Gartner Magic Quadrant Sources and Disclaimer

Transcription

1 Gartner Magic Quadrant Sources and Disclaimer 1. Gartner Magic Quadrant for Network Access Control; by Lawrence Orans, John Pescatore, Mark Nicolett; March 27, Gartner Magic Quadrant for Endpoint Protection Platforms; by Peter Firstbrook, Arabella Hallawell, John Girard, Neil MacDonald; May 4, Gartner Magic Quadrant for Security Information and Event Management; by Mark Nicolett, Kelly M. Kavanagh; May 29, Gartner Magic Quadrant for Content-Aware Data Loss Prevention; by Eric Ouellet, Paul E. Proctor; June 22, Gartner Magic Quadrant for PC Life Cycle Configuration Management; by Terrence Cosgrove, Ronni J. Colville; December 29, 2008 The Magic Quadrants are copyrighted by Gartner, Inc. and are reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner's analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the "Leaders" quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. 24

2 Appendix Full slide deck (all questions)

3 Methodology Applied Research performed survey January ,100 worldwide responses Small enterprise ( employees) Medium enterprise (1,000 4,999 employees) Large enterprise (5,000 or more employees)

4 Demographics

5 Company size

6 Industries

7 Medium enterprise

8 Medium enterprise

9 Large enterprise

10 Large enterprise

11 Objectives

12 Security risks

13 Enterprise security status

14 IT improvements

15 Planned change for enterprise security

16 Vendor security protection

17 Vendor security

18 Vendor security

19 Staffing & Budget

20 Enterprise security staff Q16: Roughly how many people work on enterprise security or IT compliance in your organization worldwide? Median 120 people

21 Enterprise security staff

22 Enterprise security staff

23 Manpower capacity change

24 Manpower capacity staffing

25 Enterprise security job requisitions Q20: How many requisitions for enterprise security jobs does your company have open worldwide at the moment? Median 20 requisitions

26 Enterprise security job requisitions

27 Staff recruiting

28 Enterprise security budget Q23: What will your annual budget for all of your enterprise security worldwide be in 2010? Median $600,000

29 Enterprise security budget Q24: What is the percentage change for your enterprise security budgets over 2009? Median 11%

30 Enterprise security budget Q25: Looking ahead, what do you anticipate the percentage change for your enterprise security budgets will be in 2011 when compared to 2010? Median 11%

31 Outsourcing

32 Outsourcing

33 Outsourcing

34 Outsourcing impact

35 Training budget

36 Training budget

37 Training

38 Attacks & Remediation

39 Cyber attacks

40 Cyber attacks

41 Cyber attacks

42 Cyber attacks

43 Cyber attacks

44 Cyber losses

45 Cyber attack costs

46 Cyber attack costs

47 Cyber attack info

48 Safeguards

49 Network Security

50 IaaS and network security

51 PaaS and network security

52 Server virtualization and network security

53 Hypervisor malware

54 Hypervisor malware

55 Endpoint Security

56 Endpoint types

57 Endpoint types

58 Endpoint vulnerability

59 Employee-owned endpoints

60 Employee-owned endpoints

61 Endpoint standardization

62 Endpoint control

63 Endpoint safeguards

64 Endpoint attacks

65 Attack remediation costs

66 Endpoint attack causes Q59: What percentage of the aforementioned attacks were the results of improper configurations such as missed OS patches, incorrect security settings, out of date virus profiles, etc? Median 20%

67 Lost devices

68 Endpoint security processes

69 Endpoint security processes

70 Windows 7

71 Windows 7

72 Endpoint virtualization

73 Endpoint virtualization

74 Software-as-a-Service

75 Data Loss Prevention

76 Data loss concern

77 Data loss prevention

78 Data loss prevention

79 Data loss prevention

80 Other information security systems

81 Previous data loss

82 Previous data loss

83 Data loss consequences

84 Data loss threats

85 Virtualization strategy

86 Virtualization strategy

87 Cloud computing strategy

88 Cloud computing strategy

89 DLP selection

90 Messaging/Collaboration Security

91 systems

92 systems

93 systems

94 systems

95 Collaboration systems

96 Instant messaging

97 Social media tools

98 Social networking sites

99 Employee access to social media

100 Employee access to social media

101 Messaging/Collaboration threats

102 Messaging/Collaboration security

103 Messaging/Collaboration protection

104 Messaging/Collaboration protection

105 Hosted security

106 Hosted security

107 Web Security

108 Web property security

109 Web property security

110 Web property attacks

111 Web property attack costs

112 Safeguards

113 Compliance

114 Standards and frameworks

115 Standard compliance

116 Compliance budget Q105: What is your total budget for compliance efforts worldwide? Median $200,000

117 Compliance budget

118 Compliance budget

119 Industry Verticals: Financial

120 Industry Verticals: Financial

121 Industry Verticals: Financial

122 Industry Verticals: Financial

123 Industry Verticals: Financial

124 Industry Verticals: Financial

125 Industry Verticals: Financial

126 Industry Verticals: Healthcare

127 Industry Verticals: Healthcare

128 Industry Verticals: Healthcare

129 Industry Verticals: Healthcare

130 Industry Verticals: Healthcare

131 Industry Verticals: Healthcare

132 Industry Verticals: Public Sector (US)

133 Industry Verticals: Public Sector (US)

134 Industry Verticals: Public Sector (US) Q120: What percentage of your security funding is coming from national stimulus funding currently? Median 0%

135 Industry Verticals: Public Sector (Non-US)

136 Industry Verticals: Public Sector (Non-US)

137 Industry Verticals: Public Sector (Non-US)

138 Industry Verticals: Telecommunications

139 Industry Verticals: Telecommunications

140 Industry Verticals: Telecommunications

141 Industry Verticals: Telecommunications

142 Industry Verticals: Telecommunications