SOC Modernization and the Role of XDR

1Enterprise Strategy Group | Getting to the bigger truth.™

SOC Modernizationand the Role of XDR
Jon Oltsik, Senior Principal Analyst, ESG Fellow
Dave Gruber, Principal Analyst

june 2022© 2022©TechTarget,
2022 TechTarget,
Inc. AllInc.
RightsAll Rights
Reserved.
Reserved.

Back to Contents

2

SOC Modernization and the Role of XDR

Research Objectives
Security operations demand massive scale to collect, process, analyze, and act upon massive amounts of data. Early XDR was anchored totwo primary data sources: endpoints and networks. While this was an improvement on disconnected EDR and NDR tools, threat detection
and response across enterprise organizations demands a wider aperture, including cloud workloads, threat intelligence feeds, SaaS
applications, and identity and access management visibility. At the same time, in order to modernize security operations centers and keep
up with the volume of security alerts, large organizations need advanced analytics to help automate tier-1 analyst tasks like triaging alerts,
correlating alerts with IoCs, and preparing incidents for investigations.
In order to gain insights into these trends, ESG surveyed 376 IT and cybersecurity professionals at organizations in North America (US andCanada) personally responsible for evaluating, purchasing, and utilizing threat detection and response security products and services.

This study sought to:
Examine the people, processes, and technology
supporting the modernization of security operations.

Determine the current perception and roleof XDR as a component of security operations
modernization efforts.

Identify key value points, metrics required to back up thosevalue points, and what’s expected from both products andmanaged services for XDR and SOC modernization.

Explore strategies used to automate triage,
speed investigations, and help organizations
find unknown threats.

© 2022 TechTarget, Inc. All Rights Reserved.

3

SOC Modernization and the Role of XDR

KEY FINDINGS
click to follow

Security operations
remain challenging.

Security professionals want moredata and better detection rules.

SecOps process automation
investments are proving valuable.

Increasing difficulty is due to the growing attack
surface, dangerous threat landscape, andincreasing use of cloud computing.

Despite the massive amount of security data inuse, more is desired, as are better detection rules.

While implementation strategies vary, automation
investments are paying off for most.

MITRE ATT&CK framework is proving
valuable for most.

XDR momentum
continues to build.

MDR is mainstream
and expanding.

However, many are still figuring out how
and where to apply it to gain value.

While there is confusion about what XDR is,investment in support of advanced threat
detection is significant.

While use cases vary, MDR services arewidely adopted across organizations of all
sizes and maturity.

© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

Security Operations
Remain Challenging

5

SOC Modernization and the Role of XDRSecurity operations have become more difficult
at most organizations over the past few years.
Specifically, more than half (52%) of respondents
believe their organization’s security operations
environment has become more difficult to manage
over the last two years. This is due to factors suchas the increasingly dangerous threat landscape, agrowing attack surface, the volume and complexityof security alerts, and public cloud proliferation.
Since these challenges will only accelerate in the
future, many CISOs realize that current SOC strategies
are inadequate. To cope with the increasing threat
volume and IT scale/sprawl, organizations haveseveral initiatives focused on SOC modernization.

52%of organizations believe that security
operations are more difficult today
than they were two years ago.

© 2022 TechTarget, Inc. All Rights Reserved.

| Security operations are more difficult today than they were two years ago because:

41+59+S
39+61+S
37+63+S

The threat landscape is growing
and changing rapidly,

41%

The attack surface is continuously
changing and evolving,39%

The use of public cloudservices has increased,

34%

40+60+S
37+63+S“

The attack surface
has grown,

40%

The volume and complexity of
security alerts has increased,

37%

Organizations haveseveral initiatives focusedon SOC modernization.”
Back to Contents

6

SOC Modernization and the Role of XDR

81% 810+190=
of organizations agree that their security operations
have been impacted by the cybersecurity skills shortage.
Security Operations Are Impacted
by the Global Skills Shortage
In addition to general security operations challenges,
it’s worth noting that 81% of organizations agree
that security operations have been impacted by the
global cybersecurity skills shortage. Typically, thisleads to increasing workload on existing staff as well
as staff attrition and burnout. Security professionals
point to several areas where staff and skills areespecially lacking, including security architects,
security engineers, tier-3 analysts, and vulnerability
assessment/prioritization analysts.

© 2022 TechTarget, Inc. All Rights Reserved.

| Most understaffed areas of security operations.

