India End-User Spending on Security and Risk Management to Grow 9.4% in 2022: Gartner

Work-From-Anywhere Culture, Hybrid and Virtual-First Workplaces to Drive Spending on Cloud Security and Integrated Risk Management

MUMBAI, India., March 8, 2022 – End-user spending on security and risk management in India is forecast to total $2.6 billion in 2022, an increase of 9.4% from 2021, according to Gartner, Inc.

“Hybrid or remote working is the new normal in 2022. Some organizations have even shifted to a virtual-first approach following the learnings from 2020,” said Prateek Bhajanka, senior principal research analyst at Gartner. “This model of working puts the spotlight on cloud, endpoint and identity security as employees become the ‘branch of one’ for an organization.”

Gartner research shows that there is a significant shortage of skilled cybersecurity professionals. Therefore, end-user organizations in India often engage with security service providers to meet their cybersecurity objectives. As a result, spending on security services is forecast to total $1 billion in 2022, the highest among all segments. This will be followed by spending on network security equipment and infrastructure protection (see Table 1).

Table 1: Security and Risk Management End-User Spending for All Segments in India, 2021-2022 (Millions of U.S. Dollars)





2021 Spending


2021 Growth (%)


2022 Spending


2022 Growth (%)

Application Security 118 25.1 140 18.5
Cloud Security 10 46.3 14 41.9
Consumer Security Software 139 5.1 140 0.3
Data Security 120 22.9 141 17.6
Identity Access Management 212 13.6 230 8.8
Infrastructure Protection 301 17.8 344 14.4
Integrated Risk Management 128 33.2 169 31.9
Network Security Equipment 316 7.2 345 9.3
Security Services 1,013 8.4 1,058 4.4
Other Information Security Software 28 6.5 29 3.0
Total Spending 2,385 12.2 2,610 9.4

Source: Gartner (March 2022)

“COVID-19 was a pivotal moment in the way organizations approached risk or prepared for disruptions. Now, security leaders are putting risk management at the center of their security and business strategies,” said Bhajanka.

Cybersecurity will continue to be a top priority for Indian CIOs in 2022, as revealed in the 2022 Gartner CIO and Technology Executive Survey. Out of the total CIOs in India surveyed, 64% said they will increase their spending on technologies related to cyber and information security in 2022, higher than the global average of 57%.

“Indian leaders responsible for security and risk management need to adopt an assume breach mindset because security incidents are inevitable in the current era,” said Bhajanka “They should prioritize spending on building detection and response capabilities, and not just technologies. This will help them reduce time to detect and time to recover from incidents.

“In 2022, Indian security and risk management leaders will need to revisit their approach to network security with a focus on technologies such as zero-trust network access (ZTNA) for context-based security. They need to envision the future of network security in the cloud.”

Also see:

Remote Workers More Aware about Security, but are they Following Security Policies?

Brian Pereira

Brian Pereira is an Indian journalist and editor based in Mumbai. He is the Founding Editor of Digital Creed, which he founded in 2015. A technology buff, former computer instructor, and software developer, Brian has 28 years of journalism experience (since 1994). He is sound and confident about his knowledge of business technology concepts. And he is a believer in continual education/learning. Brian is the former Editor of CHIP and InformationWeek magazines (India). He has written hundreds of technology articles for India's leading newspaper groups such as The Times of India and Indian Express Newspapers (among others). And he has conducted more than 300 industry interviews during his journalism career. Brian also writes on Aviation, cybersecurity, startups, and topics directed at small and medium businesses. He achieved certifications from the EC-Council (Certified Secure Computer User) and from IBM (Basics of Cloud Computing). Apart from those, he has successfully completed many courses on Content Marketing and Business Writing. Follow Brian on Twitter (@creed_digital) and LinkedIn. Email Brian at: [email protected]

Related Articles

Back to top button