
Worldwide Spending on Security & Risk Management Forecast to Grow 11.3% in 2023
Three factors influencing growth in security spending are the increase in remote and hybrid work, the transition from virtual private networks (VPNs) to zero trust network access (ZTNA) and the shift to cloud-based delivery models, according to Gartner, Inc.
“The pandemic accelerated hybrid work and the shift to the cloud, challenging the CISO to secure an increasingly distributed enterprise,” said Ruggero Contu, Senior Director Analyst at Gartner.
“The modern CISO needs to focus on an expanding attack surface created by digital transformation initiatives such as cloud adoption, IT/OT-IoT convergence, remote working and third-party infrastructure integration. Demand for technologies and services such as cloud security, application security, ZTNA, and threat intelligence has been rising to tackle new vulnerabilities and risks arising from this exposure,” he said.
End-user spending on information security and risk management products and services is forecast to grow 11.3% to reach more than $188.3 billion in 2023. Cloud security is the category forecast to have the strongest growth over the next two years. As organisations increase focus on ESG, third-party risk, cybersecurity risk and privacy risk, Gartner forecasts that the integrated risk management market will show double-digit growth through 2024, until greater competition results in cheaper solutions.
Security services including consulting, hardware support, implementation and outsourced services is the largest category of spending, totalling $71.7 billion in 2022, and expected to reach $76.5 billion in 2023 (see Table 1).
Table 1
Worldwide Information Security & Risk Management End-User Spending by Segment, 2021-2023 (Millions of US Dollars)
Market Segment | 2021 Spending | 2021 Growth (%) | 2022 Spending | 2022 Growth (%) | 2023 Spending | 2023 Growth (%) |
Application Security | 4,963 | 20.8 | 6,018 | 21.3 | 7,503 | 24.7 |
Cloud Security | 4,323 | 36.3 | 5,276 | 22.0 | 6,688 | 26.8 |
Data Privacy | 1,140 | 14.2 | 1,264 | 10.8 | 1,477 | 16.9 |
Data Security | 3,193 | 6.0 | 3,500 | 9.6 | 3,997 | 14.2 |
Identity Access Management | 15,865 | 22.3 | 18,019 | 13.6 | 20,746 | 15.1 |
Infrastructure Protection | 24,109 | 22.5 | 27,408 | 13.7 | 31,810 | 16.1 |
Integrated Risk Management | 5,647 | 15.4 | 6,221 | 10.1 | 7,034 | 13.1 |
Network Security Equipment | 17,558 | 12.3 | 19,076 | 8.6 | 20,936 | 9.7 |
Other Information Security Software | 1,767 | 26.2 | 2,032 | 15.0 | 2,305 | 13.4 |
Security Services | 71,081 | 9.2 | 71,684 | 0.8 | 76,468 | 6.7 |
Consumer Security Software | 8,103 | 13.7 | 8,659 | 6.9 | 9,374 | 8.3 |
Total | 157,749.7 | 14.3 | 169,156.2 | 7.2 | 188,336.2 | 11.3 |
Source: Gartner (October 2022)
Remote Work Continues to Drive Investment
Demand for technologies that enable a secure remote and hybrid work environment will increase beyond 2022. As organisations look to create secure work-from-home environments, they are exploring solutions that offer quick return on investment. As a result, technologies such as web application firewalls, access management, endpoint protection platform and secure web gateway will witness short-term demand at least until 2022.
The Rise of Zero Trust Network Access
ZTNA is the fastest-growing segment in network security, forecast to grow 36% in 2022 and 31% in 2023, driven by the increased demand for zero trust protection for remote workers and organizations’ reducing dependence on VPNs for secure access. As organisations become familiar with ZTNA, there is a growing trend to use it not only for remote working use cases but also for workers in the office.
Gartner predicts that by 2025, at least 70% of new remote access deployments will be served predominantly by ZTNA as opposed to VPN services, up from less than 10% at the end of 2021.
Shift to Cloud-Based Delivery Models
Due to multicloud environments, organizations face increased security risks as well as the complexity of operating and managing multiple technologies. Gartner analysts said this will lead to a push toward cloud security and the market share of cloud-native solutions will grow.
The combined market for cloud access security brokers and cloud workload protection platform will grow 26.8% to reach $6.7 billion in 2023. Demand for cloud-based detection and response solutions — such as endpoint detection and response and managed detection and response — will also increase in the coming years.
Gartner clients can learn more in “Forecast Analysis: Information Security and Risk Management, Worldwide” and “Forecast: Information Security and Risk Management, Worldwide, 2020-2026, 3Q22 Update.”
Learn about the top priorities for security leaders in 2022 in the complimentary Gartner ebook 2022 Leadership Vision for Security & Risk Management Leaders.
Fachartikel

400.000 DMARC-Boost nach Microsofts Update für Absender mit hohem Volumen

Ausgewogenes Verhältnis zwischen Notfallwiederherstellung, Backup-Systemen und Sicherheit

Über 100 schädliche Chrome-Erweiterungen entdeckt – getarnt als KI-Tools, VPNs und Krypto-Helfer

Unit 42 warnt: Autonome KI revolutioniert Tempo und Taktik von Cyberangriffen

Cybersicherheit in der Energiebranche: Mehr als die Hälfte der führenden Öl- und Gasunternehmen von Datenpannen betroffen
Studien

Unternehmen blockieren zunehmend GenAI-Tools – DNSFilter-Studie zeigt wachsende Sicherheitsbedenken

Weltweite Investitionen in Quantencomputing nehmen branchenübergreifend zu

Princeton-Forscher warnen vor fatalen KI-Angriffen im Web3-Umfeld

Führungskräfte ohne KI-Wissen? Gartner-Umfrage offenbart Sorgen der CEOs

Schweigen über KI-Erfolge: Was eine neue Ivanti-Studie offenbart
Whitepaper

Russische Cyberangriffe auf westliche Logistik: Deutsche Behörden warnen vor GRU-Einheit 26165

BEC- und FTF-Angriffe – keine andere Cyberbedrohung hat 2024 für mehr Schaden gesorgt

100 Tage bis zum Inkrafttreten des Data Act: Deutsche Unternehmen kaum vorbereitet

Weltweiter Sicherheitslagebericht zeigt dringenden Handlungsbedarf: Vernetzte Prozesse als Schlüssel

BSI warnt: Energieversorgung braucht stärkere Cybersicherheit
Hamsterrad-Rebell

Insider – die verdrängte Gefahr

Sicherer SAP-Entwicklungsprozess: Onapsis Control schützt vor Risiken

Das CTEM-Framework navigieren: Warum klassisches Schwachstellenmanagement nicht mehr ausreicht

Cybersicherheit im Mittelstand: Kostenfreie Hilfe für Unternehmen
