Future Opportunities in IT Security: Vendor strategies, enterprise investment and market outlook

Future Opportunities in IT Security: Vendor strategies, enterprise investment and market outlook

Future Opportunities in IT Security
As organizations continue to align IT solutions with their business processes, spend on vulnerability assessment and security management is growing rapidly, which indicates a desire to measure and understand IT security risks in business terms. In addition, the nature of the threats that organizations face is constantly evolving as new technologies, practices and attack vectors emerge. Future Opportunities in IT Security is a new management report that provides insights into the thinking behind IT security decision makers and buyers. This report examines the important factors influencing investment in IT security and vendor choice. It gives forecasts for IT spending on individual security products up to 2010 and investigates the emerging security threats, the vendor opportunity by region and vertical, as well as by size of organization. It also analyzes the fast-growing market for security and privacy (S&P) outsourcing, and profiles the leading vendors - including Symantec, Check Point, McAfee and Microsoft - in the market. Use the invaluable analysis in this new report to plan ahead, avoid potential risks and create a strong competitive advantage.

Some key findings in this new report...
• Security is an issue that remains a number one IT priority for most organizations.
• New security areas such as security information management and vulnerability and patch management will grow rapidly up to 2010.
• As the enterprise IT security market has grown, the financial services and communications sectors have grown faster than other sectors. Previous years have shown retail and manufacturing sectors have accepted the need for greater security investment more slowly, and will consequently grow at a faster rate than the market going forward.
• Many vendors view the SMB sector as the fastest growth market in the security market; the SMB space will also provide an important growth opportunity for hosted and managed security services.
• Security and privacy (S&P) managed services represent the fastest growing infrastructure services market.

Top reasons to order this new report today...
• Understand enterprises’ approach to buying IT security.
• Develop go-to-market strategies that target organization’s weak spots and provide the support they are looking for, thereby improving sales.
• Target emerging, fast-growing security markets more effectively.
• Identify market opportunities by region, vertical and size band.
• Discover and understand the product roadmaps of the leading vendors.
• Design channel strategies to win a share of the SMB IT security market.

Some key questions answered in this report...
• What are organization’s main security concerns and requirements?
• Who is the buying decision maker for IT security within different sized organizations?
• Where are the market opportunities by region and vertical?
• Who is the market leader in the security market?
• Which other vendors dominate the security market?
• How can I target IT security decision makers more effectively?
• What are the fastest growing areas within the security market?
• How popular is security outsourcing now – and in coming years?

Some hot issues covered in this report...
• Worms targeting applications rather than operating systems are on the increase - how malware writers no longer go for large Blaster-style damaging attacks.
• Aligning products and solutions along vertical lines - and how this will help vendors.
• Large enterprises - their deployment of security solutions compared to medium or smaller sized organizations.
• SMB sector as the fastest growth sector in the security market - and how vendors must move fast to secure channel partners.
• Security and privacy (S&P) managed services - and how enterprises are looking to simplify the management of their increasingly complex IT security systems.

This new report will provide you with...
• Worms targeting applications rather than operating systems are on the increase - how malware writers no longer go for large Blaster-style damaging attacks.
• Aligning products and solutions along vertical lines - and how this will help vendors.
• Large enterprises - their deployment of security solutions compared to medium or smaller sized organizations.
• SMB sector as the fastest growth sector in the security market - and how vendors must move fast to secure channel partners.
• Security and privacy (S&P) managed services - and how enterprises are looking to simplify the management of their increasingly complex IT security systems.

This new report will provide you with...
• Explanation of how enterprises approach IT security buying decisions and what factors influence their choice of vendor.
• Outline of vendor strategies for improving sales.
• Competitive vendor analysis.
• Explanation of trends occurring in the marketplace.
• Breakdown of spending on IT security by product type up to 2010.
• Identification of emerging and fast-growing security markets.

