Report:

The Forrester Wave™: Cybersecurity Consulting Services In Europe, Q1 2024

Top Vendor Products for Cybersecurity Consulting Services In Europe in 2024

• Accenture
• EY
• KPMG
• PwC

Cybersecurity Consulting Services In Europe Vendor Product Comparisons 2024

• Accenture - Leaders
  

  Pros:

  • Consistently excels in innovation and maintains a robust current offering
  • Delivers a comprehensive service portfolio across Europe with great understanding of market and CISO needs
  • Demonstrates outstanding technical security assessment capabilities and unique IP for GRC, technology stack consolidation, and industry-relevant threat and incident response
  • Delivers an exceptional partnership ecosystem with excellent examples of cocreation, including clients and competitors
  • Planning $3 billion investment in AI and upskilling of 80,000 professionals
  • Reference customers commend flexibility and high-quality talent

  Cons:

  • Strategy services are less differentiated than other leading firms, with IP and engagements on par with the wider market
  • Reference customers note aggressiveness in selling follow-up assignments as a significant weakness
  • High price premium


• EY - Leaders
  

  Pros:

  • Excels at customer centricity, industry engagement, and client knowledge sharing
  • Planned $30 million investments in European cyber R&D priorities, focusing on Quantum, AI, OT/IoT, Cyber Risk Quantification
  • Focused on developing talent and inclusion via unique neurodiversity centers of excellence
  • Demonstrates strong, multifaceted approach for delivery and Zero Trust and architecture capabilities
  • Demonstrated strength in cybersecurity strategy and vision capabilities, as well as privileged access management (EY PARIS)
  • Reference customers highlight agility in scoping and delivering projects

  Cons:

  • Trails industry frontrunners in unique IP development with partner ecosystem
  • Needs to boost innovation in GRC, technology implementation capabilities, and cultural services to keep up with other industry leaders
  • Junior level talent could derive value from further developing soft skills


• KPMG - Leaders
  

  Pros:

  • Significantly improved IP offerings and client business alignment
  • Positions cyber as crucial component of client business and technology agenda
  • Enhanced portfolio with initiatives like Quantum Risk Assessment and launch of Cyber Risk Insights
  • Industry contribution goes beyond influencing regulation and industry bodies, with market-leading contributions to education and peer-to-peer networks
  • Differentiates by combining product-led offerings with integrated education and client mentoring
  • Reference customers praised transparency when investing in an engagement at a loss to meet broader client objectives and excellent customer centricity

  Cons:

  • Reference customers noted that the firm's biggest challenge is onboarding


• PwC - Leaders
  

  Pros:

  • Cybersecurity practice excels in the boardroom
  • Vision focuses on enabling the boardroom to manage cyber risk
  • Invested in cyber acceleration centers in EMEA, located in Poland, Egypt, Portugal, and South Africa
  • Prioritizes customer partnership and repeat revenue with comprehensive program to review engagement quality and retention drivers
  • Some of the highest satisfaction levels in the market
  • Excels at cybersecurity strategy work with in-depth technical competency linked to the boardroom and CISO agenda, including AI
  • Reference customers euphoric about ability to communicate with and influence different levels of the organization

  Cons:

  • Weaker breadth of technical implementation capabilities compared to other leading firms
  • Reference customers expressed concerns about prioritization of elaborate presentations over decision-making support
  • Need for more documentation in decision-making


• Capgemini - Strong Performers
  

  Pros:

  • Recently purchased Exiger's financial crime compliance division to bolster capabilities in financial crime, risk management, and regulatory compliance
  • GRC services demonstrate successful embedding of emerging technology in client deliverables and services IP
  • Showed competitive technical acumen, business insight, and engagement delivery in evaluation demonstrations
  • Reference customers point out commendable adherence to industry standards with high levels of consistency in engagement delivery
  • Succeeds at ensuring project continuity by retaining resources over long project durations

  Cons:

  • Offerings primarily address current market security challenges; portfolio and roadmap need more differentiators compared to leading firms
  • Could improve alignment with customer needs by taking time to understand customer requirements in project delivery and when pitching new work
  • Transfer of knowledge to customers at end of engagement needs improvement


• Deloitte - Strong Performers
  

  Pros:

  • Delivers wide range of cybersecurity consulting and managed services across portfolio
  • Continues to invest in enhancing consulting talent, delivery centers, and diversity via women in cyber initiatives
  • Focused heavily on investment in managed services portfolio in EMEA
  • Reference customers commend partner ecosystem and partnership with competitors to achieve better deliverables for clients

  Cons:

  • Vision is undifferentiated and lacks ambition for cutting-edge customers
  • IP is similar to most participating vendors and not particularly innovative
  • Reference customers expressed dissatisfaction on enhancing controls instead of focusing on how controls reduce risk
  • Should enhance understanding of customer's environment and more effectively empathize with their perspective rather than commercial objectives
  • Declined to participate in full Forrester Wave evaluation process


