CISO 的思考 – 2023 年纲要

为 CISO 选择安全解决方案的实用指南

与往年一样，2023 年网路威胁格局和性质发生了迅速变化。 2023 年，疫情引发的不断变化的业务和业务趋势继续为 CISO 带来复杂性、营运挑战和安全问题。

Frost & Sullivan 的网路安全研究和开发团队创建了此概要，以帮助所有行业的 CISO 了解与各种安全解决方案相关的关键问题。本概要的要点将帮助您确定哪些解决方案最适合您的业务需求，并提供可操作的见解以协助选择供应商。

本纲要的特征：

• 加强安全态势和选择供应商的实用建议
• Frost & Sullivan 涵盖的多个安全解决方案领域的主要趋势和发展
• 了解您的组织面临的威胁情势和漏洞
• 2024 年网路安全主要趋势

目录

策略要务

• 为什么成长如此困难？
• The Strategic Imperative 8（TM）
• 成长机会推动Growth Pipeline Engine（TM）

执行摘要

• 执行摘要
• 网路安全市场生态系统
• 纲要中的网路安全解决方案

CNAPP（云端原生应用程式保护平台）

• 定义
• 关键策略要务的影响
• 主要趋势
• 讨论和建议
• 主要竞争对手
• 2024年的趋势

CWPP（云端工作负载保护平台）

• 定义
• 关键策略要务的影响
• 主要趋势
• 讨论和建议
• 主要竞争对手
• 2024年的趋势

端点安全

• 定义
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

XDR（扩展检测和响应）

• 定义
• 不同的方法
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

ERMM（外部风险缓解和管理）

• 定义
• 关键策略要务的影响
• 理解
• 主要竞争对手
• 2024年的趋势

FDP（诈欺侦测与预防）

• 定义
• 解决方案
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

MDR（託管侦测和回应）

• 定义
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

NAC（网路存取控制）

• 定义
• 核心特性和功能
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

NGFW（下一代防火墙）

• 定义
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

SSPM（SaaS 安全态势管理）/DSPM（资料安全态势管理）

• 定义
• 关键策略要务的影响
• 主要竞争对手
• 讨论和建议
• 2024年的趋势

SASE（安全存取服务边缘）

• 定义
• 主要趋势
• 讨论和建议
• 主要趋势
• 主要竞争对手
• 2024年的趋势

SSE（安全服务边缘）

• 定义
• 使用案例
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

SOAR（安全编排和自动化回应）

• 定义
• 解决方案的好处
• 主要竞争对手

SSCS（软体供应链安全）

• 定义
• 讨论和建议
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

VM（漏洞管理）

• 定义
• 该工具的 5 个基本功能
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

HWPP（整体网路保护平台）

• 定义
• 关键策略要务的影响
• 主要竞争对手
• 2024年的趋势

附录

下一步

An Actionable Guide to Help CISOs Select Security Solutions

As in the previous years, the threat landscape and nature of cyber attacks evolved rapidly in 2023. Changing enterprise and working trends that kickstarted with the pandemic continued to bring complexity, operational challenges, and security concerns for Chief Information Security Officers (CISOs) throughout 2023.

Frost & Sullivan's Cybersecurity Research Team developed this annual compendium to help CISOs in every industry understand the key issues relating to a range of security solutions. Takeaways from this compendium will help organizations determine which solutions most closely meet their business needs and provide practical insight to support vendor selection.

The compendium features:

• Practical advice to enhance the security posture and select vendors
• Key trends and developments across several security solution areas that Frost & Sullivan research covers
• An understanding of the threat landscape and vulnerabilities organizations are exposed to
• Main cybersecurity trends for 2024

Table of Contents

Strategic Imperatives

• Why Is It Increasingly Difficult to Grow?
• The Strategic Imperative 8™
• Growth Opportunities Fuel the Growth Pipeline Engine™

Executive Summary

• Executive Summary
• Cybersecurity Market Ecosystem*
• Cybersecurity Solutions in the Compendium

Cloud-native Application Protection Platform (CNAPP)

• Cloud-native Application Protection Platform: Definition
• The Impact of the Top 3 Strategic Imperatives on the Cloud-native Application Protection Platform Market
• Cloud-native Application Protection Platform: Key Trends
• Cloud-native Application Protection Platform Market: Insights and Recommendations
• Cloud-native Application Protection Platform: Key Competitors
• Cloud-native Application Protection Platform: Trends to Watch in 2024

Cloud Workload Protection Platform (CWPP)

• Cloud Workload Protection Platform: Definition
• The Impact of the Top 3 Strategic Imperatives on the Cloud Workload Protection Platform Market
• Cloud Workload Protection Platform: Key Trends
• Cloud Workload Protection Platform Market: Insights and Recommendations
• Cloud Workload Protection Platform: Key Competitors
• Cloud Workload Protection Platform: Trends to Watch in 2024