37+63+S
34+66+S

Security architect,37%

Tier-3 analysts,*

34%

35+65+S
33+67+S* i.e., similar to tier-2 analysts but more experienced and focused on difficult/critical issues.

Security engineers,

35%

Vulnerability assessment/
prioritization analysts,

33%

Back to Contents

7

SOC Modernization and the Role of XDR

Near-term SOC
Modernization Priorities
How do organizations plan to deal with increasingly
difficult security operations environments, including
insufficient staffing levels? SOC modernization is a
key program initiative, with 88% of organizations
increasing security operations spending this year. In
the near term, SOC teams plan to focus their efforts
on areas like improving the operationalization of
threat intelligence, improving the integration of asset
management data into the SOC, improving risk andalert prioritization, improving the definition andmanagement of SOC KPIs, and automating common
security operations tasks.
Moving forward, organizations will take many further
steps toward SOC modernization such as purchasing
security process automation tools, developing/building an integrated security operations andanalytics platform architecture (SOAPA), improving
the alignment of security and IT operations, further
integrating the MITRE ATT&CK framework into
security operations, and purchasing advanced
analytics tools for threat detection.

© 2022 TechTarget, Inc. All Rights Reserved.

These advancements will take time and may require security services support. Nevertheless, they should be seen as stops along
a journey toward SOC modernization. The goal is creating a SOC that can offer the scale, performance, intelligence, automation,and manageability to prevent, detect, and respond to threats, manage risk, and support the organization’s mission.

| Expected SOC-focused objectives over the next 12 months.
Improve the operationalization of threat intelligence

34%

Improve the integration of asset management data into the SOC

33%

Improve alert and risk prioritization so we can focus on the most important areas of risk

29%

Improve the definition and management of SOC KPIs and metrics

28%

Actively automate common security operations tasks

28%

Include more processes and technologies for a threat-informed defense

28%

Consolidate security operations functions into a common fusion center

27%

Developto
workflows/runbooks
automate end-to-end
security
processes| Expected actions
improve securitytooperations
over the next
12-18
months.

26%

Use data science, AI, and/or ML to develop custom analytics

26%

Purchasesecurityoperations
operationstechnology
tools designed
to help automate
andMove security
infrastructure
to the cloudorchestrate security operations processes
Increase data enrichment to provide more context during investigations
Actively develop/build or purchase an integrated software architecture forsecurityoperations
operationsactivities
tools to withcombinedsiloedsecurityframework
solutions
Align our security
the MITRE
ATT&CK

26%
25%
30%

25%

Improvethe alignmentof security
operations
and IT operations
processes
toImprove data
pipelining
to accommodate
greaterdata volumes
and stream
processing
improve incident response
Consolidate/integrate individual security products
Integrate the MITRE ATT&CK framework further into our security operations
Expand/improve threat hunting
Purchasethreat thedetection
toolsandbased
upon/embeddedwith rule
artificial
Adopt
or improveutilization
developmentof standard
sets
intelligence/machine learning technology
Consolidate user interfaces into a common security operations workspace
Deploy deception technologies to be used for threat intelligence gathering
andas sources
a decoy forfor monitoring/analysis
real network assets
Bring in new
data

35%

23%

30%

22%
21%
21%

29%

28%

20%
18%

27%

Back to Contents

Security Professionals
Want More Data andBetter Detection Rules

9

SOC Modernization and the Role of XDR

80% 800+200=

Despite the Move to XDR,
Endpoint Data Is Still
Most Valued
Eight in ten organizations collect, process, andanalyze security operations data from more thanten data sources. Security professionals believe thatthe most important sources are endpoint security
data, threat intelligence feeds, security device logs,
cloud posture management data, and network
flow logs. While this seems like a lot of data, survey
respondents actually want to use more data for
security operations, driving the need for scalable,
high-performance, cloud-based back-end
data repositories.

© 2022 TechTarget, Inc. All Rights Reserved.

of organizations use more than 10 data sources
as part of security operations.

“

Respondents actually want to use
more data for security operations.”| Most important data sources for security operations.

