# Cloud Security Alliance Flags Cloud Risks

The Cloud Security Alliance’s 2026 survey identifies inadequate identity and access management as the leading cloud security threat and highlights AI-enhanced attacks and compromise of AI systems as emerging risks. For government procurement teams and contractors, the findings point to capability areas likely to matter in cloud-security planning and supplier assessments, including identity governance, automated configuration scanning, supply-chain security, AI-workload controls, and tested recovery. The signal describes market demand areas, not a specific solicitation or contract award.

- Contractors can assess whether their cloud-security offerings address the named risks, particularly identity governance and automated configuration scanning.
- Procurement teams can use these risk areas to inform cloud-service evaluations and supplier discussions, including scrutiny of supply-chain security, AI-workload controls, and recovery capabilities.
- The survey’s emphasis on AI-related threats indicates a need to account for AI-system security when evaluating cloud workloads; no specific mandate or compliance deadline is identified.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** October 09, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Sources
- [Cloud Security Threats 2027: What the Latest Data Shows](https://www.analyticsinsight.net/amp/story/cybersecurity/cloud-security-in-2027-risks-threats-challenges-protection-strategies) - Analytics Insight