--- title: Mitigating Cloud Computing Security Risks description: What are the top 5 Cloud Computing Risks and what is the best mitigation strategy? Learn more from comforte. image: https://insights.comforte.com/hubfs/blog%20header%20cloud%20security-1.jpeg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![cloud security](https://insights.comforte.com/hubfs/blog%20header%20cloud%20security-1.jpeg)](https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security) [Erfan Shadabi](https://insights.comforte.com/author/erfan-shadabi) l Sep 20, 2022 l [Data Protection](https://insights.comforte.com/tag/data-protection), [Cloud Computing](https://insights.comforte.com/tag/cloud-computing) # Mitigating Cloud Computing Security Risks Cloud computing is the driving force behind digital transformation. During the pandemic it empowered organizations to rapidly support home working and find new ways to reach their customers. Today the drivers have shifted slightly, but it’s no less important. Cloud-based platforms, infrastructure, and applications are now more likely to be deployed to drive cost efficiencies, streamline business processes, and improve resilience against stiffening economic headwinds. Yet as more business-critical information is transferred to cloud data stores, the cloud computing risks, such as theft and extortion grows. This is where it makes sense to cut through the complexity of cloud security and focus on what’s most important—by protecting the data itself. ## The top five cloud security threats According to [one estimate](https://www.ibm.com/downloads/cas/3R8N1DZJ), 45% of data breaches last year occurred in the cloud, at a cost of over $5m each in the public cloud, versus an average of $4.4m per company across all environments. The same study calculates that cloud migration can add $284,000 to an organization’s average breach costs. These are figures which should concern any boardroom. So where are cloud security threats most pronounced? ### So where are cloud security threats most pronounced?  **Misconfiguration** is reckoned by the [US government](https://media.defense.gov/2020/Jan/22/2002237484/-1/-1/0/CSI-MITIGATING-CLOUD-VULNERABILITIES_20200121.PDF) to be the most prevalent cloud vulnerability. Exacerbated by ever-evolving cloud service provider (CSP) functionality and a lack of in-house skills in customer organizations, it can leave data stores completely exposed to threat actors or accidental leaks. Cloud misconfigurations now account for 15% of breaches, according to [IBM](https://www.ibm.com/downloads/cas/3R8N1DZJ). **IT complexity** is a fact of life in the cloud. [Research tells us](https://www.flexera.com/about-us/press-center/flexera-releases-2021-state-of-the-cloud-report) that 92% of enterprises have a multi-cloud strategy, and 80% favor a hybrid cloud approach. That creates multiple discrete computing environments, with different security and policy requirements. This kind of complexity is the enemy of effective risk control, and can be a major driver of misconfiguration. **Software supply chains** are critical to the DevOps teams building the cloud applications that power modern businesses. Yet most of these teams use third-party open source components which are often riddled with malware and vulnerabilities. The average application development project contains 49 vulnerabilities, according to [one estimate](https://resources.snyk.io/state-of-open-source-security-report-2022). Another report claims to have recorded a [650% increase in bad actors](https://www.sonatype.com/hubfs/Q3%202021-State%20of%20the%20Software%20Supply%20Chain-Report/SSSC-Report-2021_0913_PM_2.pdf?hsLang=en-us) injecting vulnerabilities into upstream code in order to exploit them before they are discovered. **Poor access controls** such as weak passwords or non-existent multi-factor authentication can allow hackers to gain unauthorized access to cloud data and networks. Attackers might use previously breached or phished credentials, or simply brute force them using automated tools. **Insecure APIs** can provide a direct line to sensitive business data. They may be the CSP’s APIs or business APIs deployed in the cloud. But misconfiguration and inadequate authentication/authorization are usually to blame. The result: anyone with an internet connection could hijack these communication links to reach critical data. ## Support the journey by minimising cloud security risks Cloud security is tough. Cloud environments host a large, distributed, and growing attack surface which cybersecurity teams often don’t have the skills, tools. or visibility to protect. Some organizations are [confused about their role in the shared responsibility model](https://insights.comforte.com/you-are-responsible-for-data-security-in-the-cloud?hsLang=en) for cloud security, while others might try and apply ineffective legacy controls. A surer way to mitigate cloud computing security risks would be to focus on what really matters: the data itself. This is what threat actors are after when they breach the cloud network, so this is where protective efforts should concentrate. It’s what we call “data-centric security”: the application of strong encryption or tokenization to ensure that even if data is accessed, read, or exfiltrated, it is useless to the attacker. ### Beyond these basic tenets, organizations should look for data-centric security providers that offer: - Support for all major cloud platforms - Continuous discovery, classification, and protection across the entire cloud environment - The scalability to support larger data volumes as the business grows - Format-preserving encryption, so data is protected but can still be used for things like cloud-based analytics The best [data-centric security solutions](https://www.comforte.com/solutions/cloud) maximize protection and minimize cyber risk across the cloud without impacting data utility.  --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/mitigating-cloud-cyber-risk-with-data-centric-security&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## Secure sensitive data in your cloud ecosystem Secure all your sensitive data and information intended for cloud destinations without disrupting your business processes and workflows. Download our fact sheet to learn more: [![Download Fact Sheet](https://no-cache.hubspot.com/cta/default/4026697/7e12814a-a629-4235-b733-6b97e5ef95db.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/7e12814a-a629-4235-b733-6b97e5ef95db) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026