Techaisle Blog

Techaisle’s 2019 US SMB and Midmarket Security solutions adoption trends survey research indicates that 55 percent of US SMBs suffered a security incident in the last one year. 20 percent of SMBs reported but as high as 70 percent did not formally report yet experienced PC security & data theft breaches in the last one year. In many ways data suggests that SMBs are regressing in their adoption of security solutions to protect their corporate and mobile environments. For example, in the 2019 study, 32 percent of SMBs believe that their IT security budgets are sufficient to meet their needs, which is substantially down from 43 percent in 2017 and 22 percent assert that they are better prepared than others when it comes to IT security, considerably lower than 32 percent in 2017. Even the presence of formal security protocols in case of a breach and/or security incident has gone down from being present in 34 percent of SMBs in 2017 to 26 percent in 2019. However, the belief that cloud usage/services puts them at a higher risk of a data breach has remained virtually unchanged from 40 percent in 2017 to 38 percent in 2019. To make a fair trend comparison Techaisle surveyed same number of SMBs in 2017 and 2019 with exactly same quota sampling.

It is not that SMBs are not concerned about security risks. Cloud security is the top IT challenge in 34 percent of small businesses and 42 percent of midmarket firms. 41 percent of SMBs feel vulnerable in the cloud and 34 percent worry about cyber-attacks and 39 percent consider password compromise to be a security risk to their business.

A review of cloud security threats to SMBs illustrates the fact that while cloud brings unique challenges. Data highlights many different points of security exposure that arise when applications, data and access extend outside the corporate facility. 38 percent of SMB survey respondents are concerned with data exposure during transfers to remote locations, 37 percent are concerned with the potential for cloud-based accounts to be hijacked. Similarly, other concerns are unauthorized access to or breaches of data repositories in the cloud, insecure interfaces used to access cloud-based systems, the potential for insiders within a cloud service provider to exfiltrate information, and denial of service (DDoS) attacks – all of which represent cloud-specific threats.

Today, at Cloud Next 2019 in San Francisco, Google’s annual industry conference, Google announced its Cloud Services Platform, Anthos, for managing hybrid clouds that span on-premise and cloud data centers, and across multi-cloud environments. It is a big deal. It uses Kubernetes to enable migration across environments, is hardware agnostic, supports Amazon AWS and Microsoft Azure, and is subscription-based with a starting list price of $10,000/month per 100 vCPU block.

There is a thought that Anthos is a shot across the bows of AWS and Azure – and certainly, an approach that abstracts functionality from underlying cloud architecture will impinge on the ‘data gravity’ customer retention approach being used by these vendors. But IBM is at risk with Anthos as well, as the positive reception of its recent Red Hat acquisition is rooted in the promise of a single-vendor approach to providing hybrid and multi-cloud management and orchestration capabilities.

Clearly, Anthos has been developed with large enterprises as the target segment; some enterprise accounts are already early beta customers. To ease the addition of cloud as a core infrastructure platform in these accounts (by simplifying migration across in-premise and cloud environments) Google introduced Anthos Migrate, a service which will auto-migrate VMs from on-premise or other clouds into containers in the Google Kubernetes Engine.

It’s important to note, though, that hybrid cloud management is not only a point of pain within enterprise customers – it is a challenge (and arguably, a more acute issue) within midmarket (100-999 employees) firms. Consider these stats from Techaisle study of 510 US midmarket firms:

• 52% of midmarket firms are using multi-cloud
• 45% of midmarket firms have hybrid cloud environments
• 38% of midmarket firms are using multiple public cloud providers for IaaS and PaaS
• 27% of midmarket firms are planning to adopt G-Suite
• 25% of midmarket firms are challenged by how to migrate from one cloud platform to another
• 18% of midmarket cloud workloads are on hybrid clouds

Data for Europe and Asia/Pacific also very interesting current and planned adoption percentages for hybrid/multi-cloud.

The multi-cloud, hybrid-cloud journey began within midmarket firms much before it became fashionable within enterprises.

Techaisle’s US SMB and Midmarket SaaS adoption trend data shows that 73 percent of small businesses (1-99 employees) and 97 percent of midmarket firms (100-999 employees) are using one or more SaaS application categories. 37 percent of SMBs (1-999 employees) are using < 5 SaaS categories, however, 28 percent are using more than 10 SaaS categories (driven by midmarket firms). Overall 72 percent of SMBs are currently using 10 or less SaaS application categories but planned adoption indicates there is room to grow for the SaaS market within the SMB segment. The pace of SaaS automation is being governed by business & IT challenges, security posture, deployment and integration capability and point of purchase. Initial SaaS adoption has been for non-core business processes; however, 57 percent of mature adopters are using SaaS for core business processes. Techaisle survey data also shows that 64 percent of SMBs are using collaboration-focused SaaS solutions and 60 percent finance focused, however, future plans indicate that 62 percent will use customer-focused SaaS solutions.

As per Techaisle, US SMB and midmarket firms are forecast to spend US$25.6 billion on SaaS solutions in 2019.

Techaisle’s latest US, Asia/Pacific, Europe and Latin America SMB and Midmarket cloud adoption trends survey research shows that the external spend on cloud will likely reach US$115B in 2019. The survey data also reveals that the total spend will be higher within small businesses (1-99 employees) than midmarket firms (100-999 employees) but average spend on cloud by midmarket firms will be approximately 30X – 35X of small businesses. Although cloud adoption is accelerating within SMBs and midmarket firms, the cloud spend is still only a fraction of the global SMB and midmarket IT spend (excluding telecom services) of US$662B in 2019.

Techaisle had forecast in 2016 that that the near-term trends will include ‘multiple clouds’ with more sophisticated automation. The 2016 data showed that over 70% of small business users and just over half of midmarket firms were working with a single type of cloud platform (public, private or hybrid). Techaisle believed that over time, most midmarket firms and a more substantial proportion of the small business community would opt to use multiple different cloud platforms, deploying workloads on the infrastructure that is best suited or most cost effective for the application’s needs. This would in turn require users to connect clouds – to each other, and to on-premise equipment – to ensure that management requirements associated with these diffused IT delivery platforms did not overwhelm the IT staff. Techaisle expected to see increased use of orchestration and advanced security technologies and other sophisticated tools to help the IT generalists who are common within SMB IT units to keep pace with increases in IT management complexity.

The forecast on the use of multiple clouds and use of orchestration and automation technologies is coming true. For example, in 2019, in the US, 52% of midmarket firms are currently using multiple clouds and 38% are using multiple public cloud providers. Even the percent of midmarket firms using hybrid clouds has increased to 45% with 18% of cloud workloads on hybrid platforms. Survey data shows that other regions, especially, Europe and Asia/Pacific, although behind the US are catching up.