ISG to Assess Providers of Cybersecurity Services

Rhea-AI Summary

Information Services Group (ISG) has initiated a comprehensive research study on cybersecurity service providers, focusing on those helping enterprises and U.S. public sector organizations manage AI integration and digital asset protection. The study will result in the ISG Provider Lens™ Cybersecurity – Services and Solutions report, covering eight regions including Australia, Brazil, France, Germany, Switzerland, the UK, the US, and the US public sector.

The research will examine nine quadrants for enterprise services, including Identity and Access Management, Data Leakage Prevention, Extended Detection and Response, and Security Service Edge. For the U.S. public sector, three specific quadrants will be evaluated. The study involves surveys distributed to over 350 cybersecurity providers for enterprise markets and 46 providers for U.S. public sector services.

The report, scheduled for release in July 2025, will address the evolving cybersecurity landscape, including challenges from AI-powered threats and new regulatory requirements like the NIS 2 Directive.

Positive

• Comprehensive market research covering 8 major regions
• Detailed evaluation across 9 enterprise and 3 public sector service quadrants
• Integration of customer experience (CX) data in provider evaluations

Negative

• None.

Upcoming ISG Provider Lens™ report will evaluate providers helping enterprises and public sector organizations navigate AI integration and protect digital assets

STAMFORD, Conn.--(BUSINESS WIRE)-- Information Services Group (ISG) (Nasdaq: III), a leading global technology research and advisory firm, has launched a research study examining service providers helping enterprises and U.S. public sector organizations navigate a cybersecurity landscape made increasingly complex with the integration of AI into daily operations.

The study results will be published in a comprehensive ISG Provider Lens™ report, called Cybersecurity – Services and Solutions, covering Australia, Brazil, France, Germany, Switzerland, the U.K., the U.S. and the U.S. public sector, scheduled for release in July 2025.

Enterprise and public sector buyers will be able to use information from these reports to evaluate their current vendor relationships, potential new engagements and available offerings, while ISG advisors use the information to recommend providers to the firm’s buy-side clients.

The study will examine the rapidly changing cybersecurity landscape, as regulatory requirements such as the Network and Information Security (NIS) 2 Directive in the European Union are elevating the demand for robust cybersecurity measures and compelling organizations to reassess their security frameworks. The commoditization of hacking tools has also reduced entry barriers for malicious actors, resulting in a surge of cybercriminal activities.

“Malicious actors have taken to using AI-powered tools to exploit vulnerabilities in critical infrastructure and orchestrate targeted attacks that disrupt business operations and compromise security,” said Heiko Henkes, director and principal analyst, ISG Research. “Enterprises and public sector institutions must deploy resilient, compliant and scalable defenses tailored to their unique requirements.”

ISG has distributed surveys to more than 350 cybersecurity service and solutions providers serving enterprises in the global market. Working in collaboration with ISG’s global advisors, the research team will produce nine quadrants representing the cybersecurity services the typical enterprise buys based on ISG’s experience working with its clients. The nine quadrants are:

• Identity and Access Management (IAM), evaluating providers for their ability to offer proprietary software and related services for managing enterprise user identities and devices, including through privileged access management (PAM) governed by defined policies.

• Data Leakage/Loss Prevention (DLP) and Data Security, assessing providers offering proprietary software and services, including SaaS, that can identify and monitor sensitive data and provide access only to authorized users and prevent data loss/leakage.

• Extended Detection and Response (XDR), covering providers offering cloud-based platforms that integrate, correlate and contextualize data and alerts from multiple threat prevention, detection and response components.

• Security Service Edge (SSE), evaluating providers of cloud-centric solutions that combine proprietary software or hardware with associated services, enabling secure access to cloud services, SaaS, web services and private applications.

• Technical Security Services (TSS), assessing providers’ ability to cover integration, maintenance and support for IT and operational technology (OT) security products and solutions, addressing all security products, including antivirus, IAM, DLP, network security, endpoint security and OT security.

• Strategic Security Services (SSS), covering providers offering IT and OT security consulting, including security audits, compliance and risk advisory services, security assessments and security training. These providers also help define cybersecurity strategies for enterprises based on their specific requirements.

• Next-Gen SOC/MDR Services, evaluating providers of monitoring services including managed detection and response (MDR) services spanning the entire security incident lifecycle from identification to response and remediation, through a security operations center (SOC).

• Digital Forensics and Incident Response (DFIR), assessing providers offering services related to threat response activities, including identification, investigation, containment and remediation, while preserving evidence against attackers.

• Risk-based Vulnerability Management, covering service providers with the advanced technical skills and abilities to undertake continual updates on known vulnerabilities and sophisticated attack methods that bypass established defenses, utilizing practices such as penetration testing.

