Improving Security Solutions Could Grow the Internet of Things Cybersecurity Market by $9-$11 Billion
New Bain & Company research identifies four steps IoT device vendors can take to address security concerns that are holding back further growth in this market
NEW YORK, May 30, 2018 (GLOBE NEWSWIRE) -- Security concerns are a significant roadblock to investment in the Internet of Things (IoT). According to a new Bain & Company report, Cybersecurity is the Key to Unlocking Demand in IoT , 45 percent of IoT buyers say concerns about security remain a significant barrier and are hindering the adoption of IoT devices.
If vendors could provide better security, enterprise customers surveyed say they would be willing to buy, on average, at least 70 percent more IoT devices. In addition, 93 percent of executives said they would pay more for devices with better security - about 22 percent more on average. Taken together, Bain & Company estimates that improving security solutions for these devices could grow the IoT cybersecurity market by $9-$11 billion. For IoT device vendors - companies that make IoT devices as well as those that provide related solutions - the message is clear: improve security to gain a competitive edge and grow your market.
These are among Bain & Company's findings over the last three years and new, recently completed research on IoT security.
"We expect growth in the markets that comprise the IoT to continue full steam ahead, but issues around security concerns could derail that progress," said Ann Bosche, a partner in Bain & Company's Telcom, Media and Technology Practice. "Enterprise customers are moving cautiously until they can gain some reasonable assurance of the security of their data and operations, which increasingly rely on devices, sensors and the Internet of Things."
The Bain & Company survey found most executives (60 percent) said they were very concerned about the risks IoT devices pose to their companies - not surprising, given the damage that an IoT security breach can cause to operations, revenues and safety.
In determining solutions to guard against attacks, IoT device vendors can segment their target customers by levels of cybersecurity capability maturity. The research finds that customers at the least-advanced end of the spectrum are more likely to seek out simplified and integrated security solutions, whereas those with more advanced capabilities prefer to invest in best-of-breed or customized point solutions.
Further, across segments, nearly all executives - 90 percent - said that IoT devices pose a moderate or significant risk to their organizations, and executives in companies with greater cybersecurity sophistication see more risk than those in less sophisticated companies.
The research also found that executives in some industries see themselves at greater risk than others. Those in durable goods, building and construction, energy and utilities, financial services, and technology were most likely to express a significant level of concern.
In response to these risks, executives who manage security said that, as customers, they want solutions that are highly effective, easy to integrate, and flexible to deploy.
Companies take a range of approaches to meet their security needs, based on their capabilities and the availability of marketplace solutions from vendors. Only about a third of IoT cybersecurity solutions used today are from IoT device vendors, indicating that vendors are either not offering holistic, high quality, solutions that meet consumer needs or they are not promoting them well enough. Bain & Company found that companies with the most advanced cybersecurity capabilities rely more on internally developed security solutions, not only because they may have more complex needs but because they are more likely to have the talent and capabilities to develop their own solutions. Companies with ad hoc security capabilities have the most gaps across all IoT layers tested.
The research also looked at how companies deploy solutions by layer of security and found ample opportunity for IoT device vendors at every layer of the stack. The access interface layer has the greatest level of protection, whether developed internally or provided by a manufacturer or third party. Other layers of the stack were protected by more internal solutions - or, in some cases, none at all. Customers' preference for internal solutions may be partially explained by considering the specific conditions of each layer. For example, data security solutions typically require more computing and power resources than are currently available on basic IoT devices.
"Most enterprises want a cohesive set of tools and a unified overview of the security posture of their devices, but few IoT device makers understand their customers' operations well enough to provide that kind of solution," said Syed Ali, a cybersecurity expert in Bain & Company's IT Practice. "Lacking well-designed IoT cybersecurity products and services, customers are devising their own solutions, foregoing them altogether, or failing to implement IOT solutions until vendors can fill the gap."
All IoT device vendors will need to pay more attention to security in the design, development and deployment of devices. Four steps can help executives frame their task:
Understand how customers are using devices. Staying current by refreshing their understanding of customer use cases every 12 to 18 months will allow them to stay on top of evolving security requirements, and help identify unmet needs. Ascertaining the average cybersecurity maturity level of their customers will help manufacturers invest in the right out-of-the-box and add-on solutions.
