/
← Voltar ao feed
low

SANS survey: 93% run cloud production workloads, but only 40% rate security strategy advanced; misconfiguration causes 45% of critical incidents

1 fonte(s) · 1 atualização(ões) · publicado 22/10/2026 05:20 · coletado há 2 dias

The 2026 SANS Cloud Security Survey Insights report (400 IT and security professionals) finds a persistent cloud security maturity gap. 93% of organizations run production workloads in the cloud and 65% use more than one provider. Only 40% rate their cloud security strategy as advanced or optimized, even though 73% have a dedicated cloud security team or role. Misconfiguration is the leading cause of critical cloud incidents (45%), roughly double credential theft (22%). SANS Principal Instructor Serge Borso attributes persistence to the delay between finding and fixing gaps across too many consoles with unclear ownership.

Detalhes técnicos

  • 49% of organizations need more than 24 hours to close a known critical gap.
  • 45% describe their strategy as "intermediate", with only partial implementation of a defined strategy. SANS links this to security incidents.
  • Only 21% run a single consolidated CNAPP platform; 31% keep separate CSPM, CWPP and CIEM point solutions; 23% are evaluating consolidation.
  • 70% are spending more on cloud security than a year ago; 7% report cuts.

Remediação

SANS highlights three priorities:

  • Enforce automated policy checks in infrastructure-as-code pipelines to block misconfigurations before deployment.
  • Consolidate posture management, workload protection and identity security tools into unified platforms.
  • Extend zero trust beyond authentication with continuous, context-based controls that limit access after login.

Linha do tempo

  1. infosecurity-magazine.com ↗ · pub. 22/10/2026 05:20 · coletado 22/10 06:01 primeiro registro

    SANS survey: 93% run cloud production workloads, but only 40% rate security strategy advanced; misconfiguration causes 45% of critical incidents

    ler a análise desta fonte

    The 2026 SANS Cloud Security Survey Insights report (400 IT and security professionals) finds a persistent cloud security maturity gap. 93% of organizations run production workloads in the cloud and 65% use more than one provider. Only 40% rate their cloud security strategy as advanced or optimized, even though 73% have a dedicated cloud security team or role. Misconfiguration is the leading cause of critical cloud incidents (45%), roughly double credential theft (22%). SANS Principal Instructor Serge Borso attributes persistence to the delay between finding and fixing gaps across too many consoles with unclear ownership.

    Technical Details

    • 49% of organizations need more than 24 hours to close a known critical gap.
    • 45% describe their strategy as "intermediate", with only partial implementation of a defined strategy. SANS links this to security incidents.
    • Only 21% run a single consolidated CNAPP platform; 31% keep separate CSPM, CWPP and CIEM point solutions; 23% are evaluating consolidation.
    • 70% are spending more on cloud security than a year ago; 7% report cuts.

    Remediation

    SANS highlights three priorities:

    • Enforce automated policy checks in infrastructure-as-code pipelines to block misconfigurations before deployment.
    • Consolidate posture management, workload protection and identity security tools into unified platforms.
    • Extend zero trust beyond authentication with continuous, context-based controls that limit access after login.