ESG, on Jul 28, 2022
Securing applications has become more difficult than ever thanks to heterogeneous application environments, distributed responsibility for application security, and advanced attack campaigns. Converged application protection platforms have emerged to address many of these issues, but organizations can struggle with prioritizing the capabilities they require, assessing the different types of tools available, and meeting the diverse needs of a broad set of stakeholders.
Jon Oltsik, on Jul 25, 2022
As organizations add more IT assets, their attack surfaces also grow, and so does the organization's need for better security hygiene and posture management. Security hygiene and posture management rely on a broad range of tools such as vulnerability management, asset management, attack surface management and security testing to monitor all IT assets in an organization.
Scott Sinclair, on Jul 23, 2022
Developer velocity – the speed at which new applications can be developed and deployed – often determines success for digital transformation and digital business initiatives. Many businesses, however, don't have the infrastructure in place to optimize application development efforts and fully maximize the potential of these initiatives. Given the prominent role that IT transformation plays in digital transformation initiatives, businesses need to take a holistic "infrastructure-out" approach to their digital transformation journeys, with a focus on regular and constant collaboration between IT operations and application development teams.
John Grady, on Jul 23, 2022
Securing applications has become more difficult than ever. Increasingly heterogeneous application environments coupled with distributed responsibility for application security has resulted in security complexity and tool sprawl. Further, attackers understand this challenge and use it to their advantage. While exploits against known application vulnerabilities remain common, advanced campaigns use bots to amplify denial of service and credential attacks that target web applications as well as the APIs they rely upon. Converged application protection platforms have emerged to address many of these issues, but organizations can struggle with prioritizing the capabilities they require, assessing the different types of tools available, and meeting the diverse needs of a broad set of stakeholders.
In order to gain insight into these trends, ESG surveyed 366 IT, cybersecurity, and application development professionals personally involved with web application protection technology and processes at North American organizations.
This study sought to answer the following questions:
Survey participants represented a wide range of industries including manufacturing, technology, financial services, and retail/wholesale. For more details, please see the Research Methodology and Respondent Demographics sections of this report.
John Grady, on Jul 21, 2022
In order to gain insight into how public cloud computing services are impacting network security strategies, ESG surveyed 255 cybersecurity and IT/information security professionals at organizations in North America (US and Canada) familiar with their organization’s network security tools and processes and responsible for evaluating, purchasing, and/or operating corporate network security controls across public cloud infrastructure and on-premises data centers/private cloud.
This study sought to answer the following questions:
Survey participants represented a wide range of industries including manufacturing, financial services, retail, healthcare, and technology. For more details, please see the Research Methodology and Respondent Demographics sections of this report.
Jon Oltsik, on Jul 18, 2022
In late 2021 and early 2022, ESG in partnership with the Information Systems Security Association (ISSA) conducted a survey of 280 cybersecurity professionals focused on security processes and technologies at organizations of all sizes in industries such as technology, government, financial services, and business services, among others, spanning countries in North/Central/South America, Europe, Asia, and Africa.
Based upon the research collected for this project, ESG and ISSA reached the following conclusions:
ESG, on Jul 12, 2022
ESG’s Complete Survey Results provide the complete output of syndicated research surveys in graphical format. In addition to the data, these documents provide background information on the survey, including respondent profiles at an individual and organizational level. It is important to note that these documents do not contain analysis of the data.
This Complete Survey Results presentation focuses on how modern application environments and API usage have impacted security strategies, including the inflection point organizations have reached with traditional web application firewalls, as well as preferences for converged web application and API protection solutions.
Security hygiene and posture management is still one of the least mature areas of cybersecurity, and the external attack surface continues to be vulnerable and prone to exploitation at many organizations. While diligent efforts, such as improved asset management and security testing, can help, security hygiene and posture management remains a challenge. Organizations that are addressing their security hygiene and posture management proactively are currently making the most progress. This brief looks at the research data and reports on some of the things these organizations are doing to get ahead.
Scott Sinclair, on Jul 11, 2022
As enterprises digitally transform, business application environments scale at an accelerated pace and become more distributed not only in the cloud, but also on premises. As a result, a siloed approach to infrastructure and operations is no longer viable. The tendency among many organizations is to view migration to the cloud as the sole remedy for simplifying operations and increasing the velocity of app development. However, on-premises application environments are alive and well, and the data center is far from dead. Therefore, standing still is not an option for data center environments, where app modernization strategies need to reflect the transformation activities of existing and net-new applications in multiple environments while overcoming integration challenges in a variety of cloud and on-premises locations.
Scott Sinclair, on Jul 7, 2022
IT operations teams continue to strive to improve collaboration with developers on building modern application architectures. As companies accelerate or embark on their digital transformation journeys, what is the expected role of ITSM in enabling businesses to realize the benefits of automation, observability, intelligence, and optimization? ESG recently surveyed IT, DevOps, and application development professionals responsible for application infrastructure to find the answers.
Find out what ESG research uncovered with this free infographic, Distributed Cloud Series: Observability from Code to Cloud.
Organizations continue to rely on user and machine identities that are susceptible to compromise, misuse, and theft. Modern, cloud-managed identity services are available, but organizations have been slow to pivot their security programs to an approach that focuses on identity orchestration and experiences. ESG surveyed IT and cybersecurity professionals responsible for identity and access management programs and solutions to gain insights into these trends.
Data is just data unless you understand its relevance. Truly understand technology trends and market dynamics, and swiftly take advantage of arising business opportunities with Enterprise Strategy Group’s actionable data and analysis.
John McKnight, Vice President, Research and Analyst Services
Learn More about custom market research.