Provide cybersecurity capabilities on the device and, where possible, partner with trusted cybersecurity vendors to provide additional solutions. Engineering teams should embed secure development practices in the software and hardware components of the device, and provide inherent solutions for the access interface, apps, data and device layers. Taking these measures can mitigate common vulnerabilities in IoT devices today such as default or embedded passwords, lack of data security for credentials and network communications, and weak safeguards for ensuring system integrity.
Meet quality assurance thresholds and be able to certify that their IoT devices are free from known vulnerabilities. This would mitigate a major pain point for customers who sometimes install new devices without realizing they contain vulnerabilities. Deploying a more methodical process to identify and remove vulnerabilities across layers or engaging third-party vulnerability scanning and or penetration test firms can help manufacturers meet this bar.
- Fulfill their obligations during the warranty period by continuously testing for new vulnerabilities, providing software and firmware updates, as well as feature and functionality upgrades for out-of-box and aftermarket solutions. Delivering updates to firmware, operating systems and applications in response to newly discovered security vulnerabilities should remain a top priority through the warranty period.
"IoT device vendors and ecosystem players that move quickly to improve the security around IoT devices are likely to reap rewards not only from their ability to earn a premium, but also from an expanded market," said Frank Ford, a partner in Bain & Company's IT Practice. "These four steps are a start, though by no means, the whole of what it will take to begin to address the security concerns that are holding back growth of the IoT."
Editor's Note: To arrange an interview, contact Dan Pinkney at firstname.lastname@example.org or +1 646 562 8102
About Bain & Company
Bain & Company is the management consulting firm that the world's business leaders come to when they want results. Bain advises clients on strategy, operations, information technology, organization, private equity, digital transformation and strategy, and mergers and acquisition, developing practical insights that clients act on and transferring skills that make change stick. The firm aligns its incentives with clients by linking its fees to their results. Bain clients have outperformed the stock market 4 to 1. Founded in 1973, Bain has 55 offices in 36 countries, and its deep expertise and client roster cross every industry and economic sector. For more information visit: www.bain.com. Follow us on Twitter @BainAlerts.
Bain & Company
Tel: +1 646 562 8102
The issuer of this announcement warrants that they are solely responsible for the content, accuracy and originality of the information contained therein.
Source: Bain & Company via Globenewswire
One Liberty Plaza - 165 Broadway
NY 10006 New York
GlobeNewswire is one of the world's largest newswire distribution networks, specializing in the delivery of corporate press releases financial disclosures and multimedia content to the media, investment community, individual investors and the general public.
Subscribe to releases from GlobeNewswire
Subscribe to all the latest releases from GlobeNewswire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from GlobeNewswire
AMG Advanced Metallurgical Group N.V. Announces Weekly Share Repurchase Program Transaction Details19.7.2019 21:00:00 CEST | Press release
Amsterdam, 19 July 2019 --- AMG Advanced Metallurgical Group N.V. ("AMG", EURONEXT AMSTERDAM: "AMG") reports the repurchases made under its share repurchase program announced on 8 April 2019 and effective from 9 April 2019. Information regarding the progress of the share repurchase program and the aggregate of the transactions (calculated on a daily basis) for the period 15 July 2019 through 19 July 2019 can be found in the bottom half of the table below. Further detailed information regarding both the progress of the share repurchase program and the overall trades made on a daily basis can be accessed via the Investors section of the Company’s website, or clicking the following link: https://amg-nv.com/investors/share-buyback/ Share Repurchase Program Overall progress Share Repurchase Program: Total Repurchase Amount in Shares 2,915,630 Cumulative Repurchase Amount EUR 63,511,098 Cumulative Quantity Repurchased 2,534,054 Cumulative Average Repurchase Price EUR 25.06 Start Date 9 April
