Security and Continuity Investments Growing But More is Needed, IDC Says

FRAMINGHAM, MA – AUGUST 1, 2002 – The worldwide market for IT security and business continuity products and services is growing twice as fast as IT spending in general. By 2006, IDC expects this market to surpass $150 billion. Despite this growth, the leading IT research and advisory firm believes the current level of spending is not nearly enough.


"The post-September scenario saw an initial burst of security and business continuity spending, but much of that has fizzled," said John Gantz, IDC's Chief Research Officer. "Despite the lessons of September 11, businesses still tend to see IT security and business continuity as an IT issue, not a business issue. And the fragmented nature of the market and confusing array of alternatives isn't making it easy for companies to develop coherent, integrated security and continuity strategies."

In its first of a series of telebriefings on security and business continuity, IDC's Knowledge Center team pointed to several key factors responsible for spending levels in security and business continuity not being where they should, including:

Companies still perceive security as predominantly an IT issue versus a business continuity issue.

The market for security and continuity products and services is fragmented – there are too many holes to fill and the selection of products and services remains confusing.

Vendors are focusing on fear, uncertain, and doubt (the FUD factor), which is scaring off customers, rather than the business value of good IT security and business continuity plans.

The quantification of the risk and costs of system failures remains a mystery. While there are oft-quoted numbers on the cost of lost business from computer downtime, these have little relevance for individual companies or computer departments.

Overall, IDC believes there's no one leader that can currently offer a complete security and business continuity solution. However, opportunities are available for vendors who refocus their business positioning, create marketing messages that speak to value rather than FUD, and understand the rapidly shifting security needs being driven by new computing styles and new applications.

"Although we think September 11 wasn't the wake-up call for enterprises that it should have been," Gantz said, "the truth is that this is still a high-growth opportunity for IT security and business continuity vendors. This sector already accounts for 7% of all IT spending and will grow to over 10% by 2006. And, from a survey we conducted this month of 1,000 IT managers in the United States, it's the one area in which IT spending went up in the last six months."

To learn more about IDC's telebriefing "IT Security and Business Continuity: A Growth Opportunity" visit:

About IDC

IDC is the foremost global market intelligence and advisory firm helping clients gain insight into technology and ebusiness trends to develop sound business strategies. Using a combination of rigorous primary research, in-depth analysis, and client interaction, IDC forecasts worldwide markets and trends to deliver dependable service and client advice. More than 700 analysts in 43 countries provide global research with local content. IDC's customers comprise the world's leading IT suppliers, IT organizations, ebusiness companies, and the financial community. Additional information can be found at

IDC is a division of IDG, the world's leading IT media, research and exposition company.


# # #

All product and company names may be trademarks or registered trademarks of their respective holders.