
Nearly two-thirds of business managers admitted that they would not pass an audit verifying which users have access to their hosted applications.

Nearly half of respondents said they are not confident that a compliance audit of their Cloud-based applications would show that all user access is appropriate.

One in seven companies know for a fact that they have potential access violations in the Cloud, but don’t know how to find them.

There was nearly a 10 percent jump in the ratio of respondents who admitted they have limited or no knowledge of which applications their employees have access to, compared to a similar survey conducted in 2009.

An additional 15.7 percent of business leaders say that they are aware that potential access violations exist, but they don’t know how to find them.

More than three quarters of respondents cannot say who they believe should be responsible for data housed in a Cloud environment.

61.2 percent of respondents said they have limited or no knowledge of which systems or applications employees have access to.

This number spiked from 52.8 percent in 2009.

Fittingly, enterprises are less confident this year than in 2009 that they can prevent terminated employees from accessing one or more IT systems: 64.3 percent said they are not completely confident, compared with 57.9 percent last year.

56.5 percent of respondents said that external threats were still the biggest concern, compared with 54 percent last year.