Enterprises are rapidly incorporating cloud services into their business and IT strategies. The cloud access security broker (CASB) is an intermediary cloud governance mechanism that helps security administrators identify, assess, and control the cloud services in use by their organization. While these products provide visibility and help reduce risk, they can also be complex to deploy and introduce hidden costs. This brief presents results from our 2018 Cloud Access Security Broker Study. Data from our 2019 Architecture Study and our 2018 Cloud-Delivered Security Service Study is also included.