Security: Trends to watch in 2016

© 2016 IBM Corporation

IBM Market Development & Insights

Note: This report is based on internal IBM analysis and is not meant to be a statement of direction by IBM nor is IBM committing to any particular technology or solution.

Security Trends to Watch in 2016Quantity and complexity of external threats increaseIBM HorizonWatch Trend Report – External Version

Sonya Gordon, Market Development, Senior Advisor - IBM SecurityMaureen Kelledy, Product Manager, bluemine – IBM SecurityBill Chamberlin, Product Manger, bluemine – HorizonWatchApril 10, 2016




About This Trend Report

10April2016

Purpose: The slides provide an overview on the I.T. Security trend

Content: Summary information about the I.T. Security marketplace, including trends drivers, spending trends, industry business cases, and adoption challenges. Also included are links to additional resources.

How To Use This Report: This report is best read/studied and used as a learning document. You may want to view the slides in slideshow mode so you can easily follow the links

Available on Slideshare: This presentation (and other HorizonWatch Trend Reports for 2016) will be available publically on Slideshare at http://www.slideshare.net/horizonwatching

Please Note: This report is based on internal IBM analysis and is not meant to be a statement of direction by IBM nor is IBM committing to any particular technology or solution.

2 HorizonWatch Trend Report: I.T. Security (External Version)

http://www.slideshare.net/horizonwatching




Security – Overview of Trend

Drivers A high profile security breach can cause major damage to a

brand Increased focus on Corporate risk management, governance,

compliance. Virtualization/Cloud = Separation of data user and data owner Growth in mobile, wearables, and IoT devices means new

endpoints. Mobile employees want access anytime, anywhere Increased threats, including malware, cybercrime, Phishing,

SPAM, bots Trusted Identity - trusted, privacy-enabling, shared and easy-to-

use identitiesInhibitors/Challenges Security is a barrier to cloud adoption, mobile, and IoT ROI is still not a true value of measurement of security

investment BYO Everything Increasing complexity of security environment Skills

Key Insights

10April20163 HorizonWatch Trend Report: I.T. Security (External Version)

Implications Increased pressure on the CISO

role to manage risk end-to-end across entire organization and every endpoint, every network connection

Increased need for skilled security professionals and service providers

Compliance will require continued investment

IT must understand implications of key trends such as cloud, mobility, social, big data, IoT, etc.

Encryption behind the firewall becomes a necessity

Biometrics continues to be an emerging technology that can be embedded into mobile solutions to enhance information security

Today, our world's infrastructure is both more sophisticated and more interconnected than ever before - linking vast amounts of information and services in new ways, but also introducing more security complexities and challenges in roughly equal proportion.




Security: 5 trends to watch in 20161. Market growth. The security market continues to grow

as the result of increased number of endpoints, increased complexity and new external threats

2. Enterprises look to services vendor for help. Security services, especially professional services, are in increased demand. Network security services is a large segment. Expect strong demand for both mobile enterprise management and managed security services.

3. Enterprises reduce the number of security vendors with which they work. Enterprises will place a higher value on solutions from vendors with broad security portfolios.

4. Internet of Things applications create new security revenue opportunities. The increased security risk of IoT over pure IT systems remains a key challenge for IoT implementations. Enterprise look to consultants for help.

5. Demand increases for SECaaS. Customers are choosing cloud-based security services for improved flexibility and scalability of security functions. Expect interest in incident response services (e.g., detection and remediation) and SIEM as a Service in 2016. Source: MD&I HorizonWatch, TBR

“The global cyber security Market to grow from $106.32 Billion in 2015 to $170.21 Billion by 2020, at a Compound Annual Growth Rate (CAGR) of 9.8%.” MarketsandMarkets

“By 2017, 75% of large enterprises will receive custom threat intelligence information tailored to their industry, company, brand, and environment” IDC

Market Trends


Other views on 2016 Trends• CIO.com :

5 information security trends that will dominate 2016

• CIO.com: 9 biggest information security threats through 2018

• Forbes.com: Cyber Security Trends To Watch: 2016

• NetworkWorld: 5 cybersecurity trends to watch for 2016

• IT Business Edge: 10 Security Trends to Look for in 2016

• Gartner: Top Security Trends for 2015-2016

http://www.marketsandmarkets.com/PressReleases/cyber-security.asp

http://www.idc.com/getdoc.jsp?containerId=prUS25333114

http://www.cio.com/article/3016791/security/5-information-security-trends-that-will-dominate-2016.html



http://www.cio.com/article/3046760/security/9-biggest-information-security-threats-through-2018.html


http://www.forbes.com/sites/riskmap/2016/03/08/cyber-security-trends-to-watch-2016


http://www.networkworld.com/article/3019235/security/5-cybersecurity-trends-to-watch-for-2016.html

http://www.itbusinessedge.com/slideshows/10-security-trends-to-look-for-in-2016-10.html


http://www.gartner.com/webinar/3040924




In 2016, look for increased demand for SIEM, IAM, mobile security and managed security services.

