15% of security professionals say cloud and infrastructure exposure is the boardroom cyber priority boards ask about most.

38% of organizations identify public cloud environments as a major visibility gap.

44% of enterprises identify cloud computing security as a top training priority.

52% of AI workloads span hybrid environments

35% of organizations say their datacenter security can support current AI needs

77% of organizations have updated their security strategy for cloud in response to AI

There is a 51-point gap between organizations' intent to secure AI in the cloud and their capability to enforce that security

26% of organizations report having the architecture to enforce their AI-related cloud security strategy

The most commonly outsourced cybersecurity services among middle market firms are cloud security management (50%), security awareness training (44%), security operations center services (43%), and risk and compliance management (41%).

36% of middle market organizations prioritize cloud security in cybersecurity investment.

Only 38% of organizations report high confidence in their cloud security posture.

90% of senior cybersecurity decision makers identify public cloud as a top visibility and vulnerability concern.

Machine identities outnumber human users by 25:1 in Microsoft 365 environments.

By 2027, 30% of organizations will require comprehensive sovereignty of their cloud security controls to address continued geopolitical turmoil.

41.88% of production organizations have leaked AI or ML credentials.

Identity, cloud, and credential compromise accounted for 85% of actionable security alerts.

Average enterprise cloud downtime per incident increased from 16 days to 20 days.

Popular tools for managing unstructured data include data encryption (62%), cloud security (60%), application security (59%), and identity and access management (56%).

In 2026, enterprise cloud infection rates reached the highest level ever recorded in the study's history.

59% of organizations are increasing spending on cloud and third-party security.