Japan IT Security End-User Survey 2009

Abstract

This IDC study (which is a translation of the Japanese report IDC #J9220102) analyzes the results of a survey on the use of enterprise security solutions in Japan conducted by IDC in February 2009.

"Companies have become more aware of the importance of IT security solutions as these have an impact on not only their own organizations but also those of their business partners. In particular, information leak solutions and internal control solutions, which enjoy a high level of user interest, are fundamental to business activities and form the backbone of business management. Security vendors and solution vendors should actively market their products and services to the management staffs of user companies. It will also be effective for them to explain the objectives and effectiveness of their solutions to IT and other relevant departments," says Tsuneo Tosaka, research manager, Security, IDC Japan.

Table of Contents

• IDC Opinion
• In This Study
• Methodology
• Company Size
• Profile of Respondent Companies
• Executive Summary
• IT Security Spending
• Implementation of IT Security Solutions
• Solutions for Compliance Enhancement
• Implementation of IT Security Services
• Acceptable Security Service Prices
• Situation Overview
• IT Security Solution Spending Trends
• Capital Spending and IT Spending
• IT Security Spending
• Focal Areas of IT Security Spending
• Implementation of IT Security Solutions
• Security Solutions Implementation Timeframes
• Spending Appetites as Reflected by Implementation Timeframes
• Comparison of Solution Implementation Rates by Company Size
• Security Threat Management
• Firewall/VPN
• Intrusion Detection System/Intrusion Prevention System
• Implementation of Threat Management Solutions with Appliances
• Security Access Management
• Identity and Access Management
• Secure Content Management
• Antivirus Solutions
• Antispam Solutions
• Mail Content Management (for Unauthorized Mail)
• Web Security Management
• Vulnerability Management
• Security System Information Management
• Compliance Enhancement Solutions
• Solutions to Comply with Personal Information Protection Law
• Information Leak Prevention Solutions (for Client PCs)
• Information Leak Prevention Solutions (for Gateways)
• J-SOX Solutions
• Implementation of IT Security Services
• Security System Management Services
• Security Consulting Services
• Acceptable Prices of Security Services
• Price Sensitivity Measurement
• Analyses Results
• Accepted Prices of Threat Management Services
• Accepted Prices of Secure Content Management Solutions
• Future Outlook
• Essential Guidance
• Learn More
• Related Research
• Synopsis
• Figure: Respondent Distribution by Appointment
• Figure: Respondent Distribution by Authority Level in Respect of IT Security Solutions
• Figure: Respondent Distribution by Industry
• Figure: Respondent Distribution by Company Size
• Figure: Current Year Capital Spending as of February 2009
• Figure: IT Spending as a Share of Capital Spending, as of February 2009
• Figure: IT Spending Changes from Previous Year, as of February 2009
• Figure: IT Spending Changes in Coming Year (Projection), as of February 2009
• Figure: IT Spending Changes in Coming Year (Projection) by Industry, as of February 2009
• Figure: IT Spending Changes in Coming Year (Projection) by Company Size, as of February 2009
• Figure: Current Year IT Security Spending as of February 2009
• Figure: Previous and Current Year IT Security Spending as a Share of Capital Spending as of February 2009
• Figure: IT Security Spending Changes from Previous Year as of February 2009
• Figure: IT Security Spending Changes from Current Year (Projection) as of February 2009
• Figure: IT Security Spending Changes in Coming Year (Projection) by Industry as of February 2009
• Figure: IT Security Spending Changes in Coming Year (Projection) by Company Size as of February 2009
• Figure: Reasons for IT Security Solutions Implementation
• Figure: Consciousness of IT Security in Choosing Business Partners
• Figure: Current Security Spending Areas
• Figure: Issues Recognized in Implementing Security Solutions
• Figure: Future Priority IT Security Spending
• Figure: Implementation Rates of IT Security Solutions
• Figure: Implementation Rates of IT Security Solutions, 2008–2009
• Figure: IT Security Solutions Implementation Timeframes, 2008–2009
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Threat Management (Firewall/VPN)
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Threat Management (IDS/IPS, UTM)
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Identity Access Management (Single Sign-On, Authentication)
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Identity Access Management (User Registration, Deletion)
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Mail Content Management (Antispam)
• Figure: IT Security Solutions Implementation Timeframes by Company Size: Web Security Management (URL Filtering Control)
• Figure: Firewall/VPN Implementation Landscape
• Figure: Firewall/VPN Implementation Landscape by Industry
• Figure: Firewall/VPN Implementation Landscape by Company Size
• Figure: Firewall/VPN Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Firewall/VPN Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Threat Management Solutions (IDS/IPS, UTM) Implementation Landscape
• Figure: Threat Management Solutions (IDS/IPS, UTM) Implementation Landscape by Industry
• Figure: Threat Management Solutions (IDS/IPS, UTM) Implementation Landscape by Company Size
• Figure: Threat Management Solutions (IDS/IPS, UTM) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Threat Management Solutions (IDS/IPS, UTM) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Threat Management Solutions: Use of Appliances
• Figure: Unified Threat Management Implementation Landscape
• Figure: Identity Access Management Solutions (Single Sign-On, Authentication, Authorization System) Implementation Rates
• Figure: Identity Access Management Solutions (Single Sign-On, Authentication, Authorization System) Implementation Rates by Industry
• Figure: Identity Access Management Solutions (Single Sign-On, Authentication, Authorization System) Implementation Rates by Company Size
