Published: 18 April 2022
中国针对云服务和安全特有的需求及市场情况，造就了独特的云安全环境。中国的安全和风险管理领导者应兼顾云安全常规实践与本国情况，以成功实施云安全。
在中国，企业过于关注数据的物理位置，而对云安全管控的重视程度不足。因此，虽然公有云采用率不断增加，但私有云、混合云和传统数据中心仍占据很大的市场份额。
由于境外云服务提供商（CSP）和安全厂商的很多技术没有在中国提供服务，而本土厂商为了避免与公有云提供商产生竞争，则主要关注于私有云领域。因此，企业机构在面对各类云安全工具时，难以做出选择。
许多中国企业机构并未对CSP进行系统性的风险评估，这就会带来潜在的安全缺口，使自身面临风险。
负责云安全的中国安全和风险管理领导者，应：
评估云共享责任模型，明确和云提供商分担的安全责任范围，构建所需能力。
构建云安全架构。在实施安全管控时，采用云原生工具优先的方法并利用第三方工具和开源工具，同时持续关注在中国的技术可用性。
采用分级模型并利用安全认证手段，评估CSP风险。
Clients can log in to view the entire document.
Analysts:
Gartner research, which includes in-depth proprietary studies, peer and industry best practices, trend analysis and quantitative modeling, enables us to offer innovative approaches that can help you drive stronger, more sustainable business performance.
Our independence as a research firm enables our experts to provide unbiased advice you can trust.
Not only is Gartner research unbiased, it also contains key take-aways and recommendations for impactful next steps.
Our research practices and procedures distill large volumes of data into clear, precise recommendations.
We provide actionable, objective insight to help organizations make smarter, faster decisions to stay ahead of disruption and accelerate growth.
We offer one-on-one guidance tailored to your mission-critical priorities.
We work with you to select the best-fit providers and tools, so you avoid the costly repercussions of a poor decision.
Connect directly with peers to discuss common issues and initiatives and accelerate, validate and solidify your strategy.
Gartner clients can log in to access the full library.
Join your peers for the unveiling of the latest insights at Gartner conferences.
©2022 Gartner, Inc. and/or its affiliates. All rights reserved. Gartner is a registered trademark of Gartner, Inc. and its affiliates. This publication may not be reproduced or distributed in any form without Gartner’s prior written permission. It consists of the opinions of Gartner’s research organization, which should not be construed as statements of fact. While the information contained in this publication has been obtained from sources believed to be reliable, Gartner disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although Gartner research may address legal and financial issues, Gartner does not provide legal or investment advice and its research should not be construed or used as such. Your access and use of this publication are governed by Gartner’s Usage Policy. Gartner prides itself on its reputation for independence and objectivity. Its research is produced independently by its research organization without input or influence from any third party. For further information, see Guiding Principles on Independence and Objectivity.
