ORLANDO, FL -- (Marketwire) -- 11/17/10 -- Cloud Security Alliance Congress -- A recent survey on cloud security conducted by Hubspan, the leading provider of cloud-based business integration solutions, showed that most companies believe sensitive data can be secured in the cloud. In addition, nearly half of the respondents also said they believe cloud-based solutions can be as secure as on-premise products, with over 40% stating they would consider replacing current solutions with cloud-based ones. The results of the survey were announced today at the Cloud Security Alliance (CSA) Congress, where Hubspan is a sponsor and speaker.

However, respondents did keep their feet on the ground with clear caveats that cloud solutions must include strong data protection, data segregation and the ability to comply with key compliance mandates, such as Sarbanes Oxley, HIPAA and PCI DSS. Compliance was noted as mission critical by nearly 80% of those surveyed, and most respondents felt there was some data still too risky to put in the cloud, including intellectual property, financial information and employee records. The survey also showed most companies are willing to forego performance for cloud security, with nearly 80% saying they would sacrifice some cloud computing performance in order to ensure that the data was secure.

In the end, it comes down to whether or not a cloud vendor can address the top criteria for cloud security, which are: data protection (85 percent), auditing and tracking (53 percent), access control rules and securing data in motion (both at 36 percent).

"The results of this survey show that while some of the concerns over cloud security may be overblown, vendors must be able to clearly show how they address data segregation, compliance and other areas critical to businesses interested in augmenting on-premise infrastructure with cloud-based solutions," said Margaret Dawson, vice president of marketing and product management at Hubspan. "These results mirror what we hear from our own customers, and Hubspan has been ahead of the game in providing best-in-class security and compliance-based B2B integration in the cloud."

For cloud vendors, the survey clearly reveals the most important criteria for companies evaluating a cloud vendor. Respondents placed greatest importance how their data is segregated from other customers (85 percent), whether or not the vendor has a comprehensive and secure disaster recovery plan in place (80 percent), understanding how their company data is secured within the application (79 percent), and understanding the vendor's security breach contingency process (72 percent). Access control rules, strong authentication and best-of-breed network security infrastructure were some of the other criteria near the top of the list when considering cloud providers.

More than 200 companies completed the cloud survey, ranging in size from under 50 to several thousand employees. Respondents represented a range of industries, with high-tech, manufacturing, wholesale distribution, retail and B2B eCommerce accounting for 50 percent of the polls.

Hubspan, a member of CSA, also announced this week that Max Coburn, chief software architect, and Stuart Lisk, senior manager of product management, have achieved certification for the CSA's Certificate of Cloud Security Knowledge (CCSK). The CCSK is the industry's first user certification program for secure cloud computing. It is designed to ensure that a broad range of professionals with responsibility related to cloud computing have a demonstrated awareness of the security threats and best practices for securing the cloud.

About Hubspan Inc.
Hubspan is the leading provider of cloud-based business integration solutions, helping companies automate business processes across internal and external communities. Hubspan's flagship solution is the WebSpan SaaS Integration Platform. An enterprise-class solution, WebSpan combines Hubspan's innovative, cloud-based platform and managed services with IBM WebSphere integration software. Thousands of companies, from small enterprises to the Fortune 500, successfully use the platform every day for secure, reliable and scalable business integration. WebSpan is available in packaged integration processes, from managed file transfer, PO, e-invoicing and punchout to full business processes, such as Supply Chain, Customer Integration, Advanced EDI and B2B eCommerce. For more information, go to www.hubspan.com or email webspan@hubspan.com. Follow us on Twitter @Hubspan.

• ROI: Justifying the Cloud
• As I Work in the Cloud, I Encounter an 80/20 Rule
• Can Health Care Data Be Secure in the Cloud? (Infographic)