News Feed Item

Fugue Survey Finds State of Cloud Infrastructure Governance a Sign of More Exploits to Come

Fugue, the company automating cloud infrastructure governance and policy-as-code to deliver fast, secure and compliant cloud operations, today released the results of its State of Cloud Infrastructure Governance 2017 Survey. The survey of more than 300 IT professionals, conducted by Propeller Insights in October 2017, revealed that the current state of cloud infrastructure governance is extremely poor. In spite of an ever-increasing number of security breaches, 62 percent rely on manual reviews before infrastructure is provisioned, and 42 percent have no cloud infrastructure governance processes in place. Additionally, 28 percent of IT professionals aren’t confident their cloud infrastructure is secure.

This press release features multimedia. View the full release here: http://www.businesswire.com/news/home/20171207005227/en/

Fugue State of Infrastructure Governance 2017 (Graphic: Fugue)

Fugue State of Infrastructure Governance 2017 (Graphic: Fugue)

“The cloud has completely transformed IT. Infrastructure has been largely ‘abstracted away,’ but it’s still there, and it’s often ungoverned and insecure,” said Josh Stella, CEO of Fugue. “The cloud can be as secure—or even more secure—than traditional data centers. But relying on paper-based checklists and manual reviews doesn’t scale. Only automated solutions can keep up with the pace of change that is outstripping human ability to govern infrastructure and operations.”

Cloud Infrastructure Governance Sorely Lacking

The vast majority of businesses are increasingly reliant on the cloud: 41 percent report managing multiple cloud-based systems with significant use in production; 23 percent are using cloud at scale with significant infrastructure automation; and another 24 percent are in the process of expanding their use, with some production workloads under limited infrastructure automation.

But when it comes to cloud infrastructure security, confidence is notably lacking: 25 percent of IT professionals are only “somewhat confident” that their infrastructure is secure against breaches. What’s more, 42 percent of organizations have no cloud infrastructure governance tools and processes in place, while 68 percent rely on paper-based checklists for infrastructure policies. In addition, 31 percent of application developers either don’t understand infrastructure risk or don’t know what to do to mitigate it.

When it comes to ensuring compliance for infrastructure provisioning and ongoing operations:

  • 62 percent rely on manual reviews of infrastructure change
  • 60 percent rely on manual remediation for policy violations and configuration drift
  • 17 percent don’t validate compliance before infrastructure is provisioned

When breaches occur, the C-suite is responsible, according to the IT professionals surveyed. When asked who should be held accountable when a data breach occurs, nearly half (47 percent) of IT professionals said the CEO, followed by:

  • CIO — 32 percent
  • VP of Cloud — 31 percent
  • CTO — 23 percent
  • Cloud Architect — 22 percent

True DevSecOps Collaboration Is Attainable

The number one reason IT professionals say their organizations haven’t fully implemented infrastructure governance is that security and compliance slow down innovation (55 percent).

Another 44 percent say they struggle to keep track of all the infrastructure they have running, and an equal number struggle to identify and respond to infrastructure risks. More than a third (39 percent) cite the lack of collaboration between security, compliance, and IT.

“Optimized infrastructure governance is attainable but not with manual reviews and remediation, which are slow and prone to error,” added Stella. “What companies need is a holistic solution like Fugue, where true DevSecOps collaboration is focused on infrastructure and policy-as-code libraries that are vended across the organization and where the system that provisions is the same system that monitors and remediates drift and policy violations. This provides a single source of truth and trust for infrastructure state. And it means total visibility into cloud infrastructure. Organizations can now go fast, see everything, and get enterprise cloud right from the start—and ensure things stay that way.”

About Fugue

Fugue helps enterprises get cloud right. By automating the provisioning and control of policy-driven workloads, Fugue ensures that cloud infrastructure always conforms to corporate rules, regulatory policies, and secure IT practices, while providing visibility into workload operations. The result? A cloud that always operates exactly as intended. If anything drifts, Fugue fixes it. Immediately. Automatically. Fugue provides developers the freedom to innovate fast and with confidence that the infrastructure is always guarded, resilient, and secure. The company has eight patents granted and 16 pending. Privately held and headquartered in Maryland, Fugue’s investors include New Enterprise Associates, Future Fund, Maryland Venture Fund, and Core Capital Partners. Gartner named Fugue a Cool Vendor in Cloud Computing 2017.

