Companies Rely on Cloud Native for More Than Half of New Applications
December 11, 2018

Companies expect increased reliance on Cloud Native Applications (CNAs), however security concerns could prove to be a major obstacle, according to The State of Cloud Native Security, commissioned by Capsule8, Duo Security, and Signal Sciences.

62 percent of companies ... rely on cloud native for more than half of their new applications

As organizations seek to modernize infrastructure, CNAs provide huge opportunities to increase reach, scale and efficiency. Cloud native adoption is significantly on the rise, with 62 percent of companies noting that they rely on cloud native for more than half of their new applications. That figure is expected to grow to more than 80 percent over the next three years. However, businesses are keenly aware of the potential security risks that come along with it and more than half of those surveyed (56 percent) believe cloud native increases risk.

Fueling the concern over cyberattacks is their explosive growth, which shows no signs of slowing. According to the survey, 80 percent of respondents note attacks have increased at a rate of 2x or more over the last year. This is of particular concern when it comes to modern infrastructure, as production environments are not adequately protected for the amount of critical information they hold. Attacks on production environments levy significant consequences, with nearly half of those surveyed (48 percent) noting an attack has delivered damage to the system itself. Furthermore, 44 percent of those surveyed said an attack on production infrastructure has resulted in the loss of customer data.

Some additional key findings include:

■ As attacks increase, so does the rate of security alerts; only about one-third of the organizations surveyed are able to respond to more than 75 percent of alerts

■ Organizations have limited real-time visibility into attacks; 73 percent say they lack actionable, fine-grain, real-time insight into threats and ongoing attacks

■ False positives continue to plague IT and security organizations; 46 percent of those surveyed said that more than half of production environment security alerts were false positives

■ Poor analytics are the number one cause of false positives; nearly half reported this to be the primary issue

■ Organizations struggle to balance security with efficient deployment of production applications; 40 percent of those surveyed do not currently have a DevOps function in place – amongst those, half said the lack of appropriate skills on the security team was the primary obstacle

Overall, the benefits of modernizing production infrastructure, through cloud native deployments, are clear. To take advantage of all that cloud has to offer, businesses must understand their current posture; establish a roadmap for integrating Cybersecurity capabilities into DevOps; and push for the visibility required across this critical business infrastructure.

Methodology: In August 2018, Capsule8, Duo and Signal Sciences surveyed 486 senior-level information technology (IT) and IT security (IT sec) decision makers. The web-based survey was executed by ResearchNow. All respondents were qualified to be senior-level decision makers with roles including CIO, CISO, VP of IT, Director of IT and senior cloud security architect, among others. All respondents are employed by companies with at least $250 million in annual revenue. Half represent companies with revenue between $250-999 million; half come from organizations with greater than $1 billion annual revenue.

The Latest

January 17, 2019

To better align business and IT objectives, enterprise organizations should focus on the core "problems" that individual business units face today in driving out real consumer value. Until the roadblocks and inhibitors — and, ultimately, the resultant technical debt — are removed from the equation, large enterprise organizations will continue struggling to succeed ...

January 16, 2019

Technical debt is what results when legacy platforms or highly integrated and dependent systems and processes inhibit large enterprise organizations from meeting the needs of internal business stakeholders. In many cases, the core objectives that drive real, monetizable business value are not aligned to the esoteric IT goals of "automation" and "Agile development." This creates a fundamental disconnect between business and IT ...

January 14, 2019

Budget season is an important time of the year for businesses because it gives senior IT and security leaders time to reflect on what went right this year and what initiatives need to be given priority in the new year. Recent research from Threat Stack shows security budgets are expected to increase by 19 percent over the next two years, but business leaders are still facing challenges determining where to allocate this budget in the face of rapidly evolving infrastructure ...

January 10, 2019

As organizations of all sizes are embracing hybrid and multi-cloud infrastructures, they are experiencing the many benefits of a more agile, distributed and high-speed environment where new applications and services can be built and delivered in days and weeks, rather than months and years. But as the adoption of these next generation architectures continues to grow, so do the complexities of securing the cloud workloads running on them ...

January 09, 2019

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 9, the final installment, covers microservices, containers and APIs ...

January 08, 2019

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 8, covers microservices and containers ...

January 07, 2019

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 7, covers the Cloud ...

December 20, 2018

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 6, covers DevOps Analytics, including AI and Machine Learning ...

December 19, 2018

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 5 is all about testing ...

December 18, 2018

DEVOPSdigest invited DevOps experts for their predictions on how DevOps and related technologies will evolve and impact business in 2019. Part 4 covers Agile, CI/CD and automation ...

Share this