24%

21%

20%

20%

18%

Endpoint
security data

Threat intelligencefeeds

Log data fromsecurity devices

Cloud security posturemanagement systems

NetFlow and/or IPFIX data,
and/or VPC flow logs

Back to Contents

10

SOC Modernization and the Role of XDRMost Organizations Develop Their Own Custom Detection Rules
While vendors provide growing volumes of out-of-the-box content for threat detection, 91% of organizations supplement these efforts
with their own detection engineering. In fact, SOC teams collect, process, and analyze a variety of security telemetry to help them
determine detection weaknesses where custom rules are needed. Security teams customize vendor rule sets to meet their needs anddevelop custom rules to detect threats targeting their industry or organization. To support this trend, vendors must facilitate user
network cooperation while embracing open standards such as Sigma and YARA with established industry support.

| Extent of custom threat detection rules.

My organization develops
a significant number of custom rules
to supplement the detection rules
provided by vendors

My organization develops
some custom rules to supplement
the detection rules provided
by vendors

My organization may develop a small
number of custom detection rules
but mainly relies on those
provided by vendors

My organization does not develop
any custom detection rules
and completely relies on those
provided by vendors

48%

43%

9%

1%

48+52+U 43+57+U 9+91+U 1+99+U© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

SecOps Process
Automation Investments
Are Proving Valuable

12

SOC Modernization and the Role of XDRMany Organizations Have Realized Benefits from Security Process Automation, but Challenges Persist
Security process automation is popular, as evidenced by the 90% of organizations currently automating security operations processes, with 46% describing their automation efforts asextensive. Those engaged in security process automation report benefits like improved threat detection using playbooks, MTTR, and incident prioritization, as well as an ability to more
quickly isolate infected assets. Given security operations challenges like the growing attack surface, alert storms, and the dangerous threat landscape, security process automation willcontinue and likely merge with IT process automation to deliver efficiencies across IT and security.
While security process automation remains popular and beneficial, it does come with some challenges. Nearly two in five (39%) organizations claim that their security operations
team doesn’t have the right programming skills to develop runbooks/workflows in SOAR tools, while 21% claim that their security operations processes are immature and in need ofreengineering before they can be automated. In these cases, organizations need more to assess process workflows, looking for bottlenecks before moving on to automation. Those withlimited programming skills should investigate low code/no code SOAR options or use the process automation functionality built into other operations tools.
| Most commonly realized benefits from security operations process automation.

51+49+S
44+56+S

Improved threat detection
using playbooks

51%

Improved incident
prioritization

44%

49+51+S
44+56+S| Biggest impediments to security operations process automation.

8%

Improved mean time
to respond

49%

More quickly isolated
infected assets

44%

Software development skills: Our security operations team doesn’t
Software development skills: Our security operations teamhavetheprogrammingskillsdevelop runbooks/workflows
doesn’t
have
the programmingskills toto develop
runbooks/workflows

16%

39%

Time: The
security
teamteam
doesn’tdoesn’t
have ample
timeample
to worktime
on to work on
Time:
The
security
have
process automation
process automation

8%

16%

16%

16%

Process
immaturity:
Our security
operations
Process immaturity:
Our security
operations
processes areprocesses are
relatively immature,so wesowould
have
to reengineer
relatively
immature,
we really
would
reallyhave to reengineer them
them before proceeding to process automation
beforeproceeding to process automation

39%

21%

Tools: Our organization doesn't have technologies, like SOAR,

Tools:
organization
doesn't have technologies, like SOAR,
needed Ourfor security
process automationneeded for security process automation
No impediments

No impediments21%© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

13

SOC Modernization and the Role of XDRSOAR Tools Can Produce Results with the Right Upfront Investments and Expectations
More than a quarter (29%) of organizations use some type of security orchestration, automation, and response (SOAR) tool for process automation. Use of SOAR can be beneficial: 93% ofsecurity professionals agree that their SOAR is effective for automating complex end-to-end security operations processes and for automating/orchestrating basic security operations tasks.
SOAR doesn’t come for free, however. Success depends upon some upfront planning, investments, and the right skills. For example, 90% of security professionals claim that SOAR needed
upfront investment to build automation workflows and response playbooks, 92% agree that SOAR demands programming/scripting skills, and 80% agree that using a SOAR tool is more
complex and time consuming than anticipated. Based on this data, organizations should recognize that SOAR should be viewed as a project, not a panacea. SOAR benefits can only beachieved with the right level of planning, training, and project management.

| Sentiment for security orchestration, automation, and response (SOAR) tools.
Strongly agree
Strongly agree

