Gemalto & Ponemon Institute Study

Cloud data security still a challenge for many companies

• Half of all cloud services and corporate data stored in cloud not controlled by IT departments
• Only a third of sensitive data stored in cloud-based applications is encrypted
• More than half of companies do not have a proactive approach for compliance with privacy and security regulations for data in cloud environments
• Simple measures by IT organizations provide protection for both corporate data and "shadow IT" needs.

Amsterdam, July 26, 2016 - Despite the continued importance of cloud computing resources to organizations, companies are not adopting appropriate governance and security measures to protect sensitive data in the cloud. These are just a few findings a Ponemon Institute study titled "The 2016 Global Cloud Data Security Study," commissioned by Gemalto (Euronext NL0000400653 GTO), the world leader in digital security. The study surveyed more than 3,400 IT and IT security practitioners worldwide to gain a better understanding of key trends in data governance and security practices for cloud-based services.

On July 28 at 10 a.m. EDT, Gemalto and the Ponemon Institute will host a webinar to discuss the full results of the study. Click on the following link to register: https://www.brighttalk.com/webcast/2037/216247.

According to 73 percent of respondents, cloud-based services and platforms are considered important to their organization's operations and 81 percent said they will be more so over the next two years. In fact, thirty-six percent of respondents said their companies' total IT and data processing needs were met using cloud resources today and that they expected this to increase to forty-five percent over the next two years.

Although cloud-based resources are becoming more important to companies' IT operations and business strategies, 54 percent of respondents did not agree their companies have a proactive approach to managing security and complying with privacy and data protection regulations in cloud environments. This is despite the fact that 65 percent of respondents said their organizations are committed to protecting confidential or sensitive information in the cloud. Furthermore, 56 percent did not agree their organization is careful about sharing sensitive information in the cloud with third parties such as business partners, contractors and vendors.