{"id":88445,"date":"2023-03-10T18:19:33","date_gmt":"2023-03-10T18:19:33","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4046979"},"modified":"2023-03-10T18:19:33","modified_gmt":"2023-03-10T18:19:33","slug":"cloud-security-hampered-by-proliferation-of-tools-has-a-forest-for-trees-problem","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=88445","title":{"rendered":"Cloud security, hampered by proliferation of tools, has a \u201cforest for trees\u201d problem"},"content":{"rendered":"
\"This
Image: Ar_TH\/Adobe Stock<\/figcaption><\/figure>\n

A new study Networks found that, on average, organizations rely on over 30 tools for overall security, and that degree of complexity is making for less security, not more.<\/p>\n

Over 60% of organizations have been operating in a cloud environment for three or more years, but technical complexities and maintaining comprehensive security still hamper their cloud migration efforts, according to the 2023 State of Cloud-Native Security Report<\/a>.<\/p>\n

SEE: CrowdStrike: Attackers focusing on cloud exploits, data theft<\/a> (TechRepublic)<\/strong><\/p>\n

Three quarters of respondents to Palo Alto Networks\u2019 survey reported the number of cloud security tools they use creates blind spots that affect their ability to prioritize risk and prevent threats. Over three quarters said they struggle to identify what security tools are necessary to achieve their objectives.<\/p>\n

90% of C-Suites respondents said they could not detect, contain and resolve cyberthreats within an hour, and about half conceded that a majority of their workforce doesn\u2019t understand their security responsibilities.<\/p>\n

Jump to:<\/p>\n

Top challenges to providing comprehensive security, top to bottom, left to right<\/h2>\n

Respondents to the Palo Alto Networks\u2019 survey named the top challenges to providing comprehensive security, which include the following:<\/p>\n

Managing security holistically across teams<\/h3>\n

It isn\u2019t enough to adopt a responsibility model between cloud service providers and users; companies need to look inward, and eliminate silos insofar as they prevent security processes that work for development, operations and security.<\/p>\n

Embedding security across the cloud-native development lifecycle<\/h3>\n

Embedding the right cloud security solutions at every stage of the application development process from code to runtime is critical.<\/p>\n

Training IT, development and security staff to use security tools<\/h3>\n

Cloud-native application development requires securing \u201cexponentially more cloud assets across code, workloads, identities, data, etc., and across multiple execution environments, such as containers, serverless, and platforms,\u201d noted the firm.<\/p>\n

Lack of visibility into security vulnerabilities across cloud resources<\/h3>\n

Palo Alto Networks calls vulnerability management the \u201choly grail of application security.\u201d But achieving this means being able to mirror the scale, speed and agility of the cloud, according to the company. Successfully done, it can reward companies with near real-time detection of threats and vulnerabilities.<\/p>\n

Using the right tools<\/h3>\n

In the report, the ideal cloud security solution is scalable and able to handle immediate security needs and additional use cases as the company expands cloud applications and uses.<\/p>\n