SUSE report highlights APAC cloud security challenges 2024

SUSE has published its inaugural "Securing the Cloud" APAC 2024 trend report, highlighting cloud security challenges in the Asia-Pacific region.

The report surveyed 900 IT leaders across China, Singapore, India, Japan, South Korea, Indonesia, and Australia to explore concerns about cloud security and the influence of Generative AI (Gen AI) and Edge computing on the sector.

One of the prominent findings indicates that 57% of IT decision-makers expressed worries over privacy and data security concerning GenAI within cloud security frameworks. This concern underscores the increasing complexity and potential vulnerabilities introduced by the rise of artificial intelligence technologies.

According to the report, the prevalence of security incidents remains high. Over the past 12 months, 64% of teams experienced a cloud security incident, while 62% reported an edge security breach. These figures highlight the persistent nature of security challenges within the region.

Despite the continual security incidents reported, there is significant potential for increased cloud adoption. An overwhelming 84% of surveyed IT professionals indicated a willingness to migrate more workloads to the cloud and edge environments provided there is a guarantee of data safety, pointing to security assurances as critical for future cloud migration efforts.

Ransomware attacks emerged as the primary security concern, cited by 34% of respondents. This was followed closely by worries over zero-day vulnerabilities at 27%, and the visibility of sensitive data in the cloud, which concerned 23% of surveyed IT professionals.

Supply chain security is also a focus area, with 33% of IT leaders planning to review their software supply chain to enhance security measures. There are varying security priorities across different markets, with distinctions in how these threats are perceived and managed.

Vishal Ghariwala, Chief Technology Officer for SUSE Asia Pacific, commented on the findings: "As the report highlights, the growing complexity of the digital landscape, fueled by rapid changes brought by GenAI and edge computing, is creating new and unprecedented security challenges for organisations across APAC.

"This underscores the need for continuous investment and tailored security strategies in the region. We also saw how regulatory and technological differences are influencing how security risks are perceived and prioritised. SUSE remains committed to supporting businesses with tailored open source solutions to ensure security in this new digital landscape.

"By leveraging open source, organisations can be on the front foot to protect and advance their cloud security practices across the dynamic market of APAC."

The report also addressed Gen AI's emergence as a critical concern across APAC countries. While this technology poses significant security risks, opinions on its threats diverged, with 25% of Japanese stakeholders seeing no related security risks. This reflects differing perceptions across the region, potentially influenced by national or industry-specific contexts.

The report highlighted specific market-driven concerns regarding cybersecurity. Privacy and data security emerged as primary threats in Indonesia, Singapore, China, South Korea, and Australia, while AI-powered cyberattacks worried stakeholders in India and Japan.

A noteworthy observation is the higher level of awareness among younger IT professionals regarding GenAI-related security risks. Only 4% of respondents between the ages of 18-54 were unaware of these risks, compared to 10% of individuals over 55 years of age.

Average incident rates for cloud-related security breaches stood at 2.6 over the last year, with India and Indonesia being most affected. Current security practices vary, with the employment of security automation, DoS or DDoS protection, and cloud solutions being common strategies.

Differing priorities in edge security reveal geographic variation. Chinese IT stakeholders focus on integrating edge solutions with existing IT frameworks and ensuring automated security management, while Singapore emphasises zero-trust security measures.

Moreover, in-house auditing of vendor software stands out as a fundamental measure for addressing supply chain risks. One in four IT leaders considers government-recognised security certifications crucial in the coming year.

The report encapsulates the divergent security challenges APAC countries face amid cloud and edge technology adoption, highlighting the importance of addressing threats from ransomware, privacy issues linked with generative AI, and AI-powered cyberattacks.