While you are waiting for our webinar to begin, you might be interested in the downloads on the Attachment tab:

Transcription

1 While you are waiting for our webinar to begin, you might be interested in the downloads on the Attachment tab: A copy of today s presentation and our Upcoming webinars Information on how to dial in if you are unable to attend via VoIP Have a question for our analyst? Click the Question tab. Q&A will be at the end of today s presentation. If you have any difficulties, please gartnerwebinars@gartner.com Gartner, Inc. and/or its affiliates. All rights reserved.

2 Gartner at a Glance World's Largest Community of CIOs 10,000 Distinct Client Organizations 1,000 Analysts 215,000+ Client Interactions 74% of Fortune 1000 Clients in 90 Countries 75% of Global 500 Vertical Coverage in Nine Industries 5,000 Benchmarks 850 Media Inquiries per month 60+ Conferences 500 Consultants 3,200 Consulting Engagements

3 Gartner Security & Risk Management Webinar Information Security Buying Behaviors and Budget Trends 2015 Lawrence Pingree This presentation, including any supporting materials, is owned by Gartner, Inc. and/or its affiliates and is for the sole use of the intended Gartner audience or other intended recipients. This presentation may contain information that is confidential, proprietary or otherwise legally protected, and it may not be further copied, distributed or publicly displayed without the express written permission of Gartner, Inc. or its affiliates Gartner, Inc. and/or its affiliates. All rights reserved.

6 Key Issues 1. What are the primary security buyers and what are their strategic technology interests for 2015? 2. What are the current budget allocations and investment priorities? 3. What are the current security technology adoption levels and where is security technology headed? Gartner, Inc. and/or its affiliates. All rights reserved.

8 Which Departments Are the Primary Buyers and Influencers of Security Purchases? Question: What is your involvement in purchasing IT security products, services and/or technology for the following projects within your organization? Information Security, n = % I am the primary decision maker I recommend solutions I research the market I have no role in purchasing IT security products, services and/or technology 43% 14% 18% Risk Management, n = % 43% 20% 22% Vendor Management, n = % 37% 25% 26% Compliance, n = % 40% 22% 26% Business Continuity, n = % 38% 20% 30% Privacy, n = % 40% 21% 29% Audit, n = 416 8% 36% 20% 35% Gartner, Inc. and/or its affiliates. All rights reserved. Base: Has some involvement in this project (Q04)

9 Top 10 Global Strategic Technology Interests for 2015 Mobile Security 71% Cloud Security 68% BYOD Security 62% Application Security 61% Data Loss Prevention 60% Vulnerability Management 59% Security Analytics 58% Network Security 56% Data Classification Virtualization and Security 54% 53% This is an area of high interest for me Gartner, Inc. and/or its affiliates. All rights reserved.

10 All This and I Still Have a Security Problem? Through 2015, we'll spend an estimated Firewall Intrusion Prevention Endpoint Protection Secure /Web Gateway $7.9 Billion $1.4 Billion $3.3 Billion $4.2 Billion $77.2 Billion Identity and Access Management (IAM) Security Info & Event Mgmt Security Services DLP, Testing & Other $3.1 Billion $1.8 Billion $51.5 Billion $4.3 Billion Source: Forecast: Information Security, Worldwide, , 1Q15 Update

11 Old Pain Points Flowing Into New Technology Approaches and Markets Customer Pain Point or Issue Current Solutions Emerging Areas of Demand Malware Detection and Prevention Network Sandboxes Cloud-Based Sandboxes Application Control Endpoint Detection and Response Incident Response Automation Endpoint Exploit Prevention Application Containment Perimeter Security Control Failure Network Behavior Analytics Log Correlation Network Behavior Threat Analytics and Modeling User Behavior Analytics Threat Intelligence Services and Platforms Porous perimeter and SaaS Mobile Device Management and Compliance Data Loss Prevention Mobile Data Protection Application Containment and Isolation Cloud Access Security Brokers Gartner, Inc. and/or its affiliates. All rights reserved.

12 Spending Estimates on Advanced Threat Detection (ATD) in 2014 Network Sandbox Providers $582 (Million USD) Endpoint Detection and Response (EDR) $232 (Million USD) $985 Million Cloud Sandbox Providers $58 (Million USD) Network Behavior Analysis $113 (Million USD) 11

14 Percentage of IT Budget Allocated to Security Figure 1. Total IT Security Spending as a Percent of IT Spending, % increase of IT budget allocated to Security In the context of the Information Security budget the increase was a 19% over the prior year Source: IT Key Metrics Data (December 2014) Gartner, Inc. and/or its affiliates. All rights reserved.

17 Security Budget Priorities (2014 vs. 2015) Source: Gartner (January 2015) 2014 Security and Risk Management Survey Provides Action Items for Providers in 2015 Notes: Question we asked: How do you anticipate IT infrastructure security spending to change in fiscal 2015 compared with fiscal 2014? Number of respondents varies, based on the category; excludes "don't know." Percentages may not add up to 100% because of rounding Gartner, Inc. and/or its affiliates. All rights reserved.

18 Top 10 Planned Security Investment Initiatives in 2015 Mobile Security 38% Cloud Security 35% Network Security 35% Vulnerability Management 31% Data Loss Prevention 30% BYOD security 26% Application Security 26% Virtualization and Security 25% Endpoint Security Security Analytics 24% 23% We will invest significantly in this area in Gartner, Inc. and/or its affiliates. All rights reserved.