To learn more about migrating your existing infrastructure to Fugue, visit www.fugue.co.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
Widespread fragmentation is stalling the growth of the IIoT and making it difficult for partners to work together. The number of software platforms, apps, hardware and connectivity standards is creating paralysis among businesses that are afraid of being locked into a solution. EdgeX Foundry is unifying the community around a common IoT edge framework and an ecosystem of interoperable components.
In his session at 21st Cloud Expo, Carl J. Levine, Senior Technical Evangelist for NS1, will objectively discuss how DNS is used to solve Digital Transformation challenges in large SaaS applications, CDNs, AdTech platforms, and other demanding use cases. Carl J. Levine is the Senior Technical Evangelist for NS1. A veteran of the Internet Infrastructure space, he has over a decade of experience with startups, networking protocols and Internet infrastructure, combined with the unique ability to it...
"MobiDev is a software development company and we do complex, custom software development for everybody from entrepreneurs to large enterprises," explained Alan Winters, U.S. Head of Business Development at MobiDev, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
Vulnerability management is vital for large companies that need to secure containers across thousands of hosts, but many struggle to understand how exposed they are when they discover a new high security vulnerability. In his session at 21st Cloud Expo, John Morello, CTO of Twistlock, addressed this pressing concern by introducing the concept of the “Vulnerability Risk Tree API,” which brings all the data together in a simple REST endpoint, allowing companies to easily grasp the severity of the ...
Agile has finally jumped the technology shark, expanding outside the software world. Enterprises are now increasingly adopting Agile practices across their organizations in order to successfully navigate the disruptive waters that threaten to drown them. In our quest for establishing change as a core competency in our organizations, this business-centric notion of Agile is an essential component of Agile Digital Transformation. In the years since the publication of the Agile Manifesto, the conn...
In his session at 21st Cloud Expo, James Henry, Co-CEO/CTO of Calgary Scientific Inc., introduced you to the challenges, solutions and benefits of training AI systems to solve visual problems with an emphasis on improving AIs with continuous training in the field. He explored applications in several industries and discussed technologies that allow the deployment of advanced visualization solutions to the cloud.
Enterprises are adopting Kubernetes to accelerate the development and the delivery of cloud-native applications. However, sharing a Kubernetes cluster between members of the same team can be challenging. And, sharing clusters across multiple teams is even harder. Kubernetes offers several constructs to help implement segmentation and isolation. However, these primitives can be complex to understand and apply. As a result, it’s becoming common for enterprises to end up with several clusters. Thi...
While some developers care passionately about how data centers and clouds are architected, for most, it is only the end result that matters. To the majority of companies, technology exists to solve a business problem, and only delivers value when it is solving that problem. 2017 brings the mainstream adoption of containers for production workloads. In his session at 21st Cloud Expo, Ben McCormack, VP of Operations at Evernote, discussed how data centers of the future will be managed, how the p...
"NetApp is known as a data management leader but we do a lot more than just data management on-prem with the data centers of our customers. We're also big in the hybrid cloud," explained Wes Talbert, Principal Architect at NetApp, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
"Space Monkey by Vivent Smart Home is a product that is a distributed cloud-based edge storage network. Vivent Smart Home, our parent company, is a smart home provider that places a lot of hard drives across homes in North America," explained JT Olds, Director of Engineering, and Brandon Crowfeather, Product Manager, at Vivint Smart Home, in this SYS-CON.tv interview at @ThingsExpo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
The question before companies today is not whether to become intelligent, it’s a question of how and how fast. The key is to adopt and deploy an intelligent application strategy while simultaneously preparing to scale that intelligence. In her session at 21st Cloud Expo, Sangeeta Chakraborty, Chief Customer Officer at Ayasdi, provided a tactical framework to become a truly intelligent enterprise, including how to identify the right applications for AI, how to build a Center of Excellence to oper...
"IBM is really all in on blockchain. We take a look at sort of the history of blockchain ledger technologies. It started out with bitcoin, Ethereum, and IBM evaluated these particular blockchain technologies and found they were anonymous and permissionless and that many companies were looking for permissioned blockchain," stated René Bostic, Technical VP of the IBM Cloud Unit in North America, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Conventi...
"Akvelon is a software development company and we also provide consultancy services to folks who are looking to scale or accelerate their engineering roadmaps," explained Jeremiah Mothersell, Marketing Manager at Akvelon, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
Coca-Cola’s Google powered digital signage system lays the groundwork for a more valuable connection between Coke and its customers. Digital signs pair software with high-resolution displays so that a message can be changed instantly based on what the operator wants to communicate or sell. In their Day 3 Keynote at 21st Cloud Expo, Greg Chambers, Global Group Director, Digital Innovation, Coca-Cola, and Vidya Nagarajan, a Senior Product Manager at Google, discussed how from store operations and ...
"Infoblox does DNS, DHCP and IP address management for not only enterprise networks but cloud networks as well. Customers are looking for a single platform that can extend not only in their private enterprise environment but private cloud, public cloud, tracking all the IP space and everything that is going on in that environment," explained Steve Salo, Principal Systems Engineer at Infoblox, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Conventio...