--- title: Smart business – companies invest heavily in cloud security as cyber-threat grows description: Smart business – companies invest heavily in cloud security as cyber-threat grows image: https://businessinsights.bitdefender.com/hubfs/dollar-1071788_960_720.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) [#Enterprise Security](https://businessinsights.bitdefender.com/topic/enterprise-security) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Jul 20, 2017 # Smart business – companies invest heavily in cloud security as cyber-threat grows Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security&utm_medium=social&utm_source=facebook) Businesses are growing increasingly aware of the security risks beyond the control of their cloud provider, according to new research by B2B ratings and reviews firm Clutch. A survey of 283 IT professionals at various cloud-using businesses across the United States uncovered that 70% prefer to store data in the cloud than on a legacy system. More than half of the companies surveyed said they are investing heavily toward securing their data, devoting upwards of $100,000 to extra cloud security features. The reason behind this spending, per the surveyors, is increased awareness about IT security in the business sector. Because security also needs to be ensured at an application-level, “the company and its employees shoulder the responsibility for security,” reads [the report](https://clutch.co/cloud/resources/cloud-computing-security-survey-2017). # **Application-level security** As evidenced by the [WannaCry](https://www.bitdefender.com/news/-3289.html?icid=footer_ransomware_attack) ransomware in May and the [GoldenEye/Petya](https://hotforsecurity.bitdefender.com/blog/everything-you-need-to-know-about-the-goldeneye-petya-attack-18294.html) attack in June, companies are under increasing pressure to secure their data against cybercriminals. For those companies that lag behind, at least the UK is prepared to slap some wrists with new legislation to take effect next year. The EU General Data Protection Regulation (GDPR), effective May 25, 2018, will require every organization to [guarantee safe storage](https://businessinsights.bitdefender.com/gdpr-eu-businesses-defense-cyberattacks?hsLang=en-us) and processing of personally identifiable information of an EU resident. Another regulation is the Health Insurance Portability and Accountability Act ([HIPAA](https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act)), which punishes non-compliance with fines of up to $1.5 million annually since 1996. HIPPA aims to prevent the compromise of medical patients’ sensitive information. Haresh Kumbhani, founder and CEO of cloud consulting company Zymr, Inc., agrees that businesses are increasingly aware of the risks of not securing their cloud data. "There is suddenly a number of people recognizing that application-level security needs to be done by the user, not the vendor," said Kumbhani. "If this is the case, then they need to invest top dollar in securing the data." While clouds are inherently secure, application-level safeguards are imperative to account for unpredictable user errors. # **IoT dangers** But businesses still have a ways to go to comply with experts’ recommendations, especially if they have their toes dipped in the IoT realm. Around 1 in 4 businesses on the cloud use Internet of Things solutions. However, these devices are often not patched after a new vulnerability is discovered. A recent example is German IoT vendor AGFEO, which [left vulnerable smart-home controllers unpatched](https://www.bitdefender.com/box/blog/iot-news/vulnerable-agfeo-smart-home-controllers-get-firmware-update-five-months-late/) for five months, despite being notified by SEC Consult of the dangers to end-users. Moreover, “\[IoT devices\] may not even be thought of as hackable by everyday users,” reads the report. “Who would consider their baby monitor to be a security risk?” As history has shown, [it can be](http://time.com/79170/stranger-hacks-into-baby-monitor-and-screams-at-child/). “Nascent is the first word that comes to mind \[regarding IoT security\],” said Jamie MacQuarrie, co-founder of Appivo, a platform for developing cloud-based apps. “For every company that properly locks down IoT-enabled machines on a factory floor, you have thousands of unsecured ‘smart’ lightbulbs.” “Now consider a well-intentioned employee that installs an unsecured smart lightbulb in the break room, providing a gateway for hackers to pick away at the more secure internal systems. At that point, \[the hackers\] are across the moat and through the draw bridge, and nobody even knows it,” MacQuarrie added, offering the well-known Target payment systems hack in 2013 (involving remotely-accessible HVAC systems) as an example. Ignoring minor vulnerabilities can have devastating effects, especially for businesses. # **Encrypt, encrypt, encrypt** Some 64% of businesses have implemented additional encryption as an extra layer of security for their cloud service. A similar percentage also employ third-party software or security management, on-site inspections and tests, and regular audits. Encryption converts readable information into a code to prevent unauthorized access. Only he who has the decryption key can unscramble the data and make it readable again. But, for all its advantages, encryption is also the preferred weapon of hackers today, as evidenced by the many ransomware variants out there. Still, simply by following the guidelines of the [Cloud Security Alliance](https://cloudsecurityalliance.org/), and by complying with regulations like the GDPR and HIPPA, companies worldwide will already have done much to secure their intellectual property and customer data. Adding a new layer of encryption, or employing a dedicated cloud security solution further ensures safety against cyber-threats like the widely publicized WannaCry and GoldenEye/Petya attacks. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Security Issues and Risks of Cloud Computing for SMBs](https://businessinsights.bitdefender.com/security-issues-and-risks-of-cloud-computing-for-smbs?hsLang=en-us) ### [A Comprehensive Guide to CIEMs: Mastering Cloud Security in Limited Resource Settings](https://businessinsights.bitdefender.com/a-comprehensive-guide-to-ciems-mastering-cloud-security-in-limited-resource-settings?hsLang=en-us) ### [Students to Demonstrate Cybersecurity Skills in Annual Hacker Contest](https://businessinsights.bitdefender.com/students-to-demonstrate-cybersecurity-skills-in-annual-hacker-contest?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "datePublished" : "2017-07-20T12:00:16.000Z", "headline" : "Smart business – companies invest heavily in cloud security as cyber-threat grows", "image" : [ "https://businessinsights.bitdefender.com/hubfs/dollar-1071788_960_720.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/companies-invest-heavily-cloud-security", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```