Market Trends


Security Intel/Event Management (SIEM): Demand for SIEMs in 2016 will go beyond simple log collection/correlation to include more intelligence and analytics.

IAM. IAM is being deployed more often as a service. Small businesses are deploying IAM solutions as a service due to limited IT resources, while larger businesses existing on-premises investments in IAM are beginning to consider IAM in the cloud.

Mobile security: As mobility security services begin to mature, more demand for blended managed and hosted security mobility services. Success depends on a combination of people, process, and technology

Managed Services. Enterprises increasingly expect a flexible blend of managed and hosted security services as well as varying levels of monitoring and management for different areas of their business.

“The IT infrastructure is under constant attack from a variety of players from mischief-makers to nation states and everyone in between. The cybercrime environment is most interested in committing financial fraud, data theft, corporate espionage, and disruption or destruction of infrastructure and processes.”- IDC

“The increase in security spending is being driven by government initiatives, increased legislation and high-profile data breaches. Security testing, IT outsourcing, and identity and access management present the biggest growth opportunities for technology providers.”- Gartner

Solutions Review: Three Big Takeaways From Gartner’s 2015-2016 SIEM Critical Capabilities Report


http://www.gartner.com/newsroom/id/3135617

http://solutionsreview.com/security-information-event-management/2016/03/11/three-takeaways-from-gartner-siem-critical-capabilities/






Trends to watch within selected vertical industries

Prepared by TBR, Inc.

Market Trends


• Retail. The significant and widely publicized breaches at Target and The Home Depot raised risk awareness and spurred more security spending in the retail industry. Retailers’ OEM partners, including point of sale (POS) manufacturers, and suppliers are also motivated to invest in security controls to maintain their relationships with retailers.

• Healthcare. Because medical records cannot be cancelled like credit cards, they have a high value to cybercriminals. Breaches against healthcare providers are frequently attributed to highly organized, well-funded criminal organizations, compelling healthcare companies to expand their advanced threat detection projects.

• Banking. The biggest security challenge for banking customers is assessing the security capabilities of their third-party business partners. To decrease risk of attacks that originate in third parties’ infrastructures, banks will increase spending on products and services that help them monitor the security postures of third parties.

• Telco. Telecommunications operators are increasingly targeted by hackers and hacktivists that aim to disrupt phone and Internet service for millions of consumers and businesses. While most operators have established strong security controls, they still face significant risks in their supply chains, including partners’ security infrastructure sourced from manufacturers in different countries.

“Security features are rapidly being embedded into business applications. By 2018, 25% of security applications that were previously purchased independently will be incorporated directly into business applications.”- IDC

“Enterprises and organizations are engaged in a constant arms race with the attacking elements and generally the perception is that the offense is winning.”- IDC

HIN: Infographic: 2016 Healthcare Privacy & Security Outlook



http://hin.com/blog/2016/02/26/infographic-2016-healthcare-privacy-security-outlook/

http://hin.com/blog/2016/02/26/infographic-2016-healthcare-privacy-security-outlook/




Staffing shortages, cloud security concerns and international security laws continue to inhibit adoption of security solutions

Security staffing shortages. Nearly two-thirds of organizations worldwide report challenges hiring skilled IT security professionals. Security staffing shortages are especially pronounced in the U.S., where demand for security professionals will grow by 53% through 2018.

Cloud security concerns. Cloud security concerns persist, with many enterprises so concerned about security breaches that they don’t invest in the underlying cloud technology.

International privacy and data location regulations. There are hundreds of different laws around data collection, processing and transfer as well as breach notification in different countries, making it difficult for organizations to execute a security strategy that will be acceptable in all regions.

Source: MD&I HorizonWatch, TBR, Inc.

