads
Loss of control:
93% report oversharing sensitive data
Data for sale on dark web:
68% have evidence their data has been for sale
Security can’t keep up:
54% say cloud security maturity can’t keep up

3. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Key Insights
Immature security practices add to risk:
65% don‘t implement MFA with IaaS
80% don’t use encryption
Open door for Lateral Movement:
64% of cloud security incidents are due to unauthorized access
Insiders can be a threat:
accidental insider ranked #3 threat to cloud infrastructure
Behind the times:
85% are not using CIS best security practices
Users behaving badly:
weak passwords (37%) and poor password hygiene
(34%) top list of bad behaviors

4. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USE
CLOUD IS AT THE TIPPING POINT:
Few are Ready
CSTRCloud Security Threat Report
Volume 1 | June 2019
CSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019

5. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Cloud is Becoming the Business
53%
of all compute workload has
now been migrated
to the cloud
cloud grew at 16% in
past 12 months
expected to grow at 22%
next 12 months

6. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
1807CLOUD
APPS
Cloud Use Underestimated
1/3 Say Lack of Visibility Causing Issues
1/3participants say poor
visibility made identifying
threats more difficult
PERCEPTION
REALITY
452
Cloud Applications in Use
30%
Data and Cloud
duplication
34%
Difficult to manage
27%
Rise in Shadow IT
29%
Repetitive Costs
27%
Lack of Control over
Data Access
23%
Inability to Identify
Threats
Top Issues Caused by Lack of Visibility

7. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
IoT Use Skyrocketing—Creating Risk
increase in IaaS incidents
related to IoT devices
20%
increase number of IoT devices
connected to IaaS
Past 12 Months
71%

8. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USE
THREE QUARTERS OF
COMPANIES EXPERIENCED
INCIDENTS DUE TO CLOUD
SECURITY IMMATURITY
CSTRCloud Security Threat Report
Volume 1 | June 2019
CSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019

9. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Skills and Best Practices are Lacking
not using Center for
Internet Security best
practices*
*Symantec Internal Data
neglect to implement multi‐
factor authentication
65%85% 93%
need to enhance cloud
security skills

10. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Data Compliance Compromised by
Immature Cloud Culture
believe oversharing cloud stored
files containing compliance
data is a problem
93% 68%
have evidence that their
data had been for sale on
the dark web

11. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USE
TOP THREATS:
Is your Focus Where it Should be?
CSTRCloud Security Threat Report
Volume 1 | June 2019
CSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019

12. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Are you Guarding the Door while Attacks
Come in the Window?
64%
cloud security incidents
caused by unauthorized
access*
*Symantec internal data
Most Investigated Cloud Infrastructure Attacks
24%
21%
11%
11%
Data breaches
Cloud malware injection
DDOS
Cross‐cloud attacks

13. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Emerging Threats to Cloud Infrastructure
THE TOP THREETHREATS
Managing
identity and
authentication Phishing
Accidental
inside
threats
45% 43% 42%
The three highest threat categories, according to the external
survey respondents, are:

14. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Risky Employees not Being Investigated
9 out of 10
have encountered
high‐risk
employee behavior
at the same time, only 7% of
participants are
investigating
insider threats
37%
36%
35%
34%
32%
Weak passwords/bad
password policies
Downloading or using cloud apps
without telling IT (shadow IT)
Using their own device
for work purposes
Poor password hygiene (storing
them on an Excel or notepad)
Using personal email for
corporate documents to avoid
attachment limitations

15. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USE
YOU CAN’T STOP
THE CLOUD:
Now What?
CSTRCloud Security Threat Report
Volume 1 | June 2019
CSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019

16. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019
Best Practices:
Building an Effective Cloud Security Strategy
Symantec Cloud Security ‐ research results
develop a governance
strategy supported by a
cloud center of
excellence
embrace a zero‐
trust model
promote shared
responsibility
use automation and
artificial intelligence
wherever possible
augment in‐house
cloud security
expertise with
managed services

17. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USE
QUESTIONS
Learn More at https://go.symantec.com/CSTR
CSTRCloud Security Threat Report
Volume 1 | June 2019
CSTR | CLOUD SECURITY THREAT REPORT | Volume 1 | June 2019

18. Copyright © 2019 Symantec Corporation SYMANTEC CONFIDENTIAL – LIMITED USECSTR | CLOUD SECURITY THREAT REPORT | Volume 1| June 2019