2021-06-04-德勤-德勤被IDC评为亚太地区云安全服务领域的领导者_33页_745kb

IDC MarketScape: Asia/Pacific Cloud Security Services 2021 Vendor Assessment Summary

Core Content

The IDC MarketScape report evaluates cloud security services vendors in the Asia/Pacific region based on their current capabilities, portfolio, delivery, and go-to-market (GTM) strategies. It highlights the growing importance of cloud security in enabling customer trust and digital transformation, especially in the wake of the pandemic. The report identifies Accenture, Deloitte, and Ernst & Young (EY) as leaders in the market, emphasizing their strengths in innovation, partnerships, and service delivery.

Main Findings

1. Cloud-First Adoption in Asia/Pacific

• Organizations in the region are increasingly adopting a cloud-first or cloud-only approach for digital transformation.
• Cloud technology is perceived as a platform for digital innovation, security, and availability.
• 42% of organizations use cloud for digital innovation, and 42% plan to move more applications to the cloud due to enhanced security.

2. Vendor Capabilities and Offerings

• Vendors are offering comprehensive cloud security solutions ranging from assessment, advisory, implementation, to management and optimization.
• Cloud-native security is in high demand, with services aligned to major hyperscalers such as AWS, Azure, GCP, and Alibaba Cloud.
• Localization and market penetration are critical for success, with only 40% of vendors having a presence in more than 10 markets.

3. Pricing and Delivery Models

• Transparency and outcome-based pricing are becoming more important, with 28% of vendors receiving praise for their pricing models.
• Automation and offshore resources are used to maintain cost competitiveness and seamless service delivery.

Key Vendors and Their Profiles

Accenture

• Position: Leader in the market.
• Strengths:
  • Strong automation capabilities across the cloud security lifecycle.
  • Broad portfolio of cloud security services, including security posture assessment, risk framework design, and managed cloud operations.
  • Deep engineering expertise with major hyperscalers (AWS, Azure, GCP, Alibaba Cloud, IBM).
  • Proactive compliance and security assurance for regulated industries.
  • Excellent knowledge management and staff retention.
• Challenges:
  • High cost compared to competitors, especially in markets requiring local language support.
  • Potential issues with cosourcing and client-side security team motivation.

Deloitte

• Position: Leader in the market.
• Strengths:
  • Extensive security portfolio and strong brand reputation.
  • Integrated cloud security services with business transformation and compliance.
  • Developed the Cloud Security Content Pack and Deloitte Fortress for cloud security strategy and management.
  • Strong alignment with cloud hyperscalers and active co-innovation with clients.
  • Comprehensive training and certification programs for staff.
• Challenges:
  • Restricted co-innovation with Microsoft due to its role as a global auditor.
  • Needs to improve service delivery consistency across Asia/Pacific and transition to flexible pricing models.

DXC Technology

• Position: Major player in the market.
• Strengths:
  • Strong cloud security capabilities with a focus on data, identities, and access.
  • Developed the Cyber Reference Architecture (CRA), a vendor-agnostic framework for cyber-resilience.
  • Strategic acquisitions (e.g., Luxoft, Syscom, Virtual Clarity) to enhance capabilities.
  • Investment in DXC Bionix and Platform X for modernized delivery and automation.
  • Improved customer satisfaction and profitability after narrowing focus to key verticals.
• Challenges:
  • Cloud security services are often bundled with other offerings, leading to delivery inconsistencies.
  • Needs to accelerate the shift to flexible and outcome-based pricing.

Ernst & Young (EY)

• Position: Leader in the market.
• Strengths:
  • Offers Trusted Cloud services covering assessment, design, development, and migration.
  • Proprietary tools like EY Cloud Governance Tool, EY Cloud Migration Factory, and EY Dash enhance service delivery.
  • Strong alignment with Microsoft platforms, especially Azure Sentinel.
  • Excellent skills and support coverage in Southeast Asia for emerging cloud security technologies.
  • Competitive pricing and diverse pricing models.
  • Introduced EY Tech MBA and Cybersecurity Career Framework to address skills shortages.
• Challenges:
  • Needs to enhance local presence and geographic coverage.
  • May face competition from niches vendors in terms of pricing strategy.

Advice for Technology Buyers

• Design secure landing zones using pre-provisioned security controls.
• Adopt reusable cloud solutions with integrated security for efficient scaling.
• Define authorized roles and use CIEM to manage access and identities.
• Secure connectivity using hub-and-spoke network models.
• Select vendors with robust growth and partnership strategies to access new technologies.
• Engage in independent security assessments for continuous improvement and assurance.

Conclusion

The Asia/Pacific cloud security services market is rapidly evolving, driven by the cloud-first adoption and increasing demand for security at scale and speed. Vendors that demonstrate automation, localization, ecosystem integration, and outcome-based delivery are well-positioned for growth. The report emphasizes the importance of strategic partnerships, innovation, and customer-centric pricing models in delivering successful cloud security transformations.