2025混合多云世界的安全保障研究

Securing a Hybrid and Multicloud World Table of Contents 03Executive Summary04Key Findings06Cloud Remains at the Forefront of Security Considerations08Complexity is the Enemy of Cloud Security10Security Tool Sprawl11Attacks Target Cloud Resources13Digital Sovereignty in a Hybrid World14The Liability that is the Human in the Loop15AppSec and DevOps Security and the Cloud17Progress to a More Secure Cloud18About this Study Executive Summary Cloud-based services have become a common and critical part of enterprise infrastructure, but organizationsstill struggle to secure them. This latest edition of theThales Cloud Security Studyexamines organizations’challenges, successes and strategic plans related to their cloud-based infrastructure and services. Whilemost enterprises have integrated cloud resources into their operations, many need to improve their abilityto secure these environments and the data they contain. Despite cloud security’s status as respondents’ topsecurity spending priority, most organizations require significant advancement in their cloud security postureand operations. The rapid push to support AI initiatives, which are often heavily cloud-dependent, furtherintensifies the urgency, as effective and efficient data protections are required to deliver on the promise of AI. This year’s edition of the Thales Cloud Security Study includes insights from nearly 3,200 respondents across20 countries, capturing executive, managerial and practitioner perspectives on the evolving cloud securitylandscape. As cloud infrastructure continues to expand, cloud security remains the top security spending priorityfor organizations worldwide. However, the growing complexity of hybrid and multicloud environments is placingincreasing strain on security teams. A rising number of respondents report challenges in securing their cloud assets,an issue that is further amplified by the demands of AI projects that often operate in the cloud and require accessto large volumes of sensitive data. Compounding this issue, four of the top five targeted assets in reported attacksare cloud-based. In this environment, strengthening cloud security and streamlining operations are essential stepstoward enhancing overall security effectiveness and resilience. Source: 2025 Cloud Security Study custom survey fromS&P Global Market Intelligence 451 Research, commissioned by Thales. Key Findings Cloud Remains at the Forefront of Security Considerations of all enterprisesregard cloud securityas a pressing securitydiscipline. indicated that AI securityspending is eating intoor taking over existingsecurity budgets. of data in the cloudis sensitive, up from47% last year. Only 8% of respondentsencrypt 80% or more oftheir cloud data.of respondentsencrypt80% or moreof theircloud data. Attacks Target Cloud Resources cited an increase in direct attacksto compromise infrastructure.54% The Liability that is the Human in the Loop Complexity is the Enemy of Cloud Security 85 The average number ofSaaS applications in use,a 6% increase. 2.1 The average number ofpublic cloud providers usedby enterprises. 55% report that securingcloud environments ismore complex than securing on-premisesvenues, up from 51%last year. 57% are using five or more key managementsystems, up from 53% last year. Digital Sovereignty in a Hybrid World 42% cite encryption and key management assufficient to achieve sovereignty objectivesregardless of data’s physical location. 33% regard future-proofing portability forworkloads and data as primary driversfor digital sovereignty initiatives. Cloud Remains at theForefront of SecurityConsiderations Enterprise infrastructure has evolved such that cloud is no longer simply an option — it is a key resource and anexpected element in the modern infrastructure portfolio. However, many organizations are still developing their cloudoperations skill sets. Securing cloud data and infrastructure requires a distinct mindset, and controls and capabilitiescan vary among cloud providers. That presents challenges for security teams as they work to effectively and efficientlysecure their cloud assets. AI initiatives — and the resulting push to bring more data into cloud-based AI services — areadding further pressure to cloud data security efforts. Most pressing security disciplines Cloud security remains the most pressing area of concern in this year’sstudy, highlighting the ongoing difficulties organizations face. Thesechallenges involve not only protecting cloud environments but alsomaintaining the skilled workforce needed to manage them effectively.Nearly two-thirds of respondents (64%) identified cloud security asone of the top five most pressing security disciplines, with 17% rankingit as the No. 1 discipline. The fact that cloud security tops the list yearafter year, despite considerable investment, illustrates the issue’scomplexity and persistence. It’s not just a technical challenge, but amultifaceted one involving ope