Skip to main content

IaaS visibility and access management could be key to stopping cyberattacks

(Image credit: Image source: Shutterstock/jijomathaidesigners)

Almost half of the world’s organizations have suffered a cyberattack due to poor infrastructure-as-a-service (IaaS) visibility and access management (opens in new tab).

This is according to a new report from SailPoint, which claims that businesses are failing to prioritize proper identity governance controls for IaaS platforms as they would for other parts of the business.

Making matters worse, three quarters of businesses use more than one IaaS provider and almost half use three or more. This practice has become extremely common during the Covid-19 pandemic, as businesses rushed to shift into the cloud to minimize costs and provide ongoing business flexibility.

In an attempt to tame unwieldy IaaS environments, businesses start using more tools, which introduces complications in the context of access management and cybersecurity.

With a third failing to regularly review governance, businesses aren’t paying enough attention to who can access what, SailPoint claims.

“Understanding who exactly has access to what, and when, is critical in order to protect the enterprise network against trespassers. IaaS might be a newer area of the business, but the rule is just as critical here,” said Ben Bulpett, EMEA Director at SailPoint.

“IaaS is a business-critical technology that speeds up and enables today’s digital organizations; however, without proper governance, this can represent a significant cybersecurity risk.”

Sead Fadilpašić is a freelance tech writer and journalist with more than 17 years experience writing technology-focussed news, blogs, whitepapers, reviews, and ebooks. And his work has featured in online media outlets from all over the world, including Al Jazeera Balkans (where he was a Multimedia Journalist), Crypto News, TechRadar Pro, and IT Pro Portal, where he has written news and features for over five years. Sead's experience also includes writing for inbound marketing, where he creates technology-based content for clients from London to Singapore. Sead is a HubSpot-certified content creator.