• NCC Group - Strong Performers
  

  Pros:

  • Excels in demonstrating understanding of CISO needs and building strong partnership with customers
  • Dedicates large portion of staff time (up to 20%) for own research projects, setting it apart for talent retention and attraction
  • Reference customers note outstanding technical knowledge
  • Fox-IT subsidiary praised for expertise in threat and incident response capabilities, collaboration, and proactive relationship management

  Cons:

  • Made significant number of leadership changes in past 18 months with entirely new leadership team and changes in strategy still in development
  • Disposed of DetACT (part of Fox-IT) in December 2023
  • Didn't perform as well at demonstrating how it brings research capability into cyber training and literacy work for customers
  • Lags in how it uses emerging technology in client delivery or service improvement plans
  • On par with wider market for security strategy development and GRC capabilities
  • Highly focused on compliance drivers in technology stack consolidation and operating model work


• Wipro - Strong Performers
  

  Pros:

  • Invested in cyber brand realignment via acquisition of Capco and Edgile into CyberTransform offering
  • Continues to invest in cybersecurity firms via Wipro Ventures
  • Leverages global knowledge and services while investing in regional capabilities
  • Technical offerings are competitive and focus on customer partnership and satisfaction
  • Made noteworthy investments to strengthen GRC offering
  • Reference customers praise availability of highly skilled practitioner talent and resource continuity

  Cons:

  • Roadmap largely centered on technical proficiencies with limited presence of strategic security and cultural services
  • Approach to collaboration, partnerships, and alliances is traditional; would benefit from more differentiated IP
  • Reference customers note need to further develop strategy consulting capabilities and bring more long-term thinking to engagements


• Eviden - Contenders
  

  Pros:

  • Portfolio similar to other participating vendors with focus on OT security consulting, IAM services, and Zero Trust consulting capabilities
  • Makes use of range of security technology partners
  • Applies traditional pricing methods as well as some asset-based pricing and packaged services offerings

  Cons:

  • Atos has struggled to execute on intentions to spin business off or sell it, with recent market announcements continuing uncertainty for clients and staff
  • Contribution to cybersecurity community isn't as advanced or impactful as other participating vendors
  • Would benefit from more clearly articulating how investments in advanced computing and generative AI will positively impact security business
  • Customers should consider how current uncertainties and ongoing spin-off process will impact working with the firm
  • Declined to participate in full Forrester Wave evaluation process


• IBM - Contenders
  

  Pros:

  • Continues to use research capabilities to identify new security services like expansion of Quantum Safe Toolbox
  • Leverages IBM Garage Design Thinking methodology to deliver on minimum viable products for security
  • Demonstrates well-presented deliverables which work well with both technical and business audience
  • Demonstrates unique 'weaponized exploit score' for vulnerability management
  • Reference customers highlighted excellent relationship management, customization, how feedback was effectively addressed, and outstanding availability of technical expertise

  Cons:

  • Demonstrated undifferentiated vision and roadmap, encompassing capabilities already prevalent in broader market landscape except for Quantum Safe Technology
  • Lacks clear explanation of how roadmap aligns with European customer requirements, except capabilities related to regulations
  • Reference customers note difficult to get IBM to share views on emerging technologies or trends beyond quantum
  • Delivery quality didn't meet expectations due to inconsistencies


• Orange Cyberdefense - Contenders
  

  Pros:

  • Invests in specialist training for staff, mostly focused on technical/practitioner skills

  Cons:

  • Consulting services portfolio mainly designed to help cross-sell clients into MSSP offerings
  • IP development in consulting space significantly behind wider market, duplicating much of what's available from competitors and remaining largely audit focused
  • Employs traditional pricing models with limited innovation
  • Must focus on further differentiating roadmap and collaboration with partners and clients
  • Behind the curve in investments in emerging technology and talent
  • Declined to participate in full Forrester Wave evaluation process


• HCLTech - Challenger
  

  Pros:

  • Has over 1,250 cybersecurity consulting professionals globally
  • Cybersecurity Fusion Center in Sweden and Emerging Satellite Center in Poland
  • Good choice for firms seeking to do traditional security technology work at attractive price point

  Cons:

  • Vision is uninspiring; sticks to standard consulting services offerings
  • Takes traditional approach to collaboration with clients and alliance partner ecosystem
  • Roadmap in cybersecurity firmly behind the pack and lacks evidence of innovation
  • Impact of industry contributions lags other vendors in this evaluation
  • Cybersecurity training and literacy for customers significantly behind practices observed in rest of market
  • Mainly delivers commodity security technology work
  • Security strategy offering falls short compared to others analyzed
  • Customers should be wary of working with firm on anything connected with boardroom agenda
  • Overall cybersecurity business dominated by managed services offerings
  • Declined to participate in full Forrester Wave evaluation process

Reference

• Forrester, The Forrester Wave™: Cybersecurity Consulting Services In Europe, Q1 2024, 05-Mar-2024, ID RES179986

View Market Definition
View Vendor Movements