19 Planned Identity and Access Management (IAM) Investments in 2015 Single Sign-On (Including Federation) 26% Access Management 21% Identity Proofing and User Authentication Privileged Account Management 18% 18% Identity Governance and Administration IAM for External Users 14% 14% Identity Analytics and Intelligence IAM Program Management and Governance IAM System Integration and Consulting Directory Services IAM and Privacy IAM as a Service (IDaaS) 12% 12% 11% 10% 9% 8% We will invest significantly in this area in 2015 Identity of Things 6% Gartner, Inc. and/or its affiliates. All rights reserved.

21 IT Security Technologies Currently Deployed N = 360, Base: Who Falls in 'Information Security' Domain. Excluding DK. User Authentication 79% Network Access Control 77% Endpoint Protection (Anti-Malware) Secure Web Gateway Web Application Firewalls Data Loss Prevention Remote-Access or Site-to-Site VPN Web Site Filtering or Blocking Web Access Management 75% 74% 74% 73% 73% 72% 72% User Provisioning 70% Intrusion Detection and Prevention Encryption for Servers, Storage or Databases Encryption for /Secure Gateways Gartner, Inc. and/or its affiliates. All rights reserved. 69% 68% 68% Source: Gartner (January 2015)

22 IT Security Technologies Currently Deployed (Continued) N = 360, Base: Who Falls in 'Information Security' Domain. Excluding DK. Security Information and Event Management Advanced Threat Defense Appliances (Malware Control) Privileged Account Management Mobile Device Management Application Security Testing Vulnerability Assessment Unified Threat Management (Multifunction Firewalls) Endpoint Compromise Assessment (System Integrity Monitoring) Cloud Encryption Gateway or Cloud Encryption Software Next-Generation Firewalls IT GRCM tools (Governance, Risk and Compliance Management tools) Gartner, Inc. and/or its affiliates. All rights reserved. Patch Management 65% 64% 63% 62% 62% 62% 61% 61% 57% 50% 50% 49% Source: Gartner (January 2015)

23 Security Market Trends for 2015 Intelligence Aware Security Controls (IASC): Enabling Cross-Product Telemetry Emerging Intelligence Sharing Products and Services Cloud Security: Emerging Technology Threat and Compliance Risks SDN Solutions Are Maturing Multi-Domain Security Analytics: Analytics Domain Convergence: Network, System, Application and User User Behavior Modeling for Advanced and Insider Threat Detection Security for the Internet of Things (IoT): Risks Created for Newly Deployed IOT Solutions Opportunities Emerging for Security Solution Providers Gartner, Inc. and/or its affiliates. All rights reserved.

24 The Security Future Countdown to Security Automation Learning and Response Era - Situationally Aware Controls Behavioral Modeling Era - Behavior Aware Controls Intelligence Awareness Era - Context Aware Controls Manual Response Era - Isolated Controls Machine Learning and Adaptive Response Analytics and Modeling Context and Intel Sharing (approximately ) Defined Enforcement (approximately ) Epoch Transitions + Situational Awareness Gartner, Inc. and/or its affiliates. All rights reserved.

25 Recommendations Technology Provider Recommendations: Focus on Improving Efficacy (No. 1 Buying Criteria). Focus on delivering suite or bundled solutions. Continue to leverage cross-product integration efforts to utilize context information and automated response capabilities. Providers in segments with decreased demand should increase marketing efforts or consider new product development/m&a. End-User Recommendations: Seek solutions with cross-product integration that enables improvements towards context-based decision making. Use price negotiation in lower demand segments to save money. Maximize the use of product suites and avoid shelfware situations. Examine advanced threat protection as market consolidates this function Gartner, Inc. and/or its affiliates. All rights reserved.

26 Recommended Gartner Research IT Key Metrics Data 2015: Key IT Security Measures: Multiyear Linda Hall and Others (G ) IT Key Metrics Data 2015: Key IT Security Measures: by Industry Linda Hall and Others (G ) 2014 Security and Risk Management Survey Provides Action Items for Providers in 2015 Elizabeth Kim and Sid Deshpande (G ) Forecast: Information Security, Worldwide, , 1Q15 Update Ruggero Contu Christian Canales Sid Deshpande Lawrence Pingree (G ) For more information, stop by Gartner Research Zone Gartner, Inc. and/or its affiliates. All rights reserved.

27 Gartner Symposium/ITxpo: The world's most important gathering of CIOs and senior IT executives Hundreds of analyst-led sessions, workshops, how-to clinics and more Role-based tracks designed to address your key priorities and challenges Immediately actionable take-aways a clear action plan for the next three, six and 12 months Mastermind Interview Keynotes with industry leaders ITxpo exhibit floor with hundreds of top solution providers and exciting startups September Cape Town, South Africa October Sao Paulo, Brazil October 4-8 Orlando, FL October Gold Coast, Australia October Tokyo, Japan November 2-5 Goa, India November 8-12 Barcelona, Spain Visit gartner.com/symposium 26

28 Simple steps for increasing the value of today's webinar experience Today's presentation is available to download on the Attachment tab of our webinar portal and on our webinar page. Download our Upcoming Webinars (pdf) on the Attachment tab or visit gartner.com/webinars Don t forget to check out the ondemand webinars and share these resources with your colleagues. Contact your Gartner account executive with any additional questions, comments or for a complimentary copy of today's presentation Gartner, Inc. and/or its affiliates. All rights reserved. 27