Public Cloud Services Growth to Bolster Cloud Security Spending
Dubai, UAE., October 10, 2023 –Worldwide end-user spending on security and risk management is projected to total $215 billion in 2024, an increase of 14.3% from 2023, according to new forecast from Gartner, Inc. In 2023, global security and risk management end-user spending is estimated to reach $188.1 billion.
“The continuous adoption of cloud, continuous hybrid workforce, rapid emergence and use of generative AI (GenAI), and the evolving regulatory environment are forcing security and risk management (SRM) leaders to enhance their security and risk management spending,” said Shailendra Upadhyay, Senior Research Principal at Gartner. “At the same time, they are focusing their efforts by adopting technical security capabilities that provide far greater visibility and responsiveness across the organization’s entire digital ecosystem and restructuring the way the security function operates to enable agility without compromising security.”
Spending on data privacy and cloud security are projected to record the highest growth rates in 2024, with each segment increasing more than 24% year-over-year (see Table 1). Privacy remains a top organizational priority as regulations that impact the processing of personal data continue to emerge, including those related to the use of AI. Gartner predicts that by 2025, 75% of the world’s population will have its personal data covered by modern privacy regulations.
Table 1. Security and Risk Management End-User Spending for All Segments, Worldwide, 2022-2024 (Millions of U.S. Dollars)
| Segment | 2022 Spending | 2022 Growth (%) | 2023 Spending | 2023 Growth (%) | 2024 Spending | 2024 Growth (%) |
| Application Security | 5,047.6 | 10.9 | 5,765.2 | 14.2 | 6,670.3 | 15.7 |
| Cloud Security | 4,487.4 | 24.0 | 5,616.7 | 25.2 | 7,002.6 | 24.7 |
| Data Privacy | 1,129.2 | 9.9 | 1,338.7 | 18.5 | 1,667.3 | 24.6 |
| Data Security | 3,072.9 | 21.4 | 3,692.1 | 20.1 | 4,333.3 | 17.4 |
| Identity Access Management | 13,944.1 | 13.6 | 16,169.1 | 16.0 | 18,556.5 | 14.8 |
| Infrastructure Protection | 24,089.0 | 19.9 | 28,359.6 | 17.7 | 33,319.6 | 17.5 |
| Integrated Risk Management | 5,157.3 | 9.6 | 5,687.1 | 10.3 | 6,277.7 | 10.4 |
| Network Security Equipment | 18,932.5 | 11.9 | 21,383.6 | 12.9 | 24,360.1 | 13.9 |
| Security Services | 73,394.7 | 3.9 | 80,835.7 | 10.1 | 89,996.7 | 11.3 |
| Consumer Security Software | 7,443.4 | 2.9 | 7,901.7 | 6.2 | 8,406.7 | 6.4 |
| Others | 8,029.8 | 50.1 | 11,365.4 | 41.5 | 14,362.8 | 26.4 |
| Total | 164,728.0 | 10.6 | 188,114.8 | 14.2 | 214,953.7 | 14.3 |
Source: Gartner (September 2023)
The continued growth in public cloud services will bolster spending on cloud security tools. In the cloud security segment, the combined spending on cloud access security brokers software (CASB) and cloud workload protection platforms (CWPP) is projected to total $7 billion in 2024, up 24.7% from 2023. Demand for cloud-based detection and response solutions — such as endpoint detection and response (EDR) and managed detection and response (MDR) — is also expected to increase in 2024.
In the Middle East and North Africa (MENA) region, end-user spending on security and risk management is forecast to total $3.3 billion in 2024, an increase of 12.7% from 2023. In 2023, end-user spending on security and risk management in MENA is estimated to reach $2.9 billion (see Table 2).
