According to SailPoint’s 7th Annual Market Pulse Survey, companies around the world have reason to be worried about the use of cloud applications to share mission-critical information: 1 in 5 employees has uploaded proprietary corporate data to a cloud application, such as Dropbox or Google Docs, with the specific intent of sharing it outside of the company. The survey also found a clear disconnect between cloud usage across the business and existing IT controls with an alarming 66% of users able to access those cloud storage applications after leaving their last job. And, despite that 60% of employees stated they were aware that their employer strictly forbids taking intellectual property after leaving the company, 1 in 4 admitted they would take copies of corporate data with them when leaving a company.
SailPoint’s 2014 Market Pulse Survey was designed to measure employee attitudes toward protecting corporate digital assets. The company commissioned Vanson Bourne, an independent research firm, to interview 1,000 office workers at large companies with at least 3,000 employees across Australia, France, Germany, the Netherlands, the United Kingdom and the United States. With only 28% of survey respondents stating that corporate policies pay close attention to who is granted access to mission-critical SaaS apps, the survey showcases the complex challenge companies face when trying to manage applications outside of IT’s control, as well as the risk of massive security breaches and internal theft faced by companies.
The Market Pulse Survey focused on specific regions to help companies gain a better picture of the progress of security controls around sensitive information. The key findings of employee actions around the globe include:
- Employees who have uploaded a sensitive document to share outside their companies via a cloud application (such as DropBox, Box or Google Docs): Australia (11%); France (20%); Germany (17%); Netherlands (13%); United Kingdom (18%); and United States (22%).
- Employees who have purchased and/or deployed a cloud application (such as Salesforce.com, Concur, Workday, DropBox, DocuSign, etc.) without the help of IT: Australia (14%); France (14%); Germany (16%); Netherlands (18%); United Kingdom (21%) and United States (24%).
- Employees who are aware of corporate policy that pays close attentions to who is granted access to cloud applications with mission-critical data: Australia (24%); France (27%); Germany (28%); Netherlands (24%); United Kingdom (30%) and United States (29%).
- Employees who were able to access corporate data via cloud storage applications (including Dropbox and Google Docs) after they left their companies: Australia (56%); France (70%); Germany (70%); Netherlands (61%); United Kingdom (61%) and United States (69%).
- Employees who are aware of corporate policies against taking intellectual property when they leave their companies: Australia (68%); France (49%); Germany (58%); Netherlands (57%); United Kingdom (60%) and United States (61%).
- Employees who admitted they would take any corporate data when they left their jobs: Australia (21%); France (24%); Germany (16%); Netherlands (15%); United Kingdom (26%) and United States (27%).
“The survey results are an eye opener of how cloud applications have made it easy for employees to take information with them when they leave a company,” said Kevin Cunningham, founder and president at SailPoint. “With almost 20 percent of employees purchasing a cloud application for work without involving the IT departments, combined with the ability for employees to use consumer cloud apps for work activities, it’s virtually impossible to manage access to applications and the sharing of mission-critical data. In order to establish control over this ‘bring your own app’ phenomenon, it’s critical to provide specific incentives for end users to follow corporate policy such as offering users a seamless login experience in exchange for using a central access control framework.”
