Press FAQ

Publication date: 31 Jan 2023

IDC Asia/Pacific Reveals its Top Predictions for Security and Trust in 2023 and Beyond


For more information, contact:

SINGAPORE, February 1, 2023 – IDC predicts that by 2025, 45% of CEOs, fatigued by security spending without predictable ROI, will demand security metrics and results measurement to assess and validate investments made in their Security programs. This is just one of IDC’s predictions unveiled in its latest report, IDC FutureScape : Worldwide Security and Trust 2023 Predictions — Asia/Pacific (Excluding Japan) Implications.

The move towards the digital-first era, where digital models are leveraged for better productivity, growth, and financial gains, have caused organizations in the region to take a more strategic approach towards security. Slowly, digital trust is becoming an underlying theme of all digital engagements, and with it, its implications, such as data security, privacy, and sovereignty, risk mitigation, transparency, and even environmental, social, and governance (ESG).

“Asia/Pacific organizations understand the importance of gaining digital trust from consumers and partners. The goal is to digitally transform themselves and create greater confidence in security, safety, privacy, and reliability throughout the business ecosystem,” says Christian Fam, Research Manager for Security and Trust Research, IDC Asia/Pacific. Fam adds, “Asia/Pacific organizations understand that cybersecurity continues to be a key pillar to gaining a competitive advantage in this digital-first world.”

IDC's Future of Security & Trust top 10 predictions provide guidance to business leaders on how trust can be achieved and maintained as they navigate the changes ahead:

#1: Autonomous SOC: By 2026, 25% of large enterprise organizations will migrate to autonomous security operations centers accessed by distributed teams for faster remediation, incident management, and response.

#2: PbD Privacy Engineer: By 2025, 20% of organizations will employ privacy engineer to operationalize Privacy by Design principles into IT systems, processes, and product development strategy.

#3: Confidential Computing: By 2025, 15% of heavily regulated organizations will adopt Confidential Computing technologies to combine and enrich sensitive data critical to multiparty compute applications while preserving privacy.

#4: Data Sovereignty Controls: By the end of 2025, 40% of major enterprises will mandate data sovereignty controls from their cloud service providers to adhere to data protection and privacy regulatory requirements.

#5: CaaS: By 2026, driven by steep regulatory growth, talent gap and cost efficiencies measures, 25% of organizations will invest in compliance-as-a-service offerings to meet their regulatory mandates.

#6: Continuous Risk Assessment: By 2027, 45% of Asia-based 2000 companies will adopt continuous risk assessments over annual security audits, leveraging service providers to limit the burden of policies, practices and technical debt.

#7: Cyber Risk Scoring: By 2025, the SEC will publish the standards for cyber risk scoring, and publicly traded companies will be required to update and report this score on an annual basis.

#8: ESG Metrics: By 2025, 20% of organizations will advance their ESG metrics and data management beyond reporting capabilities to generate sustainably driven cost and competitive advantages.

#9: ESG Management Software: By 2026, 45% of large enterprise firms will implement purpose-specific ESG data management & reporting software as a response to emerging legislation and increased stakeholder expectations.

#10: CEO Security Metrics: By 2025, 45% of CEOs, fatigued by security spending without predictable ROI, will demand security metrics and results measurement to assess and validate investments made in their Security programs.

These predictions are discussed in greater detail in the new IDC FutureScape report, IDC FutureScape : Worldwide Security and Trust 2023 Predictions — Asia/Pacific (Excluding Japan) Implications (IDC #AP49172523). Each year, IDC releases its Top Predictions through its IDC FutureScape reports to give a crystal ball view of what is ahead for the rapidly changing ICT industry. These predictions have been used to shape the strategies and business objectives of technology leaders and business executives in the next 1-5 years. To learn more about the upcoming IDC FutureScape reports, please click HERE.

For the first time ever, Asia/Pacific Japan FutureScape Reports will come with a complimentary report that provides specific recommendations for tech vendor sales and marketing leaders. Leverage on IDC insights to better understand clients’ priorities and enhance your storytelling and go to market plans, access the IDC FutureScape: Worldwide Future of Trust 2023 Predictions — Asia/Pacific (Excluding Japan) Implications: Positioning for Success — Opportunities for Tech Sales and Marketing Leaders (Doc #AP49174022) market presentation HERE. For more information on our role-based guidance, please visit Tech Impact Business Reports | IDC FutureScape 2023 .

In case you missed IDC FutureScape Asia/Pacific earlier, you may visit IDC Arena to view the keynote sessions led by Sandra Ng and other executives. IDC Arena is IDC’s new integrated content hub that takes IDC thought leadership events online, and exclusive analyst essential guidance videos on-demand.

For more information on this IDC FutureScape document, contact Christian Fam at For media inquiries, please contact Miguel Carreon at or Michael de la Cruz at

*Asia/Pacific excluding Japan


About IDC

International Data Corporation (IDC) is the premier global provider of market intelligence, advisory services, and events for the information technology, telecommunications, and consumer technology markets. With more than 1,300 analysts worldwide, IDC offers global, regional, and local expertise on technology and industry opportunities and trends in over 110 countries. IDC's analysis and insight helps IT professionals, business executives, and the investment community to make fact-based technology decisions and to achieve their key business objectives. Founded in 1964, IDC is a wholly-owned subsidiary of International Data Group (IDG), the world's leading tech media, data and marketing services company. To learn more about IDC, please visit Follow IDC on Twitter at @IDCAP and LinkedIn. Subscribe to the IDC Blog for industry news and insights.