IDC's Worldwide Security Services Taxonomy, 2025

Description

This IDC study provides an updated framework for understanding the evolving security services market. It includes new definitions for zero trust security, DevSecOps consulting, industrial IoT security, and data protection and governance services, among others. The taxonomy highlights the impact of GenAI/agentic AI in security operations, code review, and application security testing, among other security functions. "As GenAI/agentic AI for security advances in explainability, reliability, and trustworthiness, organizations are adopting AI-driven security transformations, with security service providers playing a crucial role in this evolution," said Cathy Huang, research director, Cybersecurity Consulting and Professional Security Services at IDC.

Product Code: US53294625

IDC's Worldwide Security Services Taxonomy

Security Services Taxonomy Changes for 2025

Taxonomy Overview

Recognizing the Impact of Generative AI/Agentic AI

Hierarchical Mapping: Security Services Primary/Secondary Markets

Definitions

Professional Security Services
- Cybersecurity Consulting
  - Strategy and Planning
  - Cybersecurity Architecture Assessment and Design
  - Cybersecurity Assessments
  - Cyber-Resilience Consulting
- Governance, Risk, and Compliance
  - Privacy Consulting
  - Governance Consulting
  - Risk Consulting
  - Compliance Consulting
  - GRC Cybersecurity Assessment Services
- Incident Response and Readiness
  - Incident Response
  - Incident Readiness
  - Forensics
- Implementation and Integration
  - Security Implementation Services
  - Deployment Services
- Training Services
Managed Security Services
- Managed Detection and Response
  - Pure-Play MDR/MXDR
  - Managed EDR
  - Managed SIEM
  - Managed Threat Hunting
- Managed Protection and Controls
  - Managed Network Security
  - Managed Endpoint Security
  - Managed Application Security
  - Managed Data Security
  - Managed Identity/PAM
- Managed Security Functions
  - Managed Cloud Security Services
  - Managed GRC
  - Managed Privacy
  - Managed Vulnerability Management Services
  - Managed Cyber-Recovery
- Emerging Security Services
  - Quantum-Safe Security Services