2012_global_cloud_security_survey_executive_summary

1. Cloud Security Survey Global
Executive Summary
Corporate Marketing
August 2012
1 8/15/2012 Copyright 2012 Trend Micro Inc.

2. Objective And Methodology
Objectives:
• To understand more about global and regional virtualization and cloud
adoption rates and barriers to adoption.
• To explore trends within the area of cloud technology and virtualization
practices.
Methodology:
• An online survey was conducted in June 2012 in seven countries: the
US, Canada, the UK, Germany, Japan, India, and Brazil. This was the first
year including Brazil and the second year for the other six countries.
• 1,400 respondents (200 per country) were surveyed: all were purchase
decision makers or key influencers for one or more of the following three
solutions/services:
– Cloud Computing Services,
– Server Virtualization, and/or
– Virtual Desktop Infrastructure (VDI).
• Companies were limited to 500+ employees.
8/15/2012 Copyright 2012 Trend Micro Inc. 2

3. Executive Summary
8/15/2012 Copyright 2012 Trend Micro Inc. 3

4. Cloud Is Not Secure. Almost Half Experienced Data
Security Lapse Or Issue In The Last 12 Months
• Globally, 47% of the respondents who are currently using a cloud computing service
reported they have experienced a data security lapse or issue with the cloud service their
company is using within the last 12 months. India had the highest incidence (67%), followed
by Brazil (55%).
• Incidence of data security lapse or issue increased from 43% in 2011 to 46% (excluding
Brazil, which was not surveyed in 2011) in 2012. India had the biggest increase of
12%, followed by Japan (7% increase) and Canada (6% increase).
N/A
Q: Has your organization experienced a data security lapse or issue with the cloud service your
company is using within the last 12 months?
8/15/2012 Copyright 2012 Trend Micro Inc. 4

5. Increased Adoption of Cloud Service
Correlated With Higher Incidence Of Data
Security Lapse Or Issue
• With the adoption rate of cloud services increasing from 2011 to
2012, there was also an increase in the incidence of data security lapse
or issue with the cloud services companies are using. This correlation is
particularly strong in India and Canada.
Incidence Of Data
Security Lapse Or
Issue With Cloud
N/A Service (%)
Cloud Service
Adoption Rate* (%)
N/A
Q: Has your organization experienced a data security lapse or issue with the cloud service your company is
using within the last 12 months?
*Cloud Service Adoption Rate: % of corporate decision makers who reported their company has currently
deployed or is piloting public or private cloud 5
8/15/2012 Copyright 2012 Trend Micro Inc.

6. Enterprises Are Concerned About Using
Cloud Computing Services
• More than half of the respondents indicated that apprehension over security is a
key reason holding back their adoption of cloud technique and that shared storage
is vulnerable without encryption.
• More than half expressed more willingness to consider using the cloud if cloud
providers took a more hands on approach to securing data or if they knew more
about how to secure their data in the cloud.
Disagree Neither Disagree Nor Agree
Neither Disagree Nor Disagree Agree
Shared storage is vulnerable 11% 34% 55% 2012
without encryption 10% 35% 55% 2011
If cloud service providers took a more hands on approach to securing our 11% 36% 53% 2012
company data, this would increase our consideration of using the cloud 13% 41% 47% 2011
Apprehension over security is a key reason 13% 34% 53% 2012
holding back our adoption of cloud technologies 15% 35% 50% 2011
An easy to administer cloud encryption service would 12% 36% 53% 2012
give us reason to consider using more cloud services/cloud vendors 12% 39% 49% 2011
If we knew more about how to secure our data in the cloud, 13% 34% 53% 2012
this would increase our consideration of using the cloud 12% 39% 49% 2011
We do not use public cloud services for 16% 34% 50% 2012
any of our data that has security requirements 16% 36% 47% 2011
Shared infrastructure of any kind 14% 36% 50% 2012
is too risky 17% 37% 46% 2011
A guaranteed SLA would drive us to 10% 40% 50% 2012
use more cloud computing services/cloud vendors 12% 39% 49% 2011
0% 20% 40% 60% 80% 100%
Q: How much do you agree or disagree with the following statements about cloud vendors / cloud computing services?
8/15/2012 Copyright 2012 Trend Micro Inc. 6

