A McAfee report reveals that the vast majority (99%) of all misconfigurations in infrastructure as a service (IaaS) are not reported to the cloud provider.
Over 90% of users experience security with their IaaS, yet only 26% of them are adequately informed to address the challenges of misconfiguration.
What did the research show?
McAfee researchers have published a report titled “Cloud-Native: The Infrastructure-as-a-Service Adoption and Risk.”
This study was conducted among 1,000 IT across 11 countries, and cloud usage data from more than 30 million McAfee Mvision cloud users was collected to produce the report.
The report reveals that the majority (99%) of all Infrastructure-as-a-Service (IaaS) misconfigurations go unnoticed.
Only one percent of all misconfigurations in IaaS are reported.
Nearly 42% of storage objects measured with recorded DLP are not configured correctly.
It may take more than 24 hours or even more than a month to address the reported misconfigurations.
The researchers noted that these misconfigurations that go unnoticed can lead to an increased risk of data breaches.
The report also outlined the top ten misconfigurations in AWS, the most popular IaaS provider. You can see them in detail here.
Most IaaS users often overlook the security issues that come with adopting IaaS and fail to report any misconfigurations, assuming that the provider takes care of them. However, users are equally responsible for the security of the infrastructure and the data stored in the cloud.
“In their rush to adopt IaaS, many organizations overlook the shared responsibility model for the cloud and assume that security is the sole responsibility of the cloud provider. However, the security of what customers store in the cloud, especially sensitive data, is their responsibility,” said Rajiv Gupta, Senior Vice President of Cloud Security at McAfee.
