skip to main content
Close Icon We use cookies to improve your website experience.  To learn about our use of cookies and how you can manage your cookie settings, please see our Cookie Policy.  By continuing to use the website, you consent to our use of cookies.
Global Search Configuration


Strong governance, incorporating risk and compliance management, must drive security protection directly, ensuring that it meets and supports organizations' business objectives, and is managed appropriately to counter the risks that arise internally and externally.


  • Risk is the critical link between business and security concerns, providing a quantitative basis for the automation of security operations. This is increasingly essential to cater for ever-tougher performance-, capacity-, and complexity-related demands.

Features and Benefits

  • Recommends how enterprises should make progress toward achieving business-driven security.
  • Identifies what is needed from vendors to support enterprises looking to achieve business-driven security.

Key questions answered

  • Is my organization alone in not knowing whether our security architecture and solutions fit business needs optimally?
  • What benefits can my organization consider to support a business case for better capabilities?
  • What capabilities should my organization focus on in order to optimize the link between business and security?

Table of contents


  • Catalyst
  • Ovum view
  • Key messages


  • Recommendations for enterprises
  • Recommendations for vendors

For many organizations, security has not been developed in line with business needs

  • Multiple, high-priority operational issues result in growing pressure
  • A legacy of addressing problems individually has led to self-defeating complexity
  • Operational and strategic security issues should be addressed collectively

Growing and diverse compliance obligations necessitate security’s integration with governance

  • Compliance obligations are becoming more complex and require risk-focused capabilities
  • Enterprises must be able to integrate governance of broader, more diverse compliance requirements

Business-driven security enables risk to inform security-related decisions and outcomes

  • Risk should underpin business cases for security
  • The language and culture of risk enable cross-disciplinary collaboration on security decisions

Organizations should align their capabilities as a foundation for business-driven security

  • GRC solutions address threats to organizational objectives
  • Identity underpins all business relationships and the delivery and protection of services on all types of platform
  • Cybersecurity applies intelligence to counter unforeseen threats that can develop rapidly


  • Methodology
  • Further reading
  • Author

Recommended Articles

  • Service Provider Markets, Consumer & Entertainment Services,...

    MWC 2018 Highlights

    By Ronan De Renesse 27 Feb 2018

    Over 20 of our senior Ovum analysts and consultants attended this year’s Mobile World Congress in Barcelona at the end of February. In between meetings, briefings and presentations, our analyst team were blogging and tweeting about key developments, trends and rumors. Have a look through our daily MWC 2018 Highlights to find out what happened.

    Topics 5G AI IoT Cloud Payments SDN/NFV Smart home

  • Consumer & Entertainment Services

    US pay TV: Is it facing an existential threat?

    By Adam Thomas 28 Mar 2018

    With US pay TV having endured the worst year in its history, thoughts have inevitably turned to the future. The likelihood remains that the immediate future will remain highly uncomfortable for everyone except the scaled multinational digital platforms.

  • Enterprise Decision Maker, Enterprise IT Strategy and Select...

    2017 Trends to Watch: Big Data

    By Tony Baer 21 Nov 2016

    The breakout use case for big data will be fast data. The Internet of Things (IoT) is increasing the urgency for enterprises to embrace real-time streaming analytics, as use cases from mobile devices and sensors become compelling to a wide range of industry sectors.

    Topics Big data and analytics IoT


Have any questions? Speak to a Specialist

Europe, Middle East & Africa team - +44 (0) 207 017 7700

Asia-Pacific team - +61 (0)3 960 16700

US team - +1 646 957 8878

Email us at

You can also contact your named/allocated Client Services Executive using their direct dial.
PR enquiries - Call us at +44 788 597 5160 or email us at

Contact marketing -

Already an Ovum client? Login to the Knowledge Center now