Explore the 2025 Cloud Security Study with new insights from 3,000 respondents on the latest cloud security trends and challenges.
#2025CloudSecurityStudy
CLOUD SECURITY STUDY
Securing a Hybrid and Multicloud World
cpl.thalesgroup.com
Table of Contents
03 04 06 08 10 11 13 14 15
Executive Summary
Key Findings
Cloud Remains at the Forefront of Security Considerations
Complexity is the Enemy of Cloud Security
Security Tool Sprawl
Attacks Target Cloud Resources
Digital Sovereignty in a Hybrid World
The Liability that is the Human in the Loop
AppSec and DevOps Security and the Cloud
17 18
Progress to a More Secure Cloud
About this Study
2025 Thales Cloud Security Study #2025CloudSecurityStudy
Executive Summary
Cloud-based services have become a common and critical part of enterprise infrastructure, but organizations still struggle to secure them. This latest edition of the Thales Cloud Security Study examines organizations’ challenges, successes and strategic plans related to their cloud-based infrastructure and services. While most enterprises have integrated cloud resources into their operations, many need to improve their ability to secure these environments and the data they contain. Despite cloud security’s status as respondents’ top security spending priority, most organizations require significant advancement in their cloud security posture and operations. The rapid push to support AI initiatives, which are often heavily cloud-dependent, further intensifies the urgency, as effective and efficient data protections are required to deliver on the promise of AI. This year’s edition of the Thales Cloud Security Study includes insights from nearly 3,200 respondents across 20 countries, capturing executive, managerial and practitioner perspectives on the evolving cloud security landscape. As cloud infrastructure continues to expand, cloud security remains the top security spending priority for organizations worldwide. However, the growing complexity of hybrid and multicloud environments is placing increasing strain on security teams. A rising number of respondents report challenges in securing their cloud assets, an issue that is further amplified by the demands of AI projects that often operate in the cloud and require access to large volumes of sensitive data. Compounding this issue, four of the top five targeted assets in reported attacks are cloud-based. In this environment, strengthening cloud security and streamlining operations are essential steps toward enhancing overall security effectiveness and resilience.
Source: 2025 Cloud Security Study custom survey from S&P Global Market Intelligence 451 Research, commissioned by Thales.
Sponsored by
2025 Thales Cloud Security Study
3
Key Findings Cloud Remains at the Forefront of Security Considerations
64 % 8 %
52 % 54 %
of all enterprises regard cloud security as a pressing security discipline. of respondents encrypt 80% or more of their cloud data.
indicated that AI security spending is eating into or taking over existing
security budgets. of data in the cloud is sensitive, up from 47% last year.
Attacks Target Cloud Resources cited an increase in direct attacks to compromise infrastructure. 54 %
The Liability that is the Human in the Loop
68 %
cited credential and stolen secrets as the fastest-growing cloud infrastructure attack tactics.
Download the full report and read more about Securing a Hybrid and Multicloud World
© Thales - June 2025•GHv6
Page 1 Page 2 Page 3 Page 4 Page 5Made with FlippingBook interactive PDF creator