Report by Thales

2025 Cloud Security Study

13 FINDINGSPublished Jun 30, 2025
View Original Report →

Key Findings

Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.

CloudSecurity priorities

17% of respondents identified cloud security as their number one priority.

CloudSecurity priorities

55% of respondents report cloud environments are more complex to secure than on-premises infrastructure. This represents a 4-percentage-point increase from last year.

Cloud

57% of organisations use five or more encryption key managers.

CloudToolsEncryption

Enterprises now use an average of 85 SaaS applications, contributing to security tool sprawl.

CloudSaaSEnterpriseToolsTool sprawl

Four of the top five most targeted assets in reported attacks are cloud-based.

Cloud

Over half (52%) of respondents are prioritising AI security investments over other security needs.

CloudAIInvestment

68% of respondents reported a rise in access-based attacks.

Cloud

61% of organisations use five or more tools for data discovery, monitoring, or classification.

CloudTools

85% of organisations say at least 40% of their cloud data is sensitive.

CloudCloud dataSensitive data

Over half of cloud data is now classified as sensitive.

CloudCloud dataSensitive data

Only 66% of organisations have implemented multifactor authentication (MFA)

CloudMFA

The average number of public cloud providers per organisation has risen to 2.1.

Cloud