CISOs and other cyber-risk professionals responsible for cloud security face difficult challenges and new opportunities. Data breaches are pervasive and have become a societal norm. The sprawling IT estate is difficult to inventory, analyze for risk, and prioritize remediation. Lack of standard expectations and transparency for cloud service providers have left CISOs scrambling to drive cloud security improvements largely on their own. However, several new forces emerged this year that should help CISOs chart a course for improved cloud security in 2025.
This report is intended for financial services CISOs and other leaders responsible for designing and delivering cloud security solutions. It is based on results from a Datos Insights survey of 60 cyber risk leaders from North American FIs in August 2024, a Datos Insights survey of 20 cyber risk leaders from the Financial Crimes and Cybersecurity Forum in August 2024, and a Datos Insights survey of 20 FI and insurer cyber executive council members in August and September 2024.
Clients of Datos Insightsโ Cybersecurity service can download this report.
This report mentions Akamai, Amazon/AWS, Capital One, Cequence, Entrust, F5, Google, HYPR, JupiterOne, Microsoft, OctoXLabs, Okta, Ping Identity, Securiti.ai, Sentra, Sperion, ThreatAware, Veronis, Wallarm, and 1Kosmos.
About the Author
Neill Campbell
Neill Campbell is a Strategic Advisor in the Cybersecurity practice, with over 15 yearsโ experience in operations and cybersecurity. Neill began quantifying technology risk at Bank of America, leading a team charged with delivering a suite of technology risk predictive models, and honed his expertise at Fiserv, where he spearheaded the expansion of a cybersecurity suite. At Fiserv, Neill introduced...
Other Authors
John Horn
John Horn leads the Cybersecurity practice at Datos Insights, which provides valuable cybersecurity and identity research, insights, and advisory services to financial services firms.ย In addition to leading a team of Strategic Advisors, John functions as a distinguished industry expert and critical thinker within the rapidly evolving domains of identity, cybersecurity, and risk.ย His coverage areas include identity security, identity and access...