Endpoint Security

• Endpoint Security: Definition
• The Impact of the Top 3 Strategic Imperatives on the Endpoint Security Industry
• Endpoint Security: Key Competitors
• Endpoint Security: Trends to Watch in 2024

Extended Detection and Response (XDR)

• Extended Detection and Response: Definition
• Different Approaches to the Extended Detection and Response
• The Impact of the Top Three Strategic Imperatives on the Extended Detection and Response Industry
• Extended Detection and Response: Key Competitors
• Extended Detection and Response: Trends to Watch in 2024

External Risk Mitigation and Management (ERMM)

• External Risk Mitigation and Management: Definition
• The Impact of the Top 3 Strategic Imperatives on the External Risk Mitigation and Management Industry
• Making Sense of External Risk Mitigation and Management
• External Risk Mitigation and Management: Key Competitors
• External Risk Mitigation and Management: Trends to Watch in 2024

Fraud Detection and Prevention (FDP)

• Fraud Detection and Prevention: Definition
• Fraud Detection and Prevention Solutions*
• The Impact of the Top 3 Strategic Imperatives on the Fraud Detection and Prevention Industry
• Fraud Detection and Prevention: Key Competitors
• Fraud Detection and Prevention: Trends to Watch in 2024

Managed Detection and Response (MDR)

• Managed Detection and Response: Definition
• The Impact of the Top Three Strategic Imperatives on the Managed Detection and Response Industry
• Managed Detection and Response: Key Competitors
• Managed Detection and Response: Trends to Watch in 2024

Network Access Control (NAC)

• Network Access Control: Definition
• Core Network Access Control Features and Functions
• The Impact of the Top 3 Strategic Imperatives on the Network Access Control Industry
• Network Access Control-Key Competitors
• Network Access Control: Trends to Watch in 2024

Next-generation Firewall (NGFW)

• Next-generation Firewall: Definition
• The Impact of the Top 3 Strategic Imperatives on the Next-generation Firewall Industry
• Next-generation Firewall: Key Competitors
• Next-generation Firewall: Trends to Watch in 2024

SaaS Security Posture Management (SSPM) and Data Security Posture Management (DSPM)

• SaaS Security Posture Management: Definition
• Data Security Posture Management: Definition
• The Impact of the Top 3 Strategic Imperatives on the SaaS Security Posture Management and Data Security Posture Management Market
• SaaS Security Posture Management: Key Competitors
• Data Security Posture Management: Key Competitors
• SaaS Security Posture Management and Data Security Posture Management Market: Insights and Recommendations
• SaaS Security Posture Management and Data Security Posture Management: Trends to Watch in 2024

Secure Access Service Edge (SASE)

• Secure Access Service Edge: Definition
• Secure Access Service Edge: Key Trends
• Secure Access Service Edge: Insights and Recommendations
• The Impact of the Top 3 Strategic Imperatives on the Industry
• Secure Access Service Edge: Key Competitors
• Secure Access Service Edge: Trends to Watch in 2024

Security Service Edge (SSE)

• Secure Service Edge: Definition
• Secure Service Edge Use Cases
• The Impact of the Top 3 Strategic Imperatives on the Industry
• Secure Service Edge: Key Competitors
• Secure Service Edge:

Security Orchestration and Automation Response (SOAR)

• Security Orchestration and Automation Response: Definition
• Benefits of Security Orchestration and Automation Response Solutions
• Security Orchestration and Automation Response: Key Competitors

Software Supply Chain Security (SSCS)

• Software Supply Chain Security: Definition
• Software Supply Chain Security Market: Insights and Recommendations
• The Impact of the Top 3 Strategic Imperatives on the Market
• Software Supply Chain Security: Key Competitors
• Software Supply Chain Security: Trends to Watch in 2024

Vulnerability Management (VM)

• Vulnerability Management: Definition
• Top 5 Must-have Capabilities in Vulnerability Management Tools
• The Impact of the Top 3 Strategic Imperatives on the Market
• Vulnerability Management: Key Competitors
• Vulnerability Management: Trends to Watch in 2024

Holistic Web Protection Platform (HWPP)

• Holistic Web Protection Platform: Definition
• The Impact of the Top 3 Strategic Imperatives on the Holistic Web Protection Platform Industry
• Holistic Web Protection Platforms: Key Competitors
• Holistic Web Protection Platforms: Trends to Watch in 2024

Appendix

• Acronyms and Terms

Next Steps

• Your Next Steps
• Why Frost, Why Now?
• Legal Disclaimer