Agree

Agree

Our SOAR is effective for
automating/orchestrating
end-to-end security
ating/orchestratingcomplexend-to-endcomplex
security
operations processes
operations processes

50%

50%

43%

Our SOAR is effective for automating/orchestrating basic security operations tasks

49%

44%

ting/orchestrating
basic security operations tasks
Our SOAR needed upfront investment to build automation workflows and49%

nt investment to build automation
workflowsandOur SOAR demands
skills in programming/scripting
response playbooks

39%

45%

53%

Using a SOAR tool is more complex and time consuming than we anticipated

36%

44%

ur SOAR demands skills in programming/scripting© 2022 TechTarget, Inc. All Rights Reserved.

0%

39%

20%

44%

45%

45%

response playbooks

40%

60%

43%

45%

80%

53%

“

Use ofSOAR
can bebeneficial.”

100%

Back to Contents

MITRE ATT&CK Framework
Is Proving Valuable for Most

15

SOC Modernization and the Role of XDR| Usage of MITRE ATT&CK framework for security operations.

Most Organizations Use and
See Value in the MITRE ATT&CK
Framework for Security
Operations
The MITRE ATT&CK framework has grown in
popularity to the point that nearly nine in tenorganizations use it to some extent today. As
SOC managers look into the future, they see evengreater MITRE utilization. In fact, 97% of security
professionals believe that MITRE ATT&CK (andderivative projects) will be critical, very important,or important to their organization’s security
operations strategy.

© 2022 TechTarget, Inc. All Rights Reserved.

Do organizations use the MITRE ATT&CK frameworkfor security operations?

480+410+110=
48%
Yes, extensively

48%
Yes, to a limited extent| Importance of MITRE ATT&CK framework to security operations.

97%of security professionals believe that
MITRE ATT&CK (and derivative projects)
will be critical, very important, or importantto their organization’s security operations strategy.
Back to Contents

16

SOC Modernization and the Role of XDR| Ways in which organizations are utilizing MITRE ATT&CK framework.

MITRE ATT&CK
Use Cases Flourish
MITRE ATT&CK has also become instrumental
in a variety of security operations processes.
Of those organizations embracing the MITRE
ATT&CK framework, 38% use it to help them
apply threat intelligence into their alert triage orinvestigations process, 37% use it as a guideline
for security engineering, 35% use MITRE tobetter understand the tactics, techniques, andprocedures of cyber-adversaries, and 34% use
the framework to help them understand the full
extent of attacks more quickly.
In these ways, organizations are operationalizing
MITRE ATT&CK across threat prevention,
detection, and response.

© 2022 TechTarget, Inc. All Rights Reserved.

38+62+S
35+65+S
33+67+S

To help us better apply threat
intelligence to our alert triage
and/or investigations processes,

38%

To better understand the tactics,
techniques, and procedures ofcyber-adversaries,

35%

To make sure we arecollecting the right data fromthe right data sources,

33%

37+63+S
34+66+S“

As a guideline forsecurity engineering,37%

To help organizations more
quickly understand the full
extent of attacks,

34%

MITRE ATT&CK has
also become instrumental
in a variety of security
operations processes.”
Back to Contents

XDR Momentum
Continues to Build

18

SOC Modernization and the Role of XDRXDR Awareness Continues to Grow, though Most See XDR Supplementing or Consolidating SOC Technologies
While XDR has gained more industry attention, it remains an amorphous concept with different components and definitions. This is reflected by the fact that 61% of security professionals
claim that they are very familiar with XDR technology. While this is an improvement from ESG’s 2020 research (when only 24% of security professionals were very familiar with XDR), 39% arestill only somewhat familiar, not very familiar, or not at all familiar with XDR. Users are also confused about what XDR is. While 55% of respondents say that XDR is an extension of EDR, 44%
believe XDR is a detection and response product from a single security technology vendor or an integrated and heterogeneous security product architecture designed to interoperate andcoordinate on threat prevention, detection, and response. It’s safe to say that XDR remains a bit of a work in progress.

| Familiarity with XDR technology.

Organizational definitions of XDR technology.

