Cyber Security Institute
§ Current Worries
Top 3 Worries
- Regulations
- Old Firewall Configurations
- Security Awareness
§ Listening
For the best information
- The underground
- Audible
- Executive Excellence
- Music (to keep me sane)
§ Watching
For early warnings
- 150 Security Websites
- AP Newsfeeds
- Vendors
Sunday, November 28, 2004
Growing demand for command-control services
If a new Yankee Group study is any indication, compliance concerns are paying off for vendors that offer command and control services.
“We’re seeing something equally as important as threat mitigation, and that’s command and control,” said Phebe Waterfield, an analyst for the Boston-based research firm.
Companies are being held accountable for their security, and with accountability comes the need for a more mature process.” Waterfield reached that conclusion after talking to representatives from 606 enterprises about their security budgets over the past year.
She said a variety of people were interviewed, including chief financial officers and chief security officers. “The respondents all had input into how their company’s security dollars are spent,” she said.
While threat mitigation has been the chief concern of enterprises in recent years, Waterfield said the trend is shifting in favor of command and control companies.
The study predicts the global security market will generate $12.9 billion in revenue for 2004.
“The threat mitigation segments are perimeter firewalls, network integrity systems, application gateways and system integrity software,” Waterfield said.
Command and control, solutions for managing network security, representing 40% of the security market with an estimated $5.2 billion in revenue for 2004. “Command and control includes identity management, security event management, vulnerability assessments and patching, and intrusion detection audits,” Waterfield said. While threat mitigation services have generated more revenue and a larger market share this year, Waterfield said command and control services have shown the most growth and the feedback she received indicates the trend will continue.
Managed security services, the use of external expertise in operating and improving the performance of security processes. This component includes augmenting in-house operational staff, enhancing security response, reducing operational expenses and improving the security process and strategy,” Waterfield said.
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1028712,00.html