• Figure: Identity Access Management Solutions (Single Sign-On, Authentication, Authorization System): Already Implemented and Are Considering to Implement
• Figure: Identity Access Management Solutions (Single Sign-On, Authentication, Authorization System) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Identity Access Management Solutions (User Registration, Deletion) Implementation Landscape
• Figure: Identity Access Management Solutions (User Registration, Deletion) Implementation Landscape by Industry
• Figure: Identity Access Management Solutions (User Registration, Deletion) Implementation Landscape by Company Size
• Figure: Identity Access Management Solutions (User Registration, Deletion) Implementation Methods: Implemented and Considering (Outsourcing Versus Internal System)
• Figure: Antivirus Solutions (Network Gateway or Server Type) Implementation Landscape
• Figure: Antivirus Solutions (Network Gateway or Server Type) Implementation Landscape by industry
• Figure: Antivirus Solutions (Network Gateway or Server Type) Implementation Landscape by Company Size
• Figure: Antivirus Solutions (Network Gateway or Server Type) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Antivirus Solutions (Network Gateway or Server Type) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Mail Content Management Solutions (Antispam) Implementation Landscape
• Figure: Mail Content Management Solutions (Antispam) Implementation Landscape by Industry
• Figure: Mail Content Management Solutions (Antispam) Implementation Landscape by Industry by Company Size
• Figure: Mail Content Management Solutions (Antispam) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Mail Content Management Solutions (Antispam) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Web Security Management Solutions (URL Filtering Control) Implementation Landscape
• Figure: Web Security Management Solutions (URL Filtering Control) Implementation Landscape by Industry
• Figure: Web Security Management Solutions (URL Filtering Control) Implementation Landscape by Company Size
• Figure: Web Security Management Solutions (URL Filtering Control) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Web Security Management Solutions (URL Filtering Control) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Security Vulnerability Management Solutions (Security Information Management) Implementation Landscape
• Figure: Security Vulnerability Management Solutions (Security Information Management) Implementation Landscape by Industry
• Figure: Security Vulnerability Management Solutions (Security Information Management) Implementation Landscape by Company Size
• Figure: Security Vulnerability Management Solutions (Security Information Management) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Security Vulnerability Management Solutions (Security Information Management) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Compliance with Personal Information Protection Law
• Figure: Compliance with Personal Information Protection Law by Industry
• Figure: Compliance with Personal Information Protection Law by Company Size
• Figure: IT Security Solutions Emphasized in Complying with Personal Information Protection Law
• Figure: Client PC Information Leak Solutions (Encryption-Based) Implementation Landscape
• Figure: Client PC Information Leak Solutions (Encryption-Based) Implementation Landscape by Industry
• Figure: Client PC Information Leak Solutions (Encryption-Based) Implementation Landscape by Company Size
• Figure: Gateway Information Leak Solutions (Email, Web Browser) Implementation Landscape
• Figure: Gateway Information Leak Solutions (Email, Web Browser) Implementation Landscape by Industry
• Figure: Gateway Information Leak Solutions (Email, Web Browser) Implementation Landscape by Company Size
• Figure: Gateway Information Leak Solutions (Email, Web Browser) Implementation Methods: Already Implemented and Considering (Appliance Versus Software)
• Figure: Gateway Information Leak Solutions (Email, Web Browser) Implementation Methods: Already Implemented and Considering (Outsourcing Versus Internal Systems)
• Figure: Compliance with the J-SOX
• Figure: Compliance with the J-SOX by Industry
• Figure: Compliance with the J-SOX by Industry by Company Size
• Figure: Reasons for Implementing the J-SOX Solutions
• Figure: Implementation Rates of Individual J-SOX Solutions
• Figure: Use of Security Services
• Figure: Use of Security Services by Company Size
• Figure: Outsourcing Spending as a Share of IT Security Budget for Current Year, as of February 2009
• Figure: Use of Security System Management Outsourcing
• Figure: Use of Security System Management Outsourcing by Industry
• Figure: Use of Security System Management Outsourcing by Company Size
• Figure: Use of Security System Management Outsourcing by Function
• Figure: Concerns Over Use of Security System Management Outsourcing
• Figure: Use of Security Consulting Services
• Figure: Use of Security Consulting Services (Security System Planning, Strategizing) by Company Size
• Figure: Use of Security Consulting Services (Security System Audit) by Company Size
• Figure: Use of Security Consulting Services (Security System Analysis/Evaluation) by Company Size
• Figure: Price Sensitivity Measurement Analysis
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (Firewall/VPN, 2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (Firewall/VPN), 2008
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (Firewall/VPN), 2008–2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (IDS/IPS, UTM), 2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (IDS/IPS, UTM), 2008
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Threat Management (IDS/IPS, UTM), 2008–2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Antivirus), 2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Antivirus), 2008
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Antivirus), 2008–2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Mail Security), 2009
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Mail Security), 2008
• Figure: Acceptable Prices of Outsourcing Services by Company Size: Secure Content Management (Mail Security), 2008–2009