![]() |
½ÃÀ庸°í¼
»óǰÄÚµå
1420251
¼¼°èÀÇ ¿ÜºÎ ¸®½ºÅ© ¿ÏÈ ¹× °ü¸®(ERMM) ¼ºÀå ±âȸGlobal External Risk Mitigation & Management (ERMM) Growth Opportunities |
"»ê¾÷ ¼ö·ÅÀÌ ERMM ¼Ö·ç¼ÇÀÇ ¹Ì·¡ ¼ºÀå °¡´É¼º¿¡ ´Þ·ÁÀÖ´Ù"
Çö´ëÀÇ À§Çù »óȲÀº ¼¼°è µðÁöÅÐÈ ³ë·Â¿¡ µû¶ó Å©°Ô º¯ÈÇϰí ÀÖÀ¸¸ç, °ø°Ý ´ë»óÀÇ È®´ë, ITÀÇ º¹ÀâÈ, Ÿ»ç¿¡ ´ëÇÑ ÀÇÁ¸À¸·Î À̾îÁö°í ÀÖ½À´Ï´Ù. À§ÇùÀÇ ÁÖü´Â ÀÌÁ¦ Á¶Á÷ÀÇ ³×Æ®¿öÅ©¸¦ ³Ñ¾î¼± µðÁöÅÐ ÀÚ»êÀ» ´ë»óÀ¸·Î Çϱ⠶§¹®¿¡ °æ°è¸¦ Áß½ÃÇÏ´Â ±âÁ¸ÀÇ º¸¾È ´ëÃ¥¿¡¼´Â ´õ ÀÌ»ó ÃæºÐÇÏÁö ¾Ê½À´Ï´Ù. °¡»ó »óÈ£ÀÛ¿ë ¹× ÆÄÆ®³Ê ³×Æ®¿öÅ©ÀÇ È®ÀåÀ¸·Î ÇÇ½Ì °ø°Ý ¹× Ÿ»ç Ä§ÇØÀÇ À§ÇèÀÌ Áõ°¡Çϰí ÀÖ½À´Ï´Ù. AI¿Í ½º¹Ì½Ì°ú ³¬½Ã °°Àº ¼¼·ÃµÈ ±â¼úÀÇ º¸±ÞÀº ³¬½Ã °ø°Ý°ú ºê·£µå ½ºÇªÇÎ °ø°ÝÀÌ Áõ°¡Çϰí ÀÖ½À´Ï´Ù. ºê·£µå ¼Õ½Ç, È¥¶õ, °í°´ »ó½Ç, ¼öÀÍ °¨¼Ò¿Í °°Àº ½É°¢ÇÑ °á°ú¸¦ ÇÇÇϱâ À§ÇØ ±â¾÷Àº µ¥ÀÌÅÍ º¸È£¿¡ Ã¥ÀÓÀ» Á®¾ß ÇÕ´Ï´Ù. ÀÌ·¯ÇÑ À§ÇèÀÌ ÀÖÀ½¿¡µµ ºÒ±¸Çϰí, ¸¹Àº ±â¾÷µéÀº ¿©ÀüÈ÷ ¼Ò±ØÀûÀÎ °æ°è ±â¹Ý º¸¾È¿¡ ÀÇÁ¸Çϰí ÀÖÀ¸¸ç ¿ÜºÎ À§Çè ¿ÏÈ ¹× °ü¸®(ERMM)¿Í °°Àº Àü¹ÝÀûÀ̰í Àû±ØÀûÀÎ Á¢±ÙÀÌ ÇÊ¿äÇÕ´Ï´Ù. °Á¶µË´Ï´Ù.
ERMMÀº ¿ÜºÎ °ø°Ý ¿µ¿ªÀÇ ¸ÅÇÎ, À§Çù »óȲÀÇ Áö¼ÓÀûÀÎ ¸ð´ÏÅ͸µ, À§Çè ¿ÏÈ, Á¶Á÷ º¸¾È °È¸¦ À§ÇÑ Á¾ÇÕÀûÀÎ À§Çè Àü·« ±¸Çö¿¡ ÁßÁ¡À» µÐ »çÀ̹ö º¸¾È ´ëÃ¥ÀÔ´Ï´Ù. °Ô´Ù°¡ ERMMÀº ¿ÜºÎ °ø°Ý ¿µ¿ª °ü¸®(EASM), »çÀ̹ö À§Çù ÀÎÅÚ¸®Àü½º(CTI), µðÁöÅÐ À§Çè º¸È£(DRP)¿Í °°Àº ±âÁ¸°ú ´Ù¸¥ »ç·Ê¸¦ µ¶ÀÚÀûÀ¸·Î ÅëÇÕÇÕ´Ï´Ù. À§ÇùÀ¸·ÎºÎÅÍ Á¶Á÷À» º¸È£ÇÏ´Â °ÍÀº Á¾ÇÕÀûÀÎ À§Çè Àü·«À» °ü¸®ÇÏ°í »ç±â Ä·ÆäÀÎ ¹× °ø±Þ¸Á °ø°Ý¿¡ ´ëÇ×ÇÏ´Â µ¥ ´Ù¾çÇÑ ºÎ¼°¡ Âü¿©ÇÏ´Â °øµ¿ ÀÛ¾÷ÀÔ´Ï´Ù. ÀÌ·¯ÇÑ Çù¾÷ÀÇ Çʿ伺¿¡µµ ºÒ±¸Çϰí, ¸¹Àº Á¶Á÷°ú º¸¾È ÆÀÀº ¿©ÀüÈ÷ »çÀÏ·ÎÈµÇ¾î º¸¾È ´ëÃ¥ÀÇ Àü¹ÝÀûÀÎ È¿°ú¸¦ ¹æÇØÇϰí ÀÖ½À´Ï´Ù. ERMM Ç÷§ÆûÀº Á¶Á÷ ³»¿¡¼ °áÇÕ Á¶Á÷À¸·Î ÀÛµ¿Çϸç CTI, DRP ¹× EASM ÀÌ¿ë »ç·Ê¸¦ ÅëÇÕÇÒ »Ó¸¸ ¾Æ´Ï¶ó °Å¹ö³Í½º, À§Çè, ±ÔÁ¤ Áؼö(GRC), ¸¶ÄÉÆÃ, ¹ý·ü ¹× IT ÇÁ·Î¼¼½º¸¦ º¸¾È ¿î¿µ°ú ÅëÇÕÇÕ´Ï´Ù.