Table 2. Security and Risk Management End-User Spending for All Segments in MENA, 2022-2024 (Millions of U.S. Dollars)
| Segment | 2022 Spending | 2022 Growth (%) | 2023 Spending | 2023 Growth (%) | 2024 Spending | 2024 Growth (%) |
| Application Security | 65.9 | 7.3 | 70.7 | 7.3 | 78.1 | 10.5 |
| Cloud Security | 73.0 | 15.1 | 83.8 | 14.8 | 98.5 | 17.5 |
| Consumer Security Software | 120.7 | -10.4 | 135.3 | 12.1 | 144.9 | 7.1 |
| Data Privacy | 15.4 | 14.1 | 18.1 | 17.5 | 22.7 | 25.4 |
| Data Security | 45.1 | 37.5 | 49.5 | 9.7 | 53.7 | 8.5 |
| Identity Access Management | 170.5 | 3.0 | 188.1 | 10.3 | 210.2 | 11.7 |
| Infrastructure Protection | 421.1 | 20.8 | 455.6 | 8.2 | 509.1 | 11.7 |
| Integrated Risk Management | 32.3 | 7.0 | 35.7 | 10.5 | 40.6 | 13.7 |
| Network Security Equipment | 401.7 | 10.4 | 442.7 | 10.2 | 499.9 | 12.9 |
| Security Services | 1,174.1 | 20.9 | 1,314.6 | 11.9 | 1,479.5 | 12.5 |
| Others | 83.0 | 40.2 | 116.2 | 40.0 | 144.0 | 23.9 |
| Total | 2,602.8 | 16.0 | 2,910.2 | 11.8 | 3,281.1 | 12.7 |
Source: Gartner (September 2023)
“Organizations in the MENA region are expected to increase their spending because of increased digitalization and concerns around cyberattacks,” said Upadhyay.
In 2024, data privacy spending is projected to record the highest growth at 25.4%. “The growth in data privacy spending is due to stringent data protection laws implemented by the governments, such as Personal Data Protection Law in Saudi Arabia effective from September 2023. This law is in continuation of current laws in the UAE, such as Federal Decree Law No. 45 of 2021 on the Personal Data Protection and Privacy legislation of free economic zones,” said Upadhyay.
Security Services Segment to Represent 42% of Global Security and Risk Management Spending
Spending on security services – consulting, IT outsourcing, implementation and hardware support –is forecast to total $90 billion in 2024, an increase of 11% from 2023. Security services is expected to represent 42% of total security and risk management end-user spending in 2024, and to remain the largest area of security and risk management spending in 2024.
“In light of cyber risks increasing, cyberthreats proliferating and a changing operating environment, it is more critical than ever for organizations to build and optimize a cybersecurity program,” said Upadhyay. “It is the cornerstone of cybersecurity initiatives which help SRM leaders secure new environments, protect against the expanded attack surface, consume security capabilities in new ways and create better efficiencies through automation.”
Gartner clients can read more in “Forecast Analysis: Information Security and Risk Management, Worldwide.”
Learn how to manage human risk to build a security-conscious organization in the complimentary Gartner ebook 4 Ways to Achieve Secure Employee Behaviors.
Gartner Security & Risk Management Summit
Gartner analysts are presenting the latest research and advice for security and risk management leaders at the Gartner Security & Risk Management Summit, taking place February 12- 13, 2024 in Dubai, UAE. Follow news and updates from the conferences on X using #GartnerSEC.
About Gartner for Cybersecurity Leaders
Gartner for Cybersecurity Leaders equips security leaders with the tools to help reframe roles, align security strategy to business objectives and build programs to balance protection with the needs of the organization. Additional information is available at https://www.gartner.com/en/cybersecurity.
Follow news and updates from Gartner for Cybersecurity Leaders on X and LinkedIn using #GartnerSEC. Visit the Gartner Newsroom for more information and insights.
About Gartner
Gartner, Inc. (NYSE: IT) delivers actionable, objective insight that drives smarter decisions and stronger performance on an organization’s mission-critical priorities. To learn more, visit gartner.com