“The information security workforce shortfall is widening. In this year’s survey, 62% of the survey respondents stated that their organizations have too few information security professionals.” (ISC)²: Global Information Security Workforce Study

“For all types of cloud environments, security remains the top concern across the board. For firms not using cloud, 75% said security concerns were preventing their organization from using public cloud platforms” Forrester: Benchmark Your Enterprise Cloud Adoption

Adoption Challenges


Ponemon: Understaffed and at Risk: Today’s IT Security Department

http://www.ponemon.org/local/upload/file/IT%20Security%20Jobs%20Research%20Report%20FINAL4.pdf

https://www.isc2cares.org/IndustryResearch/GISWS/

https://www.forrester.com/report/Benchmark+Your+Enterprise+Cloud+Adoption/-/E-RES117042






The security job roles in organizations continue to be a challenge to fill with offering a competitive salary being one of the top inhibitors

“Organizations represented in this research find it difficult to find or keep staff . Primarily it is the inability to offer competitive salaries and lack of internal resources or adequate budget. “ Ponemon Institute

Adoption Challenges


“The IT security function is understaffed. Seventy percent of respondents say their organizations do not have enough IT security staff. “ Ponemon Institute








Security – Selected Analyst Information and Resources

451 Research: Security ABI Research: Security and Digital Security Forrester:

Security Research Security Blog Posts

Frost & Sullivan: Network Security Gartner:

Security and Risk Management Security Blog posts Security and Privacy Information Security

IDC: Security Products and Services Security and Business Continuity, Security Research Search for Security IDC FutureScape

: Worldwide Security 2015 Predictions

Gartner

Featured Links


“20% of security markets will shift protecting people and their assets to securing “things” that communicate among themselves without direct human interaction.” – IDC Security Infographic

https://451research.com/search?sector=135

http://www.abiresearch.com/search/?q=security

https://www.abiresearch.com/research/practice/cyber-security/

http://www.forrester.com/search?tmtxt=security

http://www.forrester.com/search?N=10003+5014&range=504001&tmtxt=security

http://www.frost.com/prod/servlet/svcg.pag/ITNT

http://www.gartner.com/technology/research/security-risk-management.jsp

https://www.google.com/search?q=%22Security%22+site:http://blogs.gartner.com

http://www.gartner.com/technology/core/products/research/topics/securityPrivacy.jsp

http://www.gartner.com/technology/initiatives/identity-access-management.jsp

http://www.idc.com/prodserv/maps/securityproducts.jsp

http://www.idc.com/analysts/viewteamprofile.jsp?containerId=TEA001466

http://www.idc.com/search/simple/perform_.do?query=security&page=1&hitsPerPage=25&sortBy=RELEVANCY&lang=English&srchIn=ALLRESEARCH&src=&athrT=10&cmpT=10

https://www.google.com/search?q=security+site:idc.com

https://event.on24.com/eventRegistration/EventLobbyServlet?target=reg20.jsp&eventid=857155&sessionid=1&key=E67B16C0729F3E094F8291A991FA679F&sourcepage=register




http://www.gartner.com/technology/initiatives/identity-access-management.jsp

https://www.idc.com/infographics/security/IDCSecurityGraphic.pdf




Security – Selected Media Websites and Other Resources

CIO.com: Security ComputerWorld: Security Economist: Defending the digital frontier eWeek: Security Forbes: CyberSecurity and Security InformationWeek: Dark Reading Infotech: Security InfoWorld: Security Network World: Security Research Center NY Times: Search VentureBeat: Security Whitehouse.gov: CyberSecurity Wired: Security


“Interest in security technologies is increasingly driven by elements of digital business, particularly cloud, mobile computing and now also the Internet of Things, as well as by the sophisticated and high-impact nature of advanced targeted attacks.”- Elizabeth Kim, research analyst at Gartner

“By 2016, 25% of large enterprises will make security-related spending decisions based on analytical determinations of risk.”- IDC

Security Intelligence: 2016 IBM X-Force Report

Featured Links

http://www.cio.com/topic/3089/Security

http://www.computerworld.com/s/topic/17/Security

http://www.economist.com/news/special-report/21606416-companies-markets-and-countries-are-increasingly-under-attack-cyber-criminals

http://www.eweek.com/security/

http://www.forbes.com/search/?q=cybersecurity

http://www.forbes.com/search/?q=security

http://www.darkreading.com/

http://www.infotech.com/search?q=security

http://www.infoworld.com/d/security

http://www.networkworld.com/topics/security.html

http://query.nytimes.com/search/sitesearch/

http://venturebeat.com/category/security/

http://www.whitehouse.gov/issues/foreign-policy/cybersecurity

http://www.wired.com/threatlevel/security/




https://securityintelligence.com/2015-ibm-x-force-report-breaches-without-borders-and-tales-from-the-cybercrime-underground/