¿ÜºÎ À§Çè ¿ÏÈ ¹× °ü¸®(ERMM) ½ÃÀåÀº CTI, DRP, EASM ºÐ¾ß°¡ ¼ö·ÅÀ» °è¼ÓÇϰí ÀÖÀ¸¸ç Ãʱ⠼ºÀå ´Ü°è¿¡ ÀÖ½À´Ï´Ù. ´ë±Ô¸ð »çÀ̹ö º¸¾È Ç÷§Æû Á¦°ø¾÷ü°¡ ÀÚü ¼Ö·ç¼Ç°ú Àμö¸¦ ÅëÇØ ERMM ºÐ¾ß¿¡ ÁøÀÔÇÏ´Â °ÍÀÌ ½ÃÀå ¼ºÀå °¡¼ÓÈ¿¡ ±â¿©ÇÒ °ÍÀ¸·Î º¸ÀÔ´Ï´Ù. ÁÖ¿ä È«º¸ ¿äÀÎÀ¸·Î´Â »çÀü Ȱ¹ßÇÑ ÇÇ½Ì ´ëÃ¥ÀÇ Á߿伺 Áõ°¡¿Í °ø±Þ¸Á °ø°Ý Áõ°¡°¡ ÀÖ½À´Ï´Ù. ºÏ¹Ì(NA)¿Í À¯·´¡¤Áßµ¿ ¹× ¾ÆÇÁ¸®Ä«(EMEA)¿¡´Â º¸¾È ¼º¼÷µµ¿Í ¿¹»êÀ» °®Ãá ´ë±â¾÷ÀÌ ÁýÁßÇϰí Àֱ⠶§¹®¿¡ º¥´õ´Â °è¼Ó ºÏ¹Ì¿¡¼ÀÇ ¼ºÀåÀ» ¿ì¼±ÇÒ °ÍÀ¸·Î º¸ÀÔ´Ï´Ù. ±×·¯³ª ¾Æ½Ã¾ÆÅÂÆò¾ç(APAC)°ú ¶óƾ¾Æ¸Þ¸®Ä«(LATAM) Áö¿ªµµ º¸¾È ¼º¼÷µµ Çâ»óÀÇ Àü¹ÝÀûÀÎ µ¿Çâ°ú ÇÔ²² ¾ÈÁ¤ÀûÀÎ ¼ºÀåÀ» ÀÌ·ê °ÍÀ¸·Î ¿¹»óµË´Ï´Ù.
"Industry Convergence Dictates Future Growth Potential of ERMM Solutions."
The modern threat landscape has transformed significantly due to global digitalization efforts, leading to increased attack surfaces, IT complexity, and reliance on 3rd parties. Traditional security measures focused on the perimeter are no longer sufficient, as threat actors now target digital assets beyond an organization's network. Virtual interactions and expanding partner networks have elevated the risk of phishing attacks and 3rd party breaches. The proliferation of AI and sophisticated methodologies like smishing and phishing-as-a-service has fueled the rise of phishing and brand impersonation attacks. Businesses must take responsibility for data protection to avoid severe consequences, including brand erosion, disruptions, customer loss, and revenue decline. Despite these risks, many organizations still rely on reactive perimeter-based security, highlighting the need for a holistic and proactive approach like External Risk Mitigation and Management (ERMM).
ERMM comprises cybersecurity practices focused on mapping the external attack surface, continually monitoring the threat landscape, mitigating risks, and implementing a comprehensive risk strategy to enhance organizational security. Furthermore, ERMM uniquely integrates former distinct practices like external attack surface management (EASM), cyber threat intelligence (CTI), and digital risk protection (DRP) into a unified experience. Safeguarding organizations from threats has become a collaborative effort involving various departments in managing comprehensive risk strategies and counteract fraud campaigns and supply chain attacks. Despite this need for collaboration, many organizations and security teams still operate in silos, hindering the overall effectiveness of their security efforts. ERMM platforms serve as the connective tissue within organizations, not only consolidating CTI, DRP, and EASM use cases but also integrating governance, risk, and compliance (GRC), marketing, legal, and IT processes with security operations.
The external risk mitigation and management (ERMM) market is in its early growth stage, with the CTI, DRP, and EASM spaces continuing to converge. The entry of larger cybersecurity platform providers into the ERMM space through either proprietary solutions or acquisitions will contribute to accelerated market growth. Key drivers include the rising importance of proactive anti-phishing protection and an increase in supply chain attacks. Vendors will continue prioritizing growth in North America (NA) and Europe, the Middle East, and Africa (EMEA), given the regions' concentration of large enterprises with higher security maturity and budgets. However, the Asia-Pacific (APAC) and Latin America (LATAM) regions will also experience steady growth, with an overall trend toward increased security maturity.