{"id":59639,"date":"2025-11-06T17:00:00","date_gmt":"2025-11-06T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=143346"},"modified":"2025-11-06T17:00:00","modified_gmt":"2025-11-06T17:00:00","slug":"new-idc-research-highlights-a-major-cloud-security-shift","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/new-idc-research-highlights-a-major-cloud-security-shift\/","title":{"rendered":"New IDC research highlights a major cloud security shift"},"content":{"rendered":"
<\/div>\n

Cloud security is at a tipping point. While moving to the cloud powers both growth and speed for organizations, it can also bring new risks. According to IDC\u2019s latest research, organizations experienced an average of nine cloud security incidents in 2024, with 89% reporting a year-over-year increase. That\u2019s not a typo. And it\u2019s not just a statistic\u2014it\u2019s a wake-up call. As cyberthreats grow more sophisticated and cloud environments more complex, security leaders must rethink their strategies to stay ahead of threat actors.<\/p>\n

But what actually needs to change? And what should you be doing about it? Read IDC\u2019s latest research, The Next Era of Cloud Security: Cloud-Native Application Protection Platform and Beyond<\/a>, to dive deep into the future of cloud security\u2014and what it means for chief information security officers (CISOs), security architects, and product leaders.<\/p>\n

Five IDC insights into the evolving cloud security landscape<\/h2>\n

1. One platform is quietly becoming a top investment<\/strong><\/h3>\n

IDC research found that cloud-native application protection platforms (CNAPPs)<\/a> are now one of the top three security investments for 2025. Why? Because they\u2019re solving problems that legacy tools can\u2019t, protecting cloud-native applications throughout their lifecycle\u2014further reinforcing the importance of ecosystems, consolidation, and more.<\/p>\n

2. The role of the CISO is evolving to align security with business priorities<\/strong><\/h3>\n

In 37% of organizations, CISOs now have ownership over cloud security<\/a> management. IDC calls them \u201c3D CISOs.\u201d They don\u2019t just manage risk\u2014they drive business outcomes and digital innovation. These leaders are reshaping how security is embedded across the organization, from DevOps pipelines to boardroom conversations. IDC\u2019s whitepaper details the expanded and evolving role of CISOs and their impact on improving the overall security posture of organizations.   <\/p>\n

3. Tool sprawl increases costs and introduces vulnerabilities<\/strong><\/h3>\n

Organizations are grappling with tool sprawl, using an average of 10 cloud security tools and often adding more each year. This complexity\u2014driven by fragmented platforms, regulatory requirements, and integration challenges\u2014creates blind spots and slows response times. But stopping the sprawl isn\u2019t easy. It requires a deliberate approach, anchored in a unified security platform that simplifies operations and strengthens protection. IDC research underscores this, highlighting how greater visibility and tool consolidation drive measurable gains in efficiency and cost management.<\/p>\n

4. Generative AI is already changing the game<\/strong><\/h3>\n

Forget the hype. Generative AI is delivering real value for cloud security\u2014from automated threat detection to faster incident response, and more. IDC\u2019s data shows how security teams are using generative AI, including how it can enhance the capabilities of security analysts and allow them to focus on more complex tasks.<\/p>\n

5. The future is integrated and autonomous<\/strong><\/h3>\n

Security leaders are moving toward unified security operations (SecOps) platforms that combine cloud-native protection, threat intelligence, and AI-powered automation. Some are exploring the new frontier of agentic AI\u2014autonomous systems that can detect, isolate, and remediate known cyberthreats without human intervention. The IDC whitepaper explores what this future looks like\u2014and how close we really are.<\/p>\n

Why mitigating security risk matters now more than ever <\/h2>\n

Cloud security is a critical business imperative. As IDC puts it, \u201cSecurity risk is business risk.\u201d The decisions you make today will shape your organization\u2019s resilience, agility, and ability to innovate tomorrow. Whether you\u2019re a CISO or a cloud architect, this research offers a roadmap for navigating what\u2019s next. It\u2019s not just about buying new tools. It\u2019s about building a smarter, more unified approach to cloud security.<\/p>\n

Ready to see what\u2019s inside?<\/h2>\n

71% of organizations surveyed believe that over the next two years, it would be beneficial for their organization to invest in a unified SecOps platform<\/a> that includes technologies such as extended detection and response (XDR), endpoint detection and response (EDR), security information and event management (SIEM), CNAPP and cloud security, generative AI, and threat intelligence. But that\u2019s easier said than done. And in this post, we\u2019ve only scratched the surface. The full IDC study covers:<\/p>\n