1% 1%

1%

1%
1%

XDR is an extension of endpoint detection andresponse (EDR) technology

16%

XDR is an extension of endpoint detection andresponse (EDR) technology

Very familiar
37%

XDR is a detection and response product suite
XDR is a detection and response product suitefroma singletechnology vendor
from a single
securitysecurity
technology vendor

Very familiar
Somewhatfamiliar

37%

1%

Somewhat familiar
Not very familiar

61%
61%

NotNotvery
familiar
at all familiar
Not at all familiar

16%

55%

28%
28%

55%

XDR is an integrated and heterogeneous security
product architecture designed to interoperate andcoordinate
threat prevention,anddetection,
andXDR
is anonintegrated
heterogeneous
response

security product architecture designed to
Don’t knowinteroperate and coordinate on threat
prevention, detection, and response
Don’t know

© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

19

SOC Modernization and the Role of XDR

more than halfof security professionals believe
XDR will supplement existing security
operations technologies.

Most See XDR Supplementingor Consolidating
SOC Technologies| Expected impact of XDR on security operations environments.

Along those lines, at this point, XDR is notseen as a potential replacement for SOC
technologies like SIEM, SOAR, and TIP. Rather,more than half (52%) of security professionals
believe XDR will supplement existing security
operations technologies, while 44% see XDR
as consolidating current security operations
technologies into a common platform. Only 2%
believe that XDR will replace any current security
operations technologies.

2% 2%

XDR will supplement current security operations
technologies
XDR will help to consolidate current security operations
technologies into a common platform
44%

52%

XDR will replace one or more of our current security
operations technologies
Don’t know/too soon to tell

© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

20

SOC Modernization and the Role of XDRUsers Want XDR to Address
Common Threat Detection andResponse Challenges
Regardless of how XDR is defined, security
professionals are interested in using XDR to help
them address several threat detection and response
challenges. XDR seems like an attractive option
since current tools struggle to detect and investigate
advanced threats, require specialized skills, and aren’teffective at correlating alerts. In summary, CISOs want
XDR tools that can improve security efficacy, especiallyregarding advanced threat detection. Additionally, theywant XDR to streamline security operations and bolster
staff productivity.
Security professionals seem to have a number ofcommon XDR use cases in mind. For example, 26%of security professionals want XDR to help prioritize
alerts based on risk, 26% seek improved detectionof advanced threats, 25% want more efficient threat/
forensic investigations, 25% desire a layered addition
to existing threat detection tools, and 25% think XDR
could improve threat detection to reinforce security
controls and prevent future similar attacks. Clearly,
users want XDR to fill gaps within the security stack
while improving the efficacy and efficiency of threat
detection and response.

© 2022 TechTarget, Inc. All Rights Reserved.

| Five most common challenges driving XDR interest.

51%

38%

36%

35%

32%

Current tools struggle todetect and investigate
advance threats

Current tools
require too many
specialized skills

Current tools
aren’t effective atcorrelating alerts

Specific gaps in clouddetection and response
capabilities

Current tools approachis too costly| Five highest priority XDR use cases.

26%

26%

25%

25%

25%

An XDR solution that
could help prioritize alerts
based on risk

Improved detectionof advanced threats

More efficient threat/
forensic investigations

Layered addition to existing
threat detection tools, aimed
at identifying advanced ormore complex threats

Using improved threat
detection to reinforce
security controls and prevent
future similar attacks

Back to Contents

MDR Is Mainstream
and Expanding

SOC Modernization and the Role of XDR

37+48+114U
42+46+12U

22

11%

The Use of MDR Is
Mainstream… and Increasing
Regardless of technology definitions orimplementation strategies, ESG’s data demonstrates
one nearly universal truth: Organizations needhelp from service providers for security operations.
Eighty-five percent of organizations use managed
services for a portion or a majority of their security
operations today. And of those utilizing managed
security services, 88% will increase the use of managed
services for security operations moving forward.

Current or planned
use of managed services
for security operations.

We use managed services for a majority of our security operations
We use managed services for a portion of our security operations
We use managed services for security operations
in a limited capacity

48%

12%

Expected approach to
managed services overthe next 12-18 months.

46%© 2022 TechTarget, Inc. All Rights Reserved.

37%

42%

We will increase our use of managed services forsecurity operations significantly
We will increase our use of managed services forsecurity operations slightly
We will maintain our current use of managed
services for security operations

Back to Contents

23

SOC Modernization and the Role of XDR| Primary reasons behind usage of or plans for managed services for security operations.

