2025AI在终端管理和安全融合中的核心作用分析报告

april 2025ENTERPRISE STRATEGY GROUP Research Objectives Organizations continue to face increasing complexity in endpoint management and security that is driven by the rapid expansionof remote work, rising device and OS sprawl, vulnerability management and incident response challenges, and continuing threatslike ransomware. At the same time, the growing influence of AI and automation is reshaping both offensive and defensivestrategies—empowering defenders with new tools while enabling bad actors to launch more sophisticated attacks. efforts, Enterprise Strategy Group, now part of Omdia, surveyed 364 IT and cybersecurity professionals in North America(US and Canada) responsible for evaluating, purchasing, and supporting endpoint management and/or security technologies. Assessthe state of endpoint management and security as well as the challenges and priorities that drivedecision-making. convergence takes hold as well as future prioritiesand likely spending intentions. with the benefits and dangers of AI. teams, devices in use, and experienced security events. KeyFindings Sprawl Persists Amid Changing Tooland Team Consolidation Efforts Increasing Device Diversityand Management Complexity Not Unmanaged by Choice Organizations FaceIncreasing Device Diversityand Management Complexity Most organizations are managing thousands—and in many cases, tens of thousands—of endpoint devices. Nearly three-quarters (72%) of organizations report having at least 1,000devices in play, spanning laptops, mobile devices, and more. This level of device sprawl, especially across both managed and unmanaged assets, underpins the operational challengesteams face as they try to maintain visibility, enforce policies, and respond to threats in real time. Compounding the challenge, employees are using multiple devices to get their workdone. In fact, 93% of organizations say the typical employee uses two or more endpoints daily. That includes laptops, smartphones, tablets, and other devices, all of which need to be This level of per-user sprawl puts additional pressure on IT and security teams already stretched thin by growing device counts and limited visibility across environments. Because ofthis, roughly 40% of respondents noted that endpoint management and/or security are now more difficult compared with two years ago. 35% The Core Drivers Behind Rising Complexity in Endpoint Management andSecurity Can Be Summed Up in Two Words: More and Less Organizations are dealing with more threats, more frequent OS and application updates, more devices (both managed and unmanaged), and more remote or hybrid workers.The growing diversity of operating systems, applications, and user needs only adds to the challenge of managing and securing these workspaces. If there’s a theme around what organizations have less of when it comes to managing and securing devices, it includes time, expertise, and visibility. Respondents point to a lack ofskilled staff, insufficient training, and limited time to learn or optimize new tools as contributing factors—highlighting a growing resource gap at a time when demands continue to rise. Skill Gaps and AI Threaten to Make Endpoint Matters Worse While many organizations understandably struggle to support new technologies with adequately knowledgeable and experienced staff, a significant portion noted headcount gaps inboth newer areas like AI/ML and cloud security and traditional endpoint management, as well as automation and workflow development and IoT device management. Perhaps mostconcerning is that AI is enabling bad actors to take advantage of the very gaps in skill from which organizations suffer across a variety of areas, in addition to a general increase in both This, as will be seen later, has a direct influence on an organization’s ability to manage and protect itself, let alone know whether it is under attack. Management and Security ToolSprawl Persists Amid Changing Tooland Team Consolidation Efforts Tool Sprawl Is Real and Driven by Numerous Factors Most organizations are juggling multiple tools for both endpoint management and security,with the majority using between five and 15 tools in each category. Nearly 30% say they’remanaging 16 or more tools for endpoint security alone. While respondents were askedseparately about their management and security tools, it’s likely that some tools span bothfunctions. Still, the overall takeaway is clear: Teams are supporting a large number of tools, tools include requirements spanning customer security, cyber insurance, and industrycompliance, as well as specialized tools for IoT/OT. Tool Consolidation Seen as a Positive Eight in ten organizations believe that consolidating endpoint management and security tools would positively impact their ability to manage and secure endpoints, which is a positionthat is reinforced throughout this research. Furthermore, 50% of respondents believe that overlapping tool functionalities negatively impact the