BUDGETS AND OUTLOOK Information Security€¦ · robust data-collection methodologies, 451 Research’s Voice of the Enterprise: Information Security tracks and analyzes the disruption

©2017 451 Research, LLC | W W W. 4 5 1 R E S E A R C H . C O M

Combining a proprietary panel of over 60,000 senior IT buyers with our robust data-collection methodologies, 451 Research’s Voice of the Enterprise: Information Security tracks and analyzes the disruption occurring in the market today and exposes the major opportunities for enterprises, IT vendors, suppliers and investors. The study represents more than 500 completes of a web-based survey, completed by information security decision-makers worldwide, primarily based in North America and Europe, and supplemented by 20 in-depth, phone-based interviews. The sample is representative of small, medium, large and very large organizations in both the private and public sectors. In addition to regular quarterly topics, this survey focuses on enterprise information security budgets and spending as well as cloud security.

REPORT EXCERPT

B U D G E TS A N D O U T LO O K

Information Security

2

©COPYRIGHT 2017 451 RESEARCH. ALL RIGHTS RESERVED.

A B O U T 4 5 1 R E S E A R C H451 Research is a preeminent information technology research and advisory company. With a core focus on technology innovation and market disruption, we provide essential insight for leaders of the digital economy. More than 100 analysts and consultants deliver that in-sight via syndicated research, advisory services and live events to over 1,000 client organiza-tions in North America, Europe and around the world. Founded in 2000 and headquartered in New York, 451 Research is a division of The 451 Group.© 2017 451 Research, LLC and/or its Affiliates. All Rights Reserved. Reproduction and distribution of this publi-cation, in whole or in part, in any form without prior written permission is forbidden. The terms of use regarding distribution, both internally and externally, shall be governed by the terms laid out in your Service Agreement with 451 Research and/or its Affiliates. The information contained herein has been obtained from sources be-lieved to be reliable. 451 Research disclaims all warranties as to the accuracy, completeness or adequacy of such information. Although 451 Research may discuss legal issues related to the information technology busi-ness, 451 Research does not provide legal advice or services and their research should not be construed or used as such. 451 Research shall have no liability for errors, omissions or inadequacies in the information contained herein or for interpretations thereof. The reader assumes sole responsibility for the selection of these materials to achieve its intended results. The opinions expressed herein are subject to change without notice.

NEW YORK1411 Broadway Suite 3200 New York, NY 10018 P 212 505 3030 F 212 505 2630

SAN FRANCISCO140 Geary Street 9th Floor San Francisco, CA 94108 P 415 989 1555 F 415 989 1558

LONDONPaxton House (Ground floor) 30, Artillery Lane London, E1 7LS, UK P +44 (0) 207 426 1050 F +44 (0) 207 657 4510

BOSTON75-101 Federal Street 5th Floor Boston, MA 02110 P 617 598 7200 F 617 357 7495

I N FO R M AT I O N S EC U R I T Y | R E P O RT E XC E R PT

3


A L E R T LO G I C TO P C I T E D V E N D O R I N T W O C LO U D I N F R A ST R U C T U R E S EC U R I T Y C AT EG O R I E S FO R S EC O N D Y E A R I N A R OWThe Voice of the Enterprise (VotE): Information Security, Budgets and Outlook 2016 survey represents the second in-depth look at security budgeting, following the survey performed at the close of 2015. A year-by-year comparison, as well as a predictive look into the future, shows security budgets increasing but also coming under various forms of stress that are currently shifting spending allocations and portend future changes.

NEARLY A QUARTER OF SURVEY PARTICIPANTS LEVERAGE ALERT LOGIC FOR CLOUD INFRASTRUCTURE SECURITY

Vendor Usage – Cloud Infrastructure SecurityQ34. Who is your organization’s primary in use vendor for Cloud Infrastructure Security?

Source: 451 Research, Voice of the Enterprise: Information Security, Budgets and Outlook 2016

22.6%

6.5%

4.8%

4.8%

4.8%

3.2%

3.2%

3.2%

1.6%

1.6%

1.6%

1.6%

1.6%

38.7%

Alert Logic

Microsoft

Dome9 Security

CloudPassage

Amazon

Threat Stack

FortyCloud

Symantec

Palerra

JumpCloud

Evident.io

CloudCheckr

McAfee

Other

n = 62


4


4 1 % O F S U RV E Y PA R T I C I PA N TS S H O R T L I ST A L E R T LO G I C FO R C LO U D I N F R A ST R U C T U R E S EC U R I T Y Cloud security, the second topic of this survey’s research, opens up a series of potential decision points for the security man-ager. Options include porting the solutions of on-premises security vendors to cloud instances and taking on the associated costs, contracting separately with providers specializing in cloud-based security solutions (a category referred to as cloud infrastructure security) or relying largely on what an existing cloud provider has in place.