MDR Helps Organizations Focus
Security Efforts and Address
Skills And Staff Shortages
Why do organizations need managed services forsecurity operations? More than half (55%) wantsecurity services so they can focus security personnel
on strategic security initiatives. Others believe
managed service providers can accomplish things
that their organization simply cannot, with 52%
believing service providers can provide better security
operations than their organization can, 49% saying
a managed service provider can augment their SOC
team, and 42% admitting that their organization
doesn’t have adequate skills for security operations.

Focus: My organization wants to focus its security personnel on more strategic
security initiatives rather than spend time on security operations tasks
Services: My organization believes service providers can do a better job withsecurity operations than we can

52%

Augmentation: My organization believes that a service provider can augment
our SOC team with security operations

49%

Skills: My organization doesn’t have adequate skills for security operations

42%

Price: My organization did a cost analysis and found that it would cost less touse a service provider rather than do it ourselves
Staff: My organization doesn’t have an adequately sized staff for security
operations© 2022 TechTarget, Inc. All Rights Reserved.

55%

40%

35%

Back to Contents

24

SOC Modernization and the Role of XDRSingle license, single SecOps Platform powered by Open XDRThe Stellar Cyber Open XDR platform delivers comprehensive, unified security without complexity,
empowering lean security teams of any skill to successfully secure their environments. With Stellar Cyber,organizations reduce risk with early and precise identification and remediation of threats while slashing costs,
retaining investments in existing tools, and improving analyst productivity, delivering a 20X improvementin MTTD and an 8X improvement in MTTR. The company is based in Silicon Valley. For more information,
contact https://stellarcyber.ai.

LEARN MORE

About ESGEnterprise Strategy Group is an integrated technology analysis, research, and strategy firm providing market
intelligence, actionable insight, and go-to-market content services to the global technology community.

© 2022 TechTarget, Inc. All Rights Reserved.

Back to Contents

25

SOC Modernization and the Role of XDR

Research Methodology
To gather data for this report, ESG conducted a comprehensive online survey of IT and cybersecurity professionals from private- and public-sector organizations in North America between
April 4, 2022 and April 15, 2022. To qualify for this survey, respondents were required to be IT or cybersecurity professionals responsible for evaluating, purchasing, and utilizing threat
detection and response security products and services. All respondents were provided an incentive to complete the survey in the form of cash awards and/or cash equivalents.
After filtering out unqualified respondents, removing duplicate responses, and screening the remaining completed responses (on a number of criteria) for data integrity, we were left with afinal total sample of 376 IT and cybersecurity professionals.

Respondents by Number of Employees

10,000 to 19,999, 5%

Respondents by Age of Company
More than 50
years, 7%

20,000 or
more, 3% 100 to 499, 5%Less than 5
years, 1%

Other, 18%

5 to 10 years,
24%

500 to 999, 11%
5,000 to 9,999, 16%

Respondents by Industry

21 to 50 years,
25%© 2022 TechTarget, Inc. All Rights Reserved.

Government,
1%
Healthcare, 4%Communications
and media, 4%

1,000 to 2,499,
22%

2,500 to 4,999,
39%

Financial, 20%

Manufacturing,
16%

Technology,
10%

11 to 20 years,
43%

Retail/wholesale,
10%

Business
services, 16%

Back to Contents

All product names, logos, brands, and trademarks are the property of their respective owners. Information contained in this publication has been obtained by sources TechTarget, Inc. considers to be reliable but is not warranted by TechTarget, Inc. Thispublication may contain opinions of TechTarget, Inc., which are subject to change. This publication may include forecasts, projections, and other predictive statements that represent TechTarget, Inc.’s assumptions and expectations in light of currently
available information. These forecasts are based on industry trends and involve variables and uncertainties. Consequently, TechTarget, Inc. makes no warranty as to the accuracy of specific forecasts, projections or predictive statements contained herein.
This publication is copyrighted by TechTarget, Inc. Any reproduction or redistribution of this publication, in whole or in part, whether in hard-copy format, electronically, or otherwise to persons not authorized to receive it, without the express consent of
TechTarget, Inc., is in violation of U.S. copyright law and will be subject to an action for civil damages and, if applicable, criminal prosecution. Should you have any questions, please contact Client Relations at cr@esg-global.com.

Enterprise Strategy Group is an integrated technology analysis, research, and strategy firm providing market
intelligence, actionable insight, and go-to-market content services to the global technology community.
© 2022 TechTarget, Inc. All Rights Reserved.