Change

GLOBAL INVESTOR 1.17 —30
“Bad news about cybersecurity is actually
good news for the IT security industry.”
Ulrich Kaiser
Companies are spending
most for network security
Security and vulnerability management, and
network security are the fastest growing
segments within IT security. Corporate endpoint,
and Web security are getting disrupted by next
generation solutions. Source: IDC, CS estimates
in USD bn
40000
35000
30000
25000
20000
15000
10000
5000
0
2012 2017
Network security
Security and vulnerability
Endpoint security
Identity and access management
Web security
Messaging security
Other
blocking cyberattacks. As a result, many organizations
have adopted the detection-and-response
approach to strengthen their security.
New trends in cybersecurity
+53
%
+83
%
We expect security technologies such as security
information and event management
(SIEM) and secure Web gateways (SWG) to
evolve. Organizations are likely to increasingly
focus on detection and response, because
taking a preventive approach has not been
successful in blocking malicious attacks so
far and probably will not be successful in the
future. Thus, businesses should balance their
spending and include both.
We can imagine security spending to
evolve to become more service-driven as businesses
continue to struggle with an overall
lack of cybersecurity talent in the industry.
Managed detection and response (MDR)
is growing as organizations are faced with
having to use both technology and human
expertise to pinpoint risks and improve the cyber
environment. This is especially relevant in
addressing insider threats and targeted advanced
threats.
Hackers wanted – high salary reward
The purchase and implementation of new security
technologies is vital to protect businesses,
and so is the development of cybersecurity
skills in employees, which are not
reflected in the Gartner estimates and come
as additional costs. These are justified by a
shortage of skilled security professionals,
which is both dangerous and expensive since
it leaves businesses vulnerable to attack, resulting
in reputational damage and data loss.
The most highly specialized technical skills
are the ones in greatest demand and claiming
high salaries. Businesses are seeking professionals
with expertise in software development,
attack mitigation, intrusion detection,
network monitoring and other areas of cybersecurity.
They need not look far: convince
hackers to change allegiance, vindicate them
and use their skills to maintain a safe cyber
environment. Hackers are motivated by a multitude
of reasons, such as profit, protest or
simply challenge. Another reason, and one
that can be used for the good, is to evaluate
system weaknesses to help formulate defenses
against potential hackers.
Ulrich Kaiser
Research Analyst
+41 44 334 56 49
ulrich.kaiser@credit-suisse.com