Ossur Hf : Össur acquires College Park Industries19.7.2019 17:00:00 CEST | Press release
Reykjavik, 19 July 2019 Össur has signed an agreement to acquire College Park Industries, a global provider of lower and upper limb prostheses and supporting services. College Park has over 140 employees and is headquartered in Detroit, USA. Total sales amounted to USD 22 million in 2018. College Park will largely remain independent and continue to diligently serve its customer base, while allowing the combined entity to achieve strategic efficiencies. Össur is committed to growing the College Park brand over the coming years both in the United States and international markets. Together, both companies will be well-positioned to enhance their offerings in both lower and upper limb prosthetics. With this acquisition, Össur hopes to support College Park’s focus on the lower active population and further strengthen its established presence in the upper limb arena. Mutual access to technology and products will enable a more comprehensive product and service offering to customers around the
Banks net position in the Riksbank19.7.2019 16:47:00 CEST | Press release
JUL 19, 2019 SEK MILLION LENDING BORROWING 277
Norsk Hydro: PÅMINNELSE: Invitasjon - Presentasjon av Hydros resultat for andre kvartal 201919.7.2019 14:43:00 CEST | Pressemelding
Hydros resultat for andre kvartal 2019 blir offentliggjort tirsdag 23. juli 2019 kl. 07.00. Kvartalsrapporten og presentasjonsmaterialet blir samtidig gjort tilgjengelig på www.hydro.com. Presentasjon i Oslo Det blir holdt en kombinert analytikerpresentasjon og pressekonferanse ved Hydros hovedkontor i Drammensveien 260, Oslo, samme dag, kl. 08.30. Resultatet blir presentert av konsernsjef Hilde Merete Aasheim og konserndirektør for Økonomi og finans Eivind Kallevik. Hele presentasjonen kan sees direkte på web-TV. For påmelding, vennligst send mail til email@example.com. I tillegg til web-TV, hvor det vil være mulig å stille spørsmål skriftlig, vil det også være mulig å ringe inn (ikke mulig å stille spørsmål over telefon). Du melder deg på denne telefonkonferansen ved å ringe: Norge +47 2100 2610 UK +44 (0)330 336 9125 USA +1 929-477-0324 Sverige +46 (0)8 5033 6574 Brasil +55 11 3181 5427 Tyskland +49 (0)89 20303 5709 Kode: 3104804 Q&A / Telefonkonferanse Det blir holdt en telefonkonferans
Norsk Hydro: REMINDER: Invitation - Hydro’s second quarter results 201919.7.2019 14:43:00 CEST | Press release
Hydro's second quarter results 2019 will be released at 07:00 CEST (01:00 AM EDT, 06:00 UK time), on Tuesday July 23, 2019. The quarterly report and presentation slides will be available on www.hydro.com at the same time. Presentation in Oslo Hydro will host a combined analyst and press conference, in English, at its corporate headquarters at Drammensveien 260, Oslo, at 08:30 CEST the same day. The presentation will be held by President and CEO Hilde Merete Aasheim and CFO Eivind Kallevik and can also be seen on web TV. To attend the presentation in Oslo, please register by sending a mail to firstname.lastname@example.org. In addition to the webcast, where it will be possible to ask questions in writing, it will also be possible to dial in (not possible to ask questions over the phone). Dial-in numbers for this conference call are: Norway +47 2100 2610 UK +44 (0)330 336 9125 USA +1 929-477-0324 Sweden +46 (0)8 5033 6574 Brazil +55 11 3181 5427 Germany +49 (0)89 20303 5709 Confirmation Code: 3104804 Q&A
Sunstone Life Science Ventures invests in Karolinska Development's portfolio company Forendo Pharma19.7.2019 14:00:00 CEST | Pressemelding
STOCKHOLM – July 19, 2019. Karolinska Development's portfolio company Forendo Pharma announces today that Sunstone Life Science Ventures joins the existing international investor syndicate and has made a EUR 5 million investment in Forendo Pharma. Claus Andersson, General Partner from Sunstone, joins Forendo Pharma’s Board of Directors. With the investment, Sunstone joins the existing international investor syndicate comprising Novo Seeds, Karolinska Development, Innovestor, Novartis Venture Fund, M Ventures and Vesalius Biocapital Partners. The new financing will enable Forendo Pharma to progress its lead endometriosis program, FOR-6219, an HSD17B1 enzyme inhibitor, into the next phase of clinical studies after the successful completion of its Phase 1a study earlier this year. Endometriosis is a chronic condition that affects many women of reproductive age and causes repeated pain symptoms, infertility and impaired quality of life. Currently available treatments for endometriosis have