2018 THALES DATA THREAT REPORT

Transcription

1 2018 THALES DATA THREAT REPORT Trends in Encryption and Data Security GLOBAL EDITION

2 2018 THALES DATA THREAT REPORT NOW IN ITS SIXTH YEAR SWEDEN NETHERLANDS U.S. U.K. GERMANY KOREA JAPAN INDIA Copyright 2018 Thales 1,200+ SENIOR IT SECURITY EXECUTIVES SURVEYED GLOBALLY 500 U.S. TOTAL

3 IT S CHANGE HOW YOU PROTECT YOUR DATA. OR BE BREACHED. AGAIN. BREACHED EVER BREACHED IN THE LAST YEAR % 46% 26% 24% 67% breached globally 2016 BREACHED. AGAIN! 21% 20% Global Breaches US Breaches 71% breached in the US 15% breached both in the last year and previously Up from 11% last year

4 DIGITAL TRANSFORMATION WITHOUT DATA SECURITY IT S LIKE DRIVING OFF A CLIFF! 94% use digital transformation technologies with sensitive data (cloud, big data, IoT, containers, blockchain and mobile payments) HEADLONG ADOPTION COMPOUNDS THE PROBLEM 42% use more than 50 SaaS applications 53% use 3 or more PaaS environments 57% use 3 or more IaaS vendors 99% use Big Data 94% implement IoT 91% working on or using mobile payments

5 GROUNDHOG DAY: TIMES HAVE CHANGED SECURITY STRATEGIES HAVE NOT IT Security pros know data at rest security is most effective at protecting sensitive information but aren t prioritizing increased spending Data at rest Network Data in motion 40% 77% 48% 75% 48% 75% Analysis & correlation 74% 50% Endpoint & mobile 64% 57% Rated Effective Spending Increase

6 DEPLOYING TO THE CLOUD DATA SECURITY REQUIRED Top Cloud Security Concerns (rates of very/extremely concerned) Encryption The top IT security control needed to expand cloud adoption Attacks at the Service Provider Lack of control over location of data 64% 62% 44% 42% 41% Security of my organization s data in the cloud Managing Encryption Keys across multiple cloud environments Custodianship of encryption keys Meeting compliance requirements 58% 58% 57% 54% 34% What are enterprises doing about the problem today? 51% 46% 40% Encryption of Detailed IT cloud data with and Physical Enterprise Security premises key information management and storage Encryption of cloud data with CSP key management and storage HSMs on premises or in the cloud Enabling encryption services offered by the CSP Implementing CASB Deploying or using a BYOK solution

7 EVERYBODY IS USING BIG DATA SENSITIVE DATA USE COMPOUNDS PROBLEMS 99% of enterprises now use big data 45% are using sensitive data within big data environments today Top concerns for sensitive data within big data environments What s needed to speed Big Data adoption? Data may be anywhere Security of reports Privacy Violations 34% 33% 30% 38% 36% 35% 32% 31% Lack of native security frameworks 30% Privileged user access 27% Stronger user authentication Improved monitoring and reporting System level encryption and access controls Encryption of data that enables analysis Compliance certifications

8 MOBILE PAYMENTS ON THE RISE ENCYRPTION REQUIRED 91% Using or planning to use mobile payments 37% are using sensitive data with mobile applications 41% 26% 24% Encryption a key tool enabling safe use of mobile payments In pilot or testing evaluating already in production Top concerns with mobile payments 41% 39% 37% 36% 35% Encryption establishes secure identity with digital birth certificates for devices Encryption protects data-in-transit Encryption protects data on devices Encryption and access controls help organizations meet compliance requirements for back end data stores PII data Payment card information W eak authentication Fraudsters new account fraud Fraudsters account takeover

9 ENCRYPTION A KEYSTONE TECHNOLOGY FOR PROTECTING DATA Encryption needed to drive the adoption of the technologies needed for digital transformation Cloud: The top tool for more cloud use 44% Secure Identity needed to drive Big Data Adoption 35% Big Data: Encryption needed to drive Big Data Adoption 38% IoT: Encryption the top tool to increase ability to use IoT 48% Containers: Encryption drives Container usage 41% Encryption tools top the plan for data security related spending to be purchased in the next year 42% Tokenization Encryption with BYOK Hardware Security Modules Global tools 44% 43% 41% 45% 43% 42% Privacy Requirements: Encryption the top tool needed to meet new Privacy requirements like GDPR US tools

10 2017 THALES DATA THREAT REPORT Trends in Encryption and Data Security GLOBAL EDITION