The three factors are the increase in remote and hybrid work, the transition from VPNs to zero trust network access (ZTNA), and the shift to cloud-based delivery models.

“The pandemic accelerated hybrid work and the shift to the cloud, challenging the CISO to secure an increasingly distributed enterprise,” said Gartner senior director analyst Ruggero Contu.

“The modern CISO needs to focus on an expanding attack surface created by digital transformation initiatives such as cloud adoption, IT/OT-IoT convergence, remote working and third-party infrastructure integration. Demand for technologies and services such as cloud security, application security, ZTNA, and threat intelligence has been rising to tackle new vulnerabilities and risks arising from this exposure."

Gartner forecasts spending on information security and risk management products and services will grow 11.3% to more than US$188.3 billion in 2023.

Cloud security spending is tipped to increase by 26.8% in 2023, closely followed by application security spending at 24.7%.

Security services (including consulting, hardware support, implementation and outsourced services) is the largest category of spending, at almost US$72 billion in 2022, and a predicted US$76.5 billion in 2023.

Infrastructure protection is a distant second at US$27.4 billion and US$31.8 billion respectively.

The ongoing need to secure working from home means technologies such as web application firewalls, access management, endpoint protection platform and secure web gateway see continued demand to at least the end of the year, Gartner predicts.

In this environment, ZTNA is the fastest-growing segment in network security with forecast growth of 36% in 2022 and 31% in 2023.

Gartner notes that as organisations become familiar with the technology, there is a growing trend to use it for on-premises as well as remote work.

And multicloud environments add complexity and increase security risks, so Gartner sees increased use of cloud security and growth in cloud-native solutions' market share.

The combined market for cloud access security brokers and cloud workload protection platform is forecast to grow 26.8% to US$6.7 billion in 2023.

Gartner clients can learn more in Forecast Analysis: Information Security and Risk Management, Worldwide and Forecast: Information Security and Risk Management, Worldwide, 2020-2026, 3Q22 Update.