2024实战实录：企业级应用安全机密治理态势白皮书 英文版 conv.docxVIP

Todaymorethanever,applicationsecurityandsecretsmanagementhavebecomecriticalconcernsfororganizationsworldwide.Theproliferationof

non-humanidentitiesandthecomplexityofmodernapplicationarchitectureshavecreatedsignificantsecuritychallenges,particularlyinmanagingsensitivecredentials.Thescaleofthisissueissubstantial:

Machineidentitiesnowoutnumberhumanonesby45to1intheaverageorganization.

“2022IdentitySecurityThreatLandscape,”byCyberArk

12.8millionsecretswerepubliclyexposedonGitHin2023alone,a28%increasefrom2022.

“TheStateofSecretsSprawl2024”,byGitGuardian

Togaindeeperinsightsintothesechallenges,CyberArkandGitGuardianhavecollaboratedonthe“VoiceofPractitioners2024”report.Thisstudy,basedonasurveyof1,000ITdecision-makersacrosstheUS,UK,Germany,andFrance,examinesthecurrentstateofapplicationsecurity,focusingonsecretsmanagementandcodesecurity.

Ourfindingsrevealagrowingawarenessofsecretsprawlrisksandincreasedinvestmentinmitigationstrategies.However,significantgapsinorganizationalreadinesspersist.ThisreportaimstoprovideinsightintothecurrentstateofsecretssecurityintheITfield,basedontheopinionofthosewhouseoroverseethemonadailybasis.

VoiceofPractitioners2024

Executivesummary

Secretsleaksareontherise

79%ofrespondentsreportedhavingexperiencedorbeenawareofsecretsleakingwithintheirorganization,upfrom75%inthepreviousyear.Notably,77%oftheseincidentsresultedintangibledamagetoeitherthecompany,itsemployees,orboth,highlightingthesevereconsequencesofsuchleaks.

InvestmentinsecretsmanagementisincreasingOrganizationsarerespondingtothesechallengeswithsubstantialresourceallocation,dedicatinganaverageof32.4%ofsecuritybudgetstosecretsmanagementandcodesecurity.Thiscommitmentvariessignificantlybyregion,withUSorganizationsleadinga