Security – Selected IT Vendor & Consultant Websites & Resources

Accenture: Security Services Amazon Web Services: Security and Compliance Center Booz Allen: Cyber Solutions Cisco: Security Deloitte: Cyber Security Services EMC: Security Google: Application Security HP: Security and Risk Management IBM: Security and Security Software and

Chief Information Security Officer Microsoft: Security Tech Center Oracle: Security Solutions PWC: Managing cyber risks in an interconnected world SAP: Application Performance & Security Tata Consultancy Services: Managed Security Services VMware: Security and Compliance Wipro: Enterprise Information Security

IBM: Security Redbooks


“Expect increased investment in emerging offerings, such as endpoint detection and remediation tools, threat intelligence and cloud security tools, such as encryption.”- Gartner

“By 2017, 90% of an enterprise's endpoints will utilize some form of hardware protection to ensure that endpoint integrity is maintained.”- IDC

Featured Links

http://www.accenture.com/us-en/technology/technology-consulting/security-solutions/Pages/index.aspx

http://aws.amazon.com/security/

http://www.boozallen.com/consulting/solutions/cyber

http://www.cisco.com/en/US/products/hw/vpndevc/index.html

http://www2.deloitte.com/global/en/pages/risk/solutions/cyber-security-services.html

http://www.emc.com/security/index.htm

http://www.google.com/about/appsecurity/

http://www8.hp.com/us/en/business-solutions/security-overview.html

http://www-03.ibm.com/security/

http://www-03.ibm.com/security/products.html?lnk=sec_home

http://www-03.ibm.com/security/ciso/

http://technet.microsoft.com/en-us/security/

http://www.oracle.com/us/technologies/security/overview/index.html

http://www.pwc.com/gx/en/consulting-services/information-security-survey/assets/the-global-state-of-information-security-survey-2015.pdf

http://www54.sap.com/solutions/tech/application-foundation-security.html

http://www.tcs.com/offerings/it_infrastructure/managed_security/Pages/default.aspx

http://www.vmware.com/solutions/datacenter/cloud-security-compliance/protect-critical-applications.html

http://www.wipro.com/products/enterprise-information-security.aspx

http://www.redbooks.ibm.com/Redbooks.nsf/portals/Security?Open&count=20







Security – Selected Social Media Sites and Searches

Facebook Security page Google Blog Search: Cybersecurity Google+ Communities Search: Security LinkedIn Group Search: Security IBM IBM Security Intelligence Pinterest Search: Information Security and

Cybersecurity Slideshare: IT Security and Information Security

and Cybersecurity Twitter: Search on hashtags: #security /

#cybersecurity / #infosec YouTube:

Information Security Playlists / Channels CyberSecurity Playlists / Channels

Wikipedia: Information Security and CyberSecurity

Information Security playlists YouTube


Featured Links

https://www.facebook.com/security

https://www.google.com/search?q=cybersecurity&tbm=nws#q=cybersecurity&tbm=nws&tbs=nrt:b

https://plus.google.com/s/security/communities

http://www.linkedin.com/vsearch/g?type=groups&keywords=security

http://securityintelligence.com/

http://pinterest.com/search/pins/?q=%22information%20security%22

https://www.pinterest.com/search/pins/?q=cybersecurity

https://www.google.com/search?q=intitle:%22IT+Security%22+site:www.slideshare.net

https://www.google.com/search?q=intitle:%22Information+Security%22+site:www.slideshare.net

https://www.google.com/search?q=intitle:%22cybersecurity%22+site:www.slideshare.net

https://twitter.com/search-home

https://www.youtube.com/results?search_query=%22information+security%22,+playlist

https://www.youtube.com/results?search_query=%22information+security%22,+channel

https://www.youtube.com/results?search_query=%22cybersecurity%22,+playlist

https://www.youtube.com/results?search_query=%22cybersecurity%22,+channel

http://en.wikipedia.org/wiki/Information_security

http://en.wikipedia.org/wiki/cybersecurity

https://www.youtube.com/results?search_query=%22information+security%22,+playlist




Security – IBM Resources and Linksibm.com links IBM Security: www.ibm.com/security/ Services: IT Security Services / Secure Engineering

/ Resiliency Services Software: IBM Security Systems: Security Cloud Computing: Cloud Security developerWorks: Security x-Force: X-Force IBM Redbooks: Security

IBM Social Media Platforms Social Aggregator: Security Community: IBM Security Intelligence Twitter: @ibmsecurity and @ibmxforce - hashtags:

#ibmsecurity and #infosec Blogs: Security Intelligence Blog / X-Force /

CISO Corner YouTube: IBM Security LinkedIn Group: IBM Security (7,434 members) Slideshare: IBM decks tagged Security


IBM Security video: Collaborate for Better Cybersecurity Defenses

“Cybersecurity is more than an IT concern, it requires engagement from across the business. However, many executives are either unclear on the risks or not sufficiently engaged in threat management.” IBM: Cybersecurity perspectives from the boardroom and C-suite

Featured Links

http://www.ibm.com/security/

http://www-935.ibm.com/services/us/en/it-services/security-services.html

http://www-03.ibm.com/security/secure-engineering/

http://www.ibm.com/smarterplanet/us/en/business_resilience_management/overview/

http://www.ibm.com/software/products/en/category/SWI00

http://www.ibm.com/smarter-computing/us/en/data-security/

http://www-03.ibm.com/security/cloud-security.html

http://www.ibm.com/developerworks/security/

http://www-03.ibm.com/security/xforce/


https://www-304.ibm.com/social/aggregator/security


http://twitter.com/

https://twitter.com/ibmsecurity

https://twitter.com/ibmxforce

https://twitter.com/ibmxforce

https://twitter.com/search?q=ibmsecurity

https://twitter.com/search?q=infosec

https://twitter.com/search?q=infosec


http://blogs.iss.net/

http://securityintelligence.com/topics/ciso-corner/

http://www.youtube.com/ibmsecuritysolutions

http://www.linkedin.com/groups?gid=1846255

http://www.slideshare.net/ibm/tagged/IBM%20Security

https://www.youtube.com/watch?v=hf08FLXvSQg

https://www.youtube.com/watch?v=hf08FLXvSQg

https://www-01.ibm.com/marketing/iwm/dre/signup?source=ibm-WW_Security_Services&S_PKG=ov43890&S_TACT=000000NJ&S_OFF_CD=10000252






Selected links to additional resources

1. Baker Hotstetler: 2015 International Compendium of Data Privacy Laws

2. CIO.com : 5 information security trends that will dominate 2016

3. CIO.com: 9 biggest information security threats through 2018

4. Forbes.com: Cyber Security Trends To Watch: 2016

5. Gartner: Top Security Trends for 2015-2016

6. InfoWorld: Why hackers want your healthcare data most of all

7. ISC Global Information: Security Workforce Study

8. IT Business Edge: 10 Security Trends to Look for in 2016

9. NetworkWorld: 5 cybersecurity trends to watch for 2016

10. Ponemon Institute Ponemon Institute 2015 Global Study on IT Security Spending & Investments

11. PwC: PwC Global State of Information Security 2016

12. Verizon Wireless: 2015 Verizon Data Breach Investigation Report


Featured Links

http://www.bakerlaw.com/files/Uploads/Documents/Data%20Breach%20documents/International-Compendium-of-Data-Privacy-Laws.pdf




http://www.gartner.com/webinar/3040924

http://www.infoworld.com/article/2983634/security/why-hackers-want-your-health-care-data-breaches-most-of-all.html

http://www.cioinsight.com/security/organizations-grapple-with-security-talent-shortage.html


http://www.networkworld.com/article/3019235/security/5-cybersecurity-trends-to-watch-for-2016.html

http://www.ponemon.org/blog/around-the-world-it-security-practitioners-face-a-common-problem-a-budget-that-is-inadequate-to-deal-with-cyber-threats

http://www.ponemon.org/blog/around-the-world-it-security-practitioners-face-a-common-problem-a-budget-that-is-inadequate-to-deal-with-cyber-threats

http://www.pwc.com/gx/en/issues/cyber-security/information-security-survey/key-findings.html

http://www.verizonenterprise.com/DBIR/2015/




More Insights on Technology Trends are Available

15

Other slide decks in this IBM HorizonWatch 2016 Trend Report series have been posted to Slideshare

You are also invited to check out the following IBM websites and resources– IBM Academy of Technology– IBM Center for Applied Insights– IBM Institute for Business Value– IBM Research and Research News and 5 in 5– IBM’s THINK blog


http://www.slideshare.net/HorizonWatching

http://www-03.ibm.com/ibm/academy/index.html

http://ibmcai.com/

http://www-935.ibm.com/services/us/gbs/thoughtleadership/

http://www.research.ibm.com/

http://ibmresearchnews.blogspot.com/

http://www.ibm.com/smarterplanet/us/en/ibm_predictions_for_future/ideas/

http://www.ibm.com/blogs/think/