Cloud providers aren't much concerned with security.

• Position: STUDY

A Ponemon Institute study sponsored by CA Technologies and released in April reveals that security is not a high priority for cloud computing providers.

The "Security of Cloud Computing Providers" study polled 103 cloud service providers in the United States and 24 in six European countries. Sixty-five percent of those providers surveyed deploy their IT resources in the public cloud environment, 18% deploy in the private cloud, and 18% use hybrid solutions.

The study revealed that most cloud computing providers aren't all that concerned with their customers' data security--and even consider it the customers' responsibility to safeguard whatever data they store in the cloud.

The study's "key" finding is eye-opening: "[P]roviders of cloud computing resources are not focused on security in the cloud. Rather, their priority is delivering the features their customers want such as low-cost solutions with fast deployment that improves customer service and increases the efficiency of the IT function. As a result, providers in our study conclude that they cannot warrant or provide complete assurance that their products or services are sufficiently secure."

The survey also found that:

* Most cloud computing providers surveyed said they don't believe that their organization views the security of their cloud services as a competitive advantage. Further, they do not believe their products or services substantially protect and secure customers' confidential or sensitive information. Sixty-two percent of U.S. and 63% of European providers are not confident or are unsure that cloud applications are sufficiently secured.

* The majority of cloud providers said it is their customers' responsibility to secure the cloud. They also said their systems and applications are not always evaluated for security threats before being deployed to customers.

* Cloud customers beware--79% of U.S. and European cloud computing technology providers allocate 10% or less of their operational resources to security, and most are not confident that customers' security requirements are being met.

* Cloud providers said the main reasons customers purchase cloud resources are lower cost and faster deployment of applications. Improved security...