The result was the biggest update I've made to Strategy of Security's cybersecurity ecosystem mapping since I first published it over two years ago.
My goal is to define the most comprehensive and accurate taxonomy for the business of cybersecurity as I can.
Let's talk about a few things I realized from obsessing about the cybersecurity ecosystem every waking hour for two straight weeks.
I've been on a kick about cybersecurity estates for most of the past year.
My irrational enthusiasm about this idea has now fully made its way into this cybersecurity ecosystem mapping.
The graphic is now reorganized around the four largest estates - Application Security, Identity Security, Infrastructure Security, and Security Operations.
I felt good about this idea when I wrote my thoughts on cybersecurity estates a few weeks ago.
Cybersecurity's four largest estates are clear.
Most of cybersecurity's public companies and invested capital live there.
Estates are also the epicenter of strategic activity in cybersecurity, and sometimes all of tech.
A savvy observer sees the appeal: new SEC cybersecurity disclosure rules, emerging cybersecurity and privacy regulations in the U.S. and Europe, CISO fraud charges, and more are making this marketsurprisingly popular.
You could also make a case that Consumer Security and Privacy, Fraud and Transaction Security, Data Security, and Services are already estates.
The cybersecurity ecosystem is crowded, but it's still big enough for more estates.
Big tech aggregators like Microsoft, Cisco, and Alphabet all have multi-billion-dollar cybersecurity businesses.
They're so big that even the biggest pure cybersecurity companies are doing $1 billion in revenue through them.
Pure cybersecurity companies like CrowdStrike and Palo Alto Networks are combining multiple categories into platforms.
Companies are converging several types of application security testing tools to create end-to-end Application Security Testing platforms.
You never have the cybersecurity ecosystem totally figured out.
Now, in the last few words of a long and humbling process, I'm viscerally aware that none of us have the cybersecurity ecosystem totally figured out.
Fully understanding cybersecurity is an ideal, not a realistic achievement.
This Cyber News was published on securityboulevard.com. Publication date: Fri, 08 Dec 2023 20:43:05 +0000