For the U.S. public sector, ISG has distributed surveys to more than 46 cybersecurity providers with experience serving U.S. public agencies. ISG will evaluate the providers in three quadrants:

• Technical Security Services (TSS), covering integration, maintenance and support for IT and OT security products and solutions, encompassing all security products including antivirus, cloud and data center security, IAM, DLP, network and endpoint security and secure access service edge (SASE).

• Strategic Security Services (SSS), evaluating providers of consulting services covering IT and OT security, including security audits, assessments and awareness and training aligned with stringent regulatory requirements such as FISMA, FedRAMP, GDPR and CJIS.

• Next-Gen SOC/MDR Services, assessing the delivery of continuous monitoring services for public sector agencies, overseeing the entire security incident lifecycle from detection to response and remediation, through SOCs.

Geographically focused reports will cover the global cybersecurity services and solutions market and examine enterprise products and services available in Australia, Brazil, France, Germany, Switzerland, the U.K. and the U.S., plus public sector products and services available in the U.S. ISG analysts Heiko Henkes, Frank Heuer, Gowtham Kumar, Bhuvaneshwari Mohan, Benoit Scheuber, Dr. Maxime Martelli, Andrew Milroy and João Mauro will serve as lead authors of the enterprise report. ISG analysts Heiko Henkes, Gowtham Kumar and Bhuvaneshwari Mohan will serve as lead authors of the U.S. public sector report.

A list of identified providers and vendors and further details on the study are available in this digital brochure. Companies not listed as cybersecurity services and solutions providers can contact ISG and ask to be included in the study.

All 2025 ISG Provider Lens™ evaluations feature expanded customer experience (CX) data that measures actual enterprise experience with specific provider services and solutions, based on ISG’s continuous CX research. Enterprise customers wishing to share their experience about a specific provider or vendor are invited to complete this online survey. Participants will receive a copy of this report in return for their feedback.

About ISG Provider Lens™ Research

The ISG Provider Lens™ Quadrant research series is the only service provider evaluation of its kind to combine empirical, data-driven research and market analysis with the real-world experience and observations of ISG's global advisory team. Enterprises will find a wealth of detailed data and market analysis to help guide their selection of appropriate sourcing partners, while ISG advisors use the reports to validate their own market knowledge and make recommendations to ISG's enterprise clients. The research currently covers providers offering their services globally, across Europe, as well as in the U.S., Canada, Mexico, Brazil, the U.K., France, Benelux, Germany, Switzerland, the Nordics, Australia and Singapore/Malaysia, with additional markets to be added in the future. For more information about ISG Provider Lens research, please visit this webpage.

About ISG

ISG (Information Services Group) (Nasdaq: III) is a leading global technology research and advisory firm. A trusted business partner to more than 900 clients, including more than 75 of the world’s top 100 enterprises, ISG is committed to helping corporations, public sector organizations, and service and technology providers achieve operational excellence and faster growth. The firm specializes in digital transformation services, including AI, cloud and data analytics; sourcing advisory; managed governance and risk services; network carrier services; strategy and operations design; change management; market intelligence and technology research and analysis. Founded in 2006, and based in Stamford, Conn., ISG employs more than 1,600 digital-ready professionals operating in more than 20 countries—a global team known for its innovative thinking, market influence, deep industry and technology expertise, and world-class research and analytical capabilities based on the industry’s most comprehensive marketplace data. For more information, visit www.isg-one.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250127519004/en/

Press Contacts:



Will Thoretz, ISG

+1 203 517 3119

will.thoretz@isg-one.com



Julianna Sheridan, Matter Communications for ISG

+1 978 518 4520

isg@matternow.com

Source: Information Services Group, Inc.

FAQ

When will ISG release its Cybersecurity Services and Solutions report (III)?

The ISG Provider Lens™ Cybersecurity Services and Solutions report is scheduled for release in July 2025.

How many cybersecurity service providers will ISG evaluate for this report?

ISG has distributed surveys to over 350 cybersecurity providers for enterprise markets and 46 providers specifically for U.S. public sector services.

What regions will the ISG cybersecurity report cover?

The report will cover Australia, Brazil, France, Germany, Switzerland, the UK, the US, and the US public sector.

How many service quadrants will ISG evaluate in the enterprise cybersecurity report?

ISG will evaluate nine quadrants for enterprise services, including IAM, DLP, XDR, SSE, TSS, SSS, Next-Gen SOC/MDR Services, DFIR, and Risk-based Vulnerability Management.

What specific areas will ISG evaluate for U.S. public sector cybersecurity?

ISG will evaluate three quadrants for the U.S. public sector: Technical Security Services (TSS), Strategic Security Services (SSS), and Next-Gen SOC/MDR Services.