IT architecture often includes hybrids of on-premises and hosted cloud, and its management is becoming more sophisticat-ed. At the same time, greater familiarity with hosted cloud deployments lowers the perception of security risk associated with cloud. This portends well for hosted cloud solutions, as it creates a market education opportunity around security that could lead to further conversions and growth, in addition to the continuing technology steps that companies must take.

Vendor In Consideration – Cloud Infrastructure SecurityQ35. Who are the top vendors in consideration for Cloud Infrastructure Security?


41.2%

20.6%

20.6%

17.6%

14.7%

11.8%

8.8%

8.8%

8.8%

17.6%

Alert Logic

FortyCloud

Threat Stack

CloudPassage

CloudCheckr

Dome9 Security

Evident.io

JumpCloud

Palerra

Other

n = 34


5


ALERT LOGIC TOP CITED CLOUD INFRASTRUCTURE SECURITY VENDOR TWO YEARS IN A ROW

Vendor Usage – Cloud Infrastructure SecurityQ34. Who is your organization’s primary in use vendor for Cloud Infrastructure Security?


SURVEY PARTICIPANTS SHORTLISTING ALERT LOGIC AS CLOUD INFRASTRUCTURE SECURITY VENDOR NEARLY DOUBLES YEAR-OVER-YEAR

Vendor In Consideration – Cloud Infrastructure SecurityQ35. Who are the top vendors in consideration for Cloud Infrastructure Security?


Q4 2015 (n = 83) Q4 2016 (n = 62)

25.3%

9.6%

8.4%

6.0%

3.6%

2.4%

2.4%

2.4%

1.2%

1.2%

1.2%

36.1%

Alert Logic

Threat Stack

Microsoft

CloudCheckr

FortyCloud

CloudPassage

Palerra

JumpCloud

Amazon

Symantec

Evident.io

Other

22.6%

6.5%

4.8%

4.8%

4.8%

3.2%

3.2%

3.2%

1.6%

1.6%

1.6%

1.6%

1.6%38.7%

Alert Logic

Microsoft

Dome9 Security

CloudPassage

Amazon

Threat Stack

FortyCloud

Symantec

Palerra

JumpCloud

Evident.io

CloudCheckr

McAfee

Other

Q4 2015 (n = 119) Q4 2016 (n = 34)

24.4%

15.1%

10.9%

10.1%

7.6%

5.9%

5.0%

5.0%

1.7%

3.4%

Alert Logic

Threat Stack

CloudPassage

FortyCloud

CloudCheckr

Dome9 Security

Evident.io

Palerra

JumpCloud

Other

41.2%

20.6%

20.6%

17.6%

14.7%

11.8%

8.8%

8.8%

8.8%

17.6%

Alert Logic

FortyCloud

Threat Stack

CloudPassage

CloudCheckr

Dome9 Security

Evident.io

JumpCloud

Palerra

Other

6



About the Author

DA N I E L K E N N E DYR ES E A R C H D I R ECTO R, I N FO R M AT I O N S ECU R I T Y

Daniel Kennedy is Research Director for Information Security at 451 Research, where he is responsible for managing all phases of the Voice of the Enterprise (VoTE) research process for that coverage area. He is an experienced information security professional who has written for both Forbes online and Ziff Da-vis, has provided commentary to numerous news outlets including The New York Times and The Wall Street Journal, and his personal blog Praetorian Prefect was recognized as one of the top five technical blogs in information security by the RSA 2010 Conference.Prior to 451 Research he was a Partner in the information security consultancy Praetorian Security, LLC where he directed strategy on risk assessment and security certification. Before that he was Global Head of Information Security for D.B. Zwirn & Co. as well as Vice President of Application Security and Development Manager at Pershing LLC, a division of the Bank of New York.Daniel holds a Master’s of Science degree in Information Systems from Stevens Institute of Technology, a Master’s of Science in Information Assurance from Norwich University, and a Bachelors’ of Science in Information Management and Technology from Syracuse University. He earned certification as a CEH (Certified Ethical Hacker) from the EC-Council, a CISSP, and has a NASD Series 7 license.

Documents

BUDGETS AND OUTLOOK Information Security€¦ · robust data-collection methodologies, 451 Research’s Voice of the Enterprise: Information Security tracks and analyzes the disruption