Multi-cloud use and compliance requirements shape encryption strategy, finds latest Thales Global Encryption Study

Encryption with public cloud services experienced double digit growth 

Thales, a leader in critical information systems, cybersecurity and data security, announces the results of its 2018 Global Encryption Trends Study. The report, based on independent research by the Ponemon Institute and sponsored by Thales, reflects some of the changes and challenges organizations are experiencing in a world marked by widespread cloud deployments, use of multiple public cloud providers and new regulations such as the EU General Data Protection Regulation (GDPR). 

This year, 43% of respondents report that their organization has an encryption strategy applied consistently across their enterprise. This strategy is leveraged to protect sensitive data against cyber criminals, help organizations address complex compliance requirements, and guard against human error. Encryption, which is achieved with software or hardware tools such as hardware security modules (HSMs), is often coupled with best practice-based key management. Encryption is also playing an increasingly large role in protecting the enormous adoption of organizations deploying to the cloud. 

Among the findings:

  • 84% of respondents either use the cloud for sensitive/non-sensitive applications and data today, or will do so in the next 12-24 months
  • 61% of respondents are using more than one public cloud provider, and 71% plan to in the next two years
  • 39% encrypt in public cloud services (such as Amazon Web Services, Microsoft Azure and Google Cloud), a number that has risen 11% since last year’s report
  • Overall HSM use grew to 41% -- the highest level ever. The most common use cases for HSMs are SSL/TLS and application level encryption, with 20% of respondents reporting that they use HSMs with blockchain applications
  • 49% of enterprises are either partially or extensively deploying encryption of IoT data on IoT devices and platforms 

Dr. Larry Ponemon, chairman and founder of The Ponemon Institute, says:

“While enterprises are rightfully encrypting cloud-based data, 42% of organizations indicate they will only use keys for cloud-based data-at-rest encryption that they control themselves. Similarly, organizations that use HSMs in conjunction with public cloud-based applications prefer to own and operate those HSMs on-premises. These findings tell us control over the cloud is highly important to companies increasingly under pressure from data security threats and compliance requirements.” 

John Grimm, senior director of security strategy at Thales eSecurity, says:

“Companies navigating today’s threat landscape are understandably seeking out fast, scalable encryption tools that encompass enterprise and cloud use cases, and enforce policy consistently across both models. Fortunately, enterprises have more data protection choices today than when the race to the cloud began. These options include bring your own key (BYOK) and bring your own encryption (BYOE) solutions, which allow enterprises to apply the same encryption and key management solution across multiple platforms.” 

The new 2018 Global Encryption Trends Study can be downloaded here.