Table of Contents
Future Opportunities in IT Security
Executive Summary 8
Market outlook 8
Emerging security threats 8
IT security opportunities by region and vertical 10
Enterprise adoption of IT security 10
SMB adoption of IT security 11
The enterprise view of security outsourcing 12
Vendor overview 13
Chapter 1 Introduction 16
What is this report about? 16
Who is this report for? 16
Chapter 2 Market outlook 18
Summary 18
The market opportunity 19
Vendor strategies 21
Changes in enterprises’ security needs 22
Industry issues 23
Ease of integration 23
Ease of management 23
Return on investment 23
Business issues 23
Innovation largely continues to come from smaller vendors 23
Acquisitions still provide the best route to filling portfolio gaps 24
The Microsoft effect 24
Technology issues 24
The shift towards appliances 24
The emergence of multi-function security appliances 24
Embedding security within existing solutions 25
IT spending on security 25
Chapter 3 Emerging security threats 30
Summary 30
A new breed of security threats 31
Viruses 32
Spam 32
Directory harvest attacks (DHAs) 33
Phishing 33
Spyware 33
IM and P2P security 34
Web services security 34
WLAN security 35
Focus on education 35
Encourage granular WLAN security policies 36
Promote greater use of more advanced security solutions 37
VoIP security 38
Work closely with end-user focus groups 40
Develop solutions with in-built security functionality 40
Consistent security policies 40
Mobile security 41
Ease of integration and installation 43
‘In the cloud’ security solutions 44
Promote phones as authentication devices in their own right 45
Chapter 4 IT security opportunities by
region and vertical 48
Summary 48
Regional investment in IT security 49
Vertical investment in IT security 49
Chapter 5 Enterprise adoption of IT security 54
Summary 54
Large enterprise approach to IT security 55
Medium-sized enterprise approach to IT security 57
Chapter 6 SMB adoption of IT security 62
Summary 62
SMB approach to IT security 63
On-site deployment vs. hosted services 65
Chapter 7 The enterprise view of security
outsourcing 68
Summary 68
The case for infrastructure outsourcing 69
Security and privacy managed services 71
Banking is the largest target market for security services providers 74
German and UK enterprises’ stricter security approaches provide good
opportunities 75
Chapter 8 Vendor overview 78
Summary 78
Choosing an IT solutions provider 79
Geographical and size differences 79
Symantec leads the security market 81
Vendor dynamics 83
Symantec 83
Check Point 87
McAfee 88
Microsoft 89
Index 90
List of Figures
Figure 2.1: The security market is relatively saturated, with firewall and VPN technologies leading
the way 19
Figure 2.2: Enterprise applications and security are set to receive the most investment despite their
high market penetration 27
Figure 3.3: Email-based threats and their relative importance 31
Figure 3.4: Have security fears held back the deployment of WLAN in your organization? 36
Figure 3.5: Have security fears held back the deployment of VoIP in your organization? 38
Figure 3.6: Elements of the network where mobile security solutions can be placed 44
Figure 5.7: Most influential positions within large enterprises when making investment decisions
regarding security solutions 56
Figure 5.8: Large enterprises’ preferred approach to buying security solutions 57
Figure 5.9: Most influential positions within medium-sized enterprises when making investment
decisions regarding security solutions 58
Figure 5.10: Medium-sized enterprises’ preferred approach to buying security solutions 59
Figure 6.11: Extent to which small enterprises currently have or use security solutions 63
Figure 6.12: Most influential positions within small enterprises when making investment decisions
regarding security solutions 64
Figure 6.13: Small enterprises’ preferred approach to buying security solutions 65
Figure 7.14: Enterprise outsourcing and managed services market conceptualization 69
Figure 7.15: Solid, if unspectacular, growth is forecast in infrastructure outsourcing and managed
services 70
Figure 7.16: Strong revenue growth is forecast in the S&P managed services market 73
Figure 7.17: Likely to outsource security and privacy in the next two years 75
Figure 8.18: Vendors that large enterprises believe to be leaders in the field of security solutions 81
Figure 8.19: Vendors that medium-sized enterprises believe to be leaders in the field of security
solutions 82
Figure 8.20: Vendors that small enterprises believe to be leaders in the field of security solutions 82
List of Tables
Table 2.1: Global enterprise security market forecast 2006-2010 ($m) 26
Table 4.2: Global enterprise security market forecast, 2006 to 2010, by geographic region ($m) 49
Table 4.3: Global enterprise security market forecast for financial services 2006-2010 ($m) 50
Table 4.4: Global enterprise security market forecast for manufacturing 2006-2010 ($m) 51
Table 5.5: Extent to which large enterprises currently have or use security solutions 55
Table 5.6: Extent to which medium-sized enterprises currently have or use security solutions 57
Table 7.7: Do you outsource security now or are you considering outsourcing in the next 6
months? 2 years? 71