PRESS RELEASE
NATIONAL HARBOR, Md.–(BUSINESS WIRE)–Gartner Safety and Threat Administration Summit — Seventy p.c of organizations have prioritized funding in SaaS safety, establishing devoted SaaS safety groups, regardless of financial uncertainty and workforce reductions. This was a key discovering within the fourth Annual SaaS Safety Survey Report: 2025 CISO Plans and Priorities launched immediately by the Cloud Safety Alliance (CSA), the world’s main group devoted to defining requirements, certifications, and greatest practices to assist guarantee a safe cloud computing setting.
Commissioned by Adaptive Protect, the chief in SaaS safety, the survey discovered that 39% of organizations are growing SaaS cybersecurity budgets in comparison with final yr.
“Coming off a yr wherein financial uncertainty and layoffs had been making headlines, these outcomes communicate volumes to organizations’ realization that even probably the most safe methods are susceptible to more and more ingenious menace actors,” stated Hillary Baron, lead writer and Senior Technical Director for Analysis, Cloud Safety Alliance.
Extra key findings embrace:
-
SaaS safety devoted groups are established. For the primary time, the survey recognized the existence of SaaS-specific safety roles: 57% of respondents have a SaaS safety staff of no less than two devoted full-time staff and one other 13% have allotted a devoted full-time worker.
-
Organizations managed to enhance their key SaaS safety capabilities. Full visibility into the SaaS stack has practically doubled since final yr, leaving firms in significantly better positions in the case of stopping breaches and detecting threats. Seventy p.c of organizations report having reasonable to full visibility into their SaaS functions.
-
SaaS safety challenges stem from utilizing the improper software. Organizations are nonetheless struggling to handle misconfigurations, linked apps, and visibility into safety dangers. Probably the most troublesome areas to handle in SaaS safety, in accordance with the respondents, are reaching visibility into business-critical apps (73%); monitoring and monitoring safety dangers from third-party linked apps (65%); finding and fixing SaaS misconfigurations (65%); guaranteeing information governance and privateness (63%); and aligning SaaS software settings with compliance requirements (61%). These challenges stem from utilizing instruments similar to CASB and Handbook Audits. Corporations which have adopted SaaS Safety Posture Administration (SSPM) are greater than twice as prone to have full visibility into their SaaS stack — 62% of those organizations are in a position to oversee over 75% of their SaaS setting in contrast to people who make the most of different instruments and handbook processes of their technique (31%).
-
Regardless of challenges, SaaS safety funding is paying off. The challenges offered clearly show that organizations are taking SaaS safety significantly. The truth is, the survey recognized a constructive development: 25% of respondents skilled a SaaS safety incident previously two years, in contrast with 53% final yr. The commonest safety incidents reported had been information breaches (52%) and information leakage (50%), adopted by unauthorized entry (44%) and malicious functions (38%).
“To be well-equipped to deal with immediately’s most refined threats, giant enterprises now perceive that investments in preventative strategies are the precise strategy. Organizations have collected a variety of instruments that cowl single use circumstances, leaving them uncovered from new assault surfaces, and forcing them to handle many alternative options,” stated Maor Bin, CEO and co-founder, Adaptive Protect.
“I’m not stunned to see the main leap in SaaS maturity, that is 100% aligned with the exponential and quickly rising demand we establish out there. Identical to Cloud Safety Posture Administration (CSPM) covers any safety use case in Cloud Infrastructures, SaaS Safety Posture Administration (SSPM) is all about consolidation of SaaS safety assault surfaces.”
The survey was carried out on-line by CSA in January 2024 and acquired 478 responses from IT and safety professionals representing giant organizations in numerous industries and places. CSA’s analysis analysts carried out the information evaluation and interpretation for this report. Sponsors are CSA Company Members who help the analysis challenge’s findings however don’t have any added affect on the content material improvement or enhancing rights of CSA analysis.
Evaluation the entire Annual SaaS Safety Survey Report: 2025 CISO Plans and Priorities.
About Adaptive Protect
Chosen by lots of of enormous enterprises, together with quite a few Fortune 500 firms, Adaptive Protect continues to be the trusted SaaS Safety Posture Administration (SSPM) and Id Menace Detection and Response (ITDR) platform that allows safety groups to remain on high of their group’s apps, identities and any uncommon person habits within the SaaS ecosystem. Adaptive Protect leads the SaaS safety house and is acknowledged with awards similar to Gartner Cool Vendor, Frost & Sullivan’s International Expertise Innovation Management and the International Infosec Awards 2024.
About Cloud Safety Alliance
The Cloud Safety Alliance (CSA) is the world’s main group devoted to defining and elevating consciousness of greatest practices to assist guarantee a safe cloud computing setting. CSA harnesses the subject material experience of trade practitioners, associations, governments, and its company and particular person members to supply cloud security-specific analysis, schooling, coaching, certification, occasions, and merchandise. CSA’s actions, information, and intensive community profit your entire neighborhood impacted by cloud — from suppliers and prospects to governments, entrepreneurs, and the peace of mind trade — and supply a discussion board by means of which completely different events can work collectively to create and keep a trusted cloud ecosystem. For additional data, go to us at www.cloudsecurityalliance.org, and observe us on Twitter @cloudsa.