7. Not All Cloud Providers Meet Enterprise
IT Security Requirements
• Four in ten respondents indicated their IT security requirements are not
being met by current cloud providers / offerings.
Disagree Neither Disagree Nor Agree Agree
2012-The lack of cloud computing standards prevents cloud to
cloud portability 18% 38% 44%
2011-The lack of cloud computing standards prevents cloud to
cloud portability 18% 37% 44%
2012-Our support service needs are not being met by current
cloud offerings / cloud providers 24% 34% 42%
2011-Our support service needs are not being met by current
cloud offerings / cloud providers 25% 37% 38%
2012-Our IT requirements are not being met by current cloud
offerings / cloud providers 25% 34% 41%
2011-Our IT requirements are not being met by current cloud
offerings / cloud providers 27% 35% 38%
2012-Our IT Security requirements are not being met by current
cloud offerings / cloud providers 28% 32% 40%
2011-Our IT Security requirements are not being met by current
cloud offerings / cloud providers 25% 36% 40%
2012-Our business requirements are not being met by current
cloud offerings / cloud providers
27% 33% 40%
2011-Our business requirements are not being met by current
cloud offerings / cloud providers 26% 36% 38%
0% 50% 100%
Q: How much do you agree or disagree with the following statements about the current set of cloud
computing service offerings in the market?
8/15/2012 Copyright 2012 Trend Micro Inc. 7

8. Some Enterprises Don’t Even Know
They Are Actually Using A Cloud
Computing Service
• There is still confusion
about what cloud
computing services exactly
are. When presented with
a list of cloud
services, 94% of the
respondents said they are
currently using at least one
of them. However, 9% of
these respondents
indicated, on the other
hand, that their company
has no plans to deploy
cloud computing services.
This is consistent with
2011 where 7% said the
same.
Q: Which, if any, of the following vendors / services does your company currently use?
8/15/2012 Copyright 2012 Trend Micro Inc. 8

9. More Enterprises Are Moving To
The Cloud Quickly
• In 2011 slightly over 10% of the respondents had cloud computing services
in production. This almost doubled to 20% in 2012 for both public and
private cloud services. Close to half are either implementing or piloting.
Q: With regards to the following steps, please indicate where your company is – in
terms of usage/deployment (In Production; Implementing; In Trials/Piloting; In
Discussions; No Plans To Deploy):
• Public Cloud
• Private Cloud
• Hybrid apps – part in cloud, part local
8/15/2012 Copyright 2012 Trend Micro Inc. 9

10. And More Applications Are Moving
To The Cloud; More Servers and
Endpoints Are Being Virtualized
• For companies that have public cloud or hybrid apps currently in
production, an average of 46% of the existing applications are already
deployed in the cloud. An average of 53% of the new applications will be
deployed in the cloud.
• For companies that have server virtualization currently in production, an
average of 46% of their servers are currently virtualized. In the next 12
months, an average of 63% of their servers will be virtualized.
• For companies that have VDI currently in production, an average of 44% of
their endpoints are currently virtualized. In the next 12 months, an average
of 63% of their endpoints will be virtualized.
• The 2012 results are consistent with 2011 results.
– The percentage of endpoints currently virtualized increased slightly from 42% in 2011 to 44%
in 2012.
– The percentage of endpoints that will be virtualized increased by 3% from 2011 to 2012.
Qs: What percentage of your company’s:
• % of EXISTING applications deployed in the cloud; % of NEW applications to be deployed in the cloud?
• % of Endpoints CURRENTLY Virtualized; % of Endpoints that WILL BE virtualized in the next 12 months?
• % of Servers CURRENTLY Virtualized; % of Servers that WILL BE virtualized in the next 12 months?
8/15/2012 Copyright 2012 Trend Micro Inc. 10

