New IDC research highlights a major cloud security shift

Cloud security is described as being at a tipping point, with IDC’s latest research showing organisations experienced an average of nine cloud security incidents in 2024, and 89% reporting a year-over-year increase. According to IDC, cloud-native application protection platforms (CNAPPs) are now one of the top three security investments for 2025, as they protect cloud-native applications across their lifecycle and reinforce the case for ecosystem and consolidation strategies.

The research also notes that in 37% of organisations, CISOs have ownership over cloud security management, with IDC referring to these leaders as “3D CISOs” who align security with business priorities. Tool sprawl remains a challenge, with organisations averaging 10 cloud security tools, prompting calls for a unified security platform to improve visibility and reduce costs. Generative AI is already changing the game for cloud security, enhancing automated threat detection and incident response.

IDC’s whitepaper, The Next Era of Cloud Security: Cloud-Native Application Protection Platform and Beyond, argues that the future lies in integrated, autonomous SecOps platforms that blend protection, threat intelligence, and AI-powered automation.