SANS Report Highlights Cloud Security Maturity Gap and Misconfiguration Risks
SC Media, Thursday, October 22nd, 2026
SANS: 93% run production workloads in cloud, but only 40% call their security advanced; misconfiguration drives 45% of critical incidents.
A SANS Institute survey of 400 professionals finds a persistent cloud security maturity gap: while 93% of organizations run production workloads in the cloud, only 40% consider their security strategy advanced.
Misconfiguration causes 45% of critical incidents, more than double credential theft, and 49% need more than 24 hours to remediate critical gaps.
Although 70% raised security budgets, tool sprawl persists and only 21% use a consolidated CNAPP.
SANS instructor Serge Borso blames fragmented management, and experts recommend policy checks in infrastructure-as-code pipelines, tool consolidation and extending zero trust beyond initial authentication.