2022年全球加密趋势研究报告

ENTRUST Thedataisinthecloud,butwho'sincontrol? 2022 GLOBALENCRYPTIONTRENDSSTUDY Findouthoworganizationsareusingencryptiontoprotectdataandworkloads acrossmultiplecloudplatforms. PARTO1.EXECUTIVESUMMARY PARTO2.KEYFINDINGS Strategyandadoptionofencryption9 Industrytrendsinencryptionadoption. Threats,maindrivers,andpriorities12 Deploymentchoices15 Encryptionfeaturesconsideredmostimportant16 Attitudesaboutkeymanagement Importanceofhardwaresecuritymodules(HSMs) Cloudencryption26 APPENDIX.METHODS&LIMITATIONS28 2022GlobalEncryptionTrendsStudyIndepencentlyconcuctecbyPonemonInstituteLLCandsponsoredbyEntrust 01 Executive Summary FOLLOWINGARETHEFINDINGSFROMTHISYEAR'SRESEARCH STRATEGYANDADOPTION OFENCRYPTION 62% ofrespondents saytheirorganizationshavean Enterprise-wideencryptionstrategieshaveoverallencryptionplanthatis continuedtoincrease,Sinceconcluctingthisappliedconsistentlyacrossthe study17yearsago,therehasbeenasteadyentireenterprise increaseinorganizationswithanencryption strategyappliedconsistentlyacrossthe entireenterprise.Inturn,therehasbeena steadydeclineinorganizationsnothaving inmostofthe13industrysectorsrepresented inthisresearch.Themostsignificantincreases anencryptionplanorstrategy.Inthisyear's study.51%ofrespondentsratethelevelof inextensiveencryptionusageoccurinmanufacturing,energy&utilitiesandthe theirseniorleaders'supportforanenterprise- wideencryptionstrategyassignificantorvery publicsector significant.THREATS,MAINDRIVERS, ANDPRIORITIES Certaincountries/regionshavemoremature encryptionstrategies.TheprevalenceofEmployeemistakescontinuetobethemost anenterpriseencryptionstrategyvariesslgnificantthreatstosensitivedata.Incontrast, amongthecountries/regionsrepresentedintheleastsignificantthreatstotheexposure thisresearch.Thehighestprevalenceofanofsensitiveorconfidentialdatainclude enterpriseencryptionstrategyisreportedgovernmenteavesdroppingandlawfuldata intheUnitedStates,theNetherlands,andrequests. Germany.AlthoughrespondentsintheRussian FeclerationandBrazilreportthelowest Mostorganizationshavesufferedatleast adoptionofanenterpriseencryptionstrategy. onedatabreach,Seventy-twopercentof sincelastyearithasincreasedsignificantly organizationsrepcrthavingexperienceclat Theglobalaverageofadoptionis62%ofleastonedlatabreach.Twenty-fourpercentsay organizationsrepresentedinthisresearchtheyhaveneverexperiencedabreachand5%areunsure. Globally,theIToperationsfunctionisthe mostInfluentialInframingtheorganization's Themaindriverforencryptionisthe encryptionstrategy.However,intheUnitedprotectionofcustomers'personalinformation. Statesthelinesofbusinessaremoreinfluential Organizationsareusingencryptionto IToperationsaremostinfluentialinthe protectcustomers'personalinformation Netherlancis,Spain,France,SoutheastAsiaand(53%ofrespondents),toprotectinformation theUnitedKingdom. againstspecific,identifiedthreats(50%of respondents),ancltheprotectionofenterprise Theuseofencryptionhasincreasedinmostintellectualproperty(48%ofrespondents).industries.Resultssuggestasteadyincrease PONEMONINSTITUTE@RESEARCHREPORT Abarriertoasuccessfulencryptionstrategyis theinabilitytodiscoverwheresensitivedata residesintheorganization.Fifty-fivepercent 55% ofrespondentssay ofrespondents5aydiscoveringwheresensitive dataresidesintheorganizationisthenumberdiscoveringwheresensitive onechallengeand32%ofrespondlentssaydataresidesintheorganization budgetconstraintsisabarrier.Thirtypercentisthenumberonechallenge ofallrespondentsciteinitiallydleploying encryptiontechnologyasasignificant challenge ATTITUDESABOUT DEPLOYMENTCHOICESKEYMANAGEMENT NosingleencryptiontechnologydominatesinHowpainfuliskeymanagement?Fifty-nine organizations.Organizationshaveverydiversepercentofrespondentsratekeymanagement neeclsforencryption.Inthisyear'sresearch,asverypainful,whichsuggestsrespondents backupandarchives,internetcommunicationsviewmanagingkeysasaverychallenging diatabeses,andinternalnetworksaremostlikelyactivity.Thehighestratesofpainoccurin tobedeployed.Forthefifthyear,thestudySpainandGermany,whileFranceexperiences trackedthecleployrnentoftheencryptionofthelowestlevelofpain.Noclearownershio InternetofThings(loT)devicesandplatforms.andlackofskilledpersonnelaretheprimary Sixty-threepercentofresponclentssayloTreasonswhykeymanagementispainful.The platformshavebeenatleastpartiallyencryptedlmostdifficulttomanageareSSHkey5,keys and64%ofrespondentssayencryptionofloTforexternalcloudorhostedservicesincluding deviceshasbeenatleastpartiallydeployed.BYOKkey5,andsigningkeys. ENCRYPTIONFEATURESIMPORTANCEOFHSMS CONSIDEREDMOSTIMPORTANT Germany,MiddleEast,andUnitedStates CertainencryptionfeaturesareconsideredorganizationsaremorelikelytodeployHSMs morecriticalthanothers.AccordingtotheTheRussianFeclerationisleastlikelytocleploy consoliclatedfindings,5ystemperformanceandH5Ms.Theoverallglobalaveragedeployment latency,managjementofkeys,andenforcementrateforHSMsis49%. ofpolicyarethethreemostimpcrtant encryptionfeatures. HowHSMsinconjunctionwithpubliccloud-basedapplicationsareprimarilydeployed Intelle