|
|
|
|
Security as a Service
An ENTERPRISE MANAGEMENT ASSOCIATES® (EMA™) Research Report
Written by Scott Crawford
June 2010
Sponsored by:
IT & DATA MANAGEMENT RESEARCH,
INDUSTRY ANALYSIS & CONSULTING
IT & DATA MANAGEMENT RESEARCH,
INDUSTRY ANALYSIS & CONSULTING
Table of Contents
Executive Summary .................................................................................................................................................... 1
Introduction ................................................................................................................................................................. 3
Domains of Security Services................................................................................................................................... 3
Services Categories vs. the Services “Continuum”......................................................................................... 4
Security SaaS vs. Security “in” the Cloud ......................................................................................................... 5
The Focus of This Study: Managed Security Services and Security SaaS ........................................................ 6
2010 EMA “Security as a Service” Survey ............................................................................................................. 6
Understanding “Pushback” as Well as Motivators for Adoption................................................................ 6
Survey Structure.................................................................................................................................................... 7
Demographics: Worldwide Responses from Enterprises and SMBs.......................................................... 7
Users of MSS and Security SaaS: IT and Security Budgets...............................................................................10
Budgets for IT – and IT Security – Have Grown ........................................................................................11
The SMB Security Budget “Squeeze”.............................................................................................................12
What About the Large Enterprise? .................................................................................................................13
Users of MSS and Security SaaS: Security Management Challenges ..............................................................14
Drivers for Services Adoption: Observations .....................................................................................................17
Managed Security Services.......................................................................................................................................19
For Current MSS Users: Showing Value ........................................................................................................19
Managed Encryption and Trust Services: Solving Outsourcing’s Data Security Paradox .................... 23
Where MSS are Not in Use or Use is Declining: Reasons Why ................................................................24
Security SaaS...............................................................................................................................................................25
Trends in Security SaaS Use..............................................................................................................................27
The Advantages of Security SaaS ....................................................................................................................29
Where Security SaaS is Not in Use or Use is Declining: Reasons Why....................................................32
Security as a Service
©2010 Enterprise Management Associates, Inc. All Rights Reserved. | www.enterprisemanagement.com
IT & DATA MANAGEMENT RESEARCH,
INDUSTRY ANALYSIS & CONSULTING
Service Provider SLAs: Defining Security Performance ...................................................................................34
Metrics and Reports............................................................................................................................................35
Processes and Procedures .................................................................................................................................37
Performance Remedies ......................................................................................................................................38
Services of Services: Some Implications........................................................................................................39
EMA Perspective.......................................................................................................................................................40
What Do Today’s Security Services Customers Advise? .............................................................................40
Where Are Security Services Headed?............................................................................................................41
Case Study: The SaaS Model Stands Out in Global Vulnerability Management .......................................... 44
Defining a Global Challenge.............................................................................................................................44
The Qualys Advantage.......................................................................................................................................45
SaaS + Automation = A Worldwide Deployment Made Practical............................................................46
Case Study: HP Website Vulnerability Assessment SaaS Breaks Down Silos for a
Healthcare Technology Company..........................................................................................................................48
Breaking Down Barriers in Management Tools............................................................................................48
Planning for Success with a Phased Deployment.........................................................................................49
A Positive Shift in Strategic Focus...................................................................................................................50
Appendix A: Survey Demographics......................................................................................................................51
Security as a Service
©2010 Enterprise Management Associates, Inc. All Rights Reserved. | www.enterprisemanagement.com
|
|
|
|