New DivvyCloud Report Finds 85% of Enterprises Believe Cloud Adoption is Necessary for Innovation, but Less than Half are Equipped to Operate in the Cloud Securely

DivvyCloud, a leading provider of security and compliance automation for cloud and container environments, today released its 2020 State of Enterprise Cloud Adoption and Security report, which shares insights on how enterprises are adopting public cloud, multicloud, containers, and other services, as well as the challenges they experience in maintaining security and compliance. To prepare this report, DivvyCloud surveyed nearly 2,000 IT professionals and analyzed the results, including comparing data to its 2019 report to demonstrate trends over time.

A key theme that emerged from the analysis is that most enterprises (85%) believe embracing the public cloud is critical to fuel innovation, but the majority are not equipped to operate in the cloud securely. In fact, of those surveyed whose organization has already adopted public cloud, only 40% have in place an approach to managing cloud and container security. Only a little over half (58%) said their organization has clear guidelines and policies in place for developers building applications and operating in the public cloud. And of those, 25% said these policies are not enforced, while 17% confirmed their organization lacks clear guidelines entirely.

“Enterprises believe they must choose between innovation and security-a false choice we see manifested in the results of this report, as well as in conversations with our customers and prospects,” said Brian Johnson, chief executive officer and cofounder, DivvyCloud. “Only 35% of respondents do not believe security impedes developers’ self-service access to best-in-class cloud services to drive innovation-meaning 65% believe they must choose between giving developers self-service access to tools that fuel innovation and remaining secure.

“The truth is, security issues in the cloud can be avoided. By employing the necessary people, processes, and systems at the same time as cloud adoption (not weeks, months, or years later), enterprises can reap the benefits of the cloud while ensuring continuous security and compliance.”

Additional key findings of the report include:

• Automation is Coveted but Not Leveraged in Cloud Security: Nearly 70% of all respondents believe that automation can provide benefits to their organization’s cloud security strategy, but only 48% say their cloud security strategy currently incorporates products that leverage automation. The vast majority of respondents (85%) trust automated security solutions more than or the same as human security professionals.
• Developers and Security are Misaligned: Almost half (49%) of all respondents whose organizations use public cloud said their developers and engineers at times ignore or circumvent cloud security and compliance policies.
• Enterprises Lack Understanding of Applicable Regulations and Standards: Out of all respondents, 42% do not know which frameworks their company uses to maintain compliance with relevant standards and regulations (such as GDPR, HIPAA, PCI DSS, SOC 2, etc.)
• Infrastructure-as-a-Service (IaaS) Reigns Supreme: When asked about the architectures their organizations currently use or plan to use within the next year to build apps, 42% said IaaS; among larger organizations with 10,000 or more employees, that number goes up to 53%
• The Cloud is Ubiquitous: Only 7% of respondents work for organizations that do not use any public cloud services, and only 5% reported no plans to adopt public cloud-a significant drop from the 11% who reported no adoption plans last year
• Enterprise Multicloud Strategies are Declining: 64% of this year’s survey respondents confirmed their organization is using two or more cloud services, a 13% decline from last year

For additional findings and analysis download DivvyCloud’s full 2020 State of Enterprise Cloud Adoption and Security report, here.