Gartner® Hype Cycle for Security Operations, 2024

While programs like CTEM may be on the horizon for many security organizations, Gartner® recommends “making incremental shifts early on the journey, leveraging technology and service consolidation and automation opportunities, reducing time to value and administrative overhead.”

Validation tools like BAS can help “evaluate the efficacy of attacks through deployed security controls and can highlight vulnerable paths leading to the organization’s most critical assets. This helps security teams prioritize strategic initiatives and evaluate the value of their acquired technologies.”

In the 2024 Hype Cycle for Security Operations, Gartner® encourages leaders to:

• Consider the objectives and initial steps of transformational initiatives like cybersecurity mesh architecture (CSMA) to anticipate long-term evolutions of the security operation function.
• Initiate tactical or more profound threat exposure management initiatives based on their current vulnerability management program maturity.
• Apply rigorous governance of SecOps requirements to fight the marketing noise around unproven capabilities.
• Test provider technology and service delivery for assurances of performance outcomes.
• Evaluate AI cybersecurity assistants for operational efficiency gains and skills augmentation.

^{Hype Cycle for Security Operations 2024; Jonathan Nunez, Andrew Davies; 29 July 2024. Gartner is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.}

^{Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.}