11. Security Is Important, But Performance and
Availability Are Equally Important
• Security and performance/availability of cloud services continue to be the
dominant barriers in adopting cloud computing services.
Concerns over security (of data or cloud 54%
infrastructure) 50%
Performance / Availability of cloud service 50%
48%
Unclear cost benefits / ROI 30%
34%
Lack of transparency about data center 25%
facilities, hardware, and disaster recovery 27%
Compliance 29%
27%
Billing and tracking of services used 24%
26% 2012
Complexity in integrating the cloud with 29% 2011
existing IT operations 26%
Lack of access to our data 22%
25%
Potential lock-in to the cloud service / 25%
Proprietary data models used by cloud… 25%
Internal resistance / Internal inertia to do 28%
things the same way 23%
Current offerings do not meet our business 20%
needs 20%
0% 20% 40% 60% 80% 100%
Q: What risks/barriers do you perceive in adopting cloud computing services?
8/15/2012 Copyright 2012 Trend Micro Inc. 11

12. Encryption Is A Key Measure Taken
To Secure Data In The Cloud
• For those who have public cloud in production, the vast majority,
87-89% said they encrypt their data stored in the cloud and keep a 1:1
copy of all data that is synched to the cloud. This is a slight increase
from 2011.
Qs: Does your company encrypt any of your data stored in the cloud?
Does your company keep a 1:1 copy of all data that is synched to the public cloud data?
8/15/2012 |Copyright 2012 Trend Micro Inc. 12

13. Companies That Have Server
Virtualization In Production Have A
Tendency To Also Move To The Cloud
• Use of server virtualization was significantly correlated to cloud services
usage.
• Consistent with 2011 numbers, in 2012, of the 848 respondents who
have Server Virtualization in production or in pilot:
– 71% also have VDI in production/pilot
– 65% have Private Cloud Computing in production/pilot
– 62% have Public Cloud Computing in production/pilot
• Of the remaining 552 respondents:
– Only 25% also have VDI in production/pilot
– Only 24% have Private Cloud Computing in production/pilot
– Only 26% have Public Cloud Computing in production/pilot
Q: Which of the following best describes your organization’s use of the following technologies?
(Currently Piloting; Currently Deployed / in Production; Planning To Deploy; Have No Plans To
Deploy; Not Sure /Don’t Know)
• Server Virtualization
• VDI
• Private Cloud
• Public Cloud
8/15/2012 Copyright 2012 Trend Micro Inc. 13

14. Appendix
Usage of Cloud Computing Services, Server
Virtualization and VDI
8/15/2012 Copyright 2012 Trend Micro Inc. 14

15. Adoption/Usage of Server
Virtualization, VDI, Pubic Cloud and
•Private Cloud for the various technologies is highest in the US
Overall, adoption rate
and the UK, and is lowest in Japan.
• Adoption rate for all 4 technologies increased significantly in Canada.
• Adoption of public cloud and server virtualization also increased
significantly in India.
% that have currently deployed or are TOTAL US JAPAN INDIA GERMANY UK CANADA BRAZIL
piloting among decision makers*
2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2011 2012 2012
59% 61% 70% 71% 58% 60% 51% 59% 61% 67% 68% 63% 47% 56% 50%
Server Virtualization
52% 53% 62% 62% 42% 40% 48% 52% 55% 53% 63% 64% 45% 55% 47%
VDI
46% 48% 56% 57% 34% 39% 42% 43% 54% 54% 51% 53% 38% 48% 47%
Private Cloud
45% 48% 54% 52% 37% 38% 38% 49% 48% 49% 52% 53% 42% 51% 46%
Public Cloud
*Decision makers: Enterprise IT professionals who make purchase decisions for cloud computing services, server
virtualization or Virtual Desktop infrastructure (VDI) solutions.
Q: Which of the following best describes your organization’s use of the following technologies? (Currently
Piloting; Currently Deployed / in Production; Planning To Deploy Within The Next 6 Months; Planning To Deploy In
The Next 7 To 12 Months; Planning To Deploy But Do Not Know When; Have No Plans To Deploy; Not Sure /Don’t
Know)
• Server Virtualization
• VDI
• Private Cloud
• Public Cloud 15
8/15/2012 Copyright 2012 Trend Micro Inc.

16. Thank You!
8/15/2012 Copyright 2012 Trend Micro Inc. 16