There is still a way to go to ensure data security in the cloud, with 97% of organisations globally having gaps in their cloud risk management plan

To what extent has your organisation addressed the following challenges with your cloud service provider(s)?

Implemented a plan and continually updated

Implemented a risk management plan

Yet to address challenges

Disaster recovery and back-up

38%

30%

31%

Shared responsibility with the cloud service provider

32%

33%

35%

Discovery/records management

34%

30%

36%

Contract negotiation with cloud service provider

32%

32%

36%

Third-party risk

33%

31%

36%

Data mapping/data use issues

33%

30%

38%

Concentration risk

28%

31%

41%

Fragmented regulations

27%

31%

42%

Inability to grow in-house talent in cloud disciplines

(eg, cloud engineering)

26%

31%

43%

Implemented a plan and continually updated

Implemented a risk management plan

Yet to address challenges

Disaster recovery and back-up

38%

30%

31%

Shared responsibility with the cloud service provider

32%

33%

35%

Discovery/records management

34%

30%

36%

Contract negotiation with cloud service provider

32%

32%

36%

Third-party risk

33%

31%

36%

Data mapping/data use issues

33%

30%

38%

Concentration risk

28%

31%

41%

Fragmented regulations

27%

31%

42%

Inability to grow in-house talent in cloud disciplines

(eg, cloud engineering)

26%

31%

43%

Implemented a plan and continually updated

Implemented a risk management plan

Yet to address challenges

Disaster recovery and back-up

38%

30%

31%

Shared responsibility with the cloud service provider

32%

33%

35%

Discovery/records management

34%

30%

36%

Contract negotiation with cloud service provider

32%

32%

36%

Third-party risk

33%

31%

36%

Data mapping/data use issues

33%

30%

38%

Concentration risk

28%

31%

41%

Fragmented regulations

27%

31%

42%

Inability to grow in-house talent in cloud disciplines (eg, cloud engineering)

26%

31%

43%

Implemented a risk management plan

Yet to address challenges

Implemented a plan and continually updated

Disaster recovery and back-up

38%

30%

31%

Shared responsibility with the cloud service provider

32%

33%

35%

Discovery/records management

34%

30%

36%

Contract negotiation with cloud service provider

32%

32%

36%

Third-party risk

33%

31%

36%

Data mapping/data use issues

33%

30%

38%

Concentration risk

28%

31%

41%

Fragmented regulations

27%

31%

42%

Inability to grow in-house talent in cloud disciplines (eg, cloud engineering)

26%

31%

43%

PwC, 2024