News in the Channel - issue #33

COMPLIANCE AS A SERVICE

Drive to comply Compliance is becoming an increasingly big – and complicated – part of many businesses’ existence, so it is no surprise that growing numbers, especially SMBs, are looking to outsource this, and resellers can provide the answer.

Compliance has been a consideration for many businesses for years, but in recent years, thanks to a raft of domestic and international legislation, it is taking up increasing amounts of time – which many can ill afford. Unsurprisingly, demand for compliance as a service (CaaS) is growing to deal with this more effectively. “The global CaaS market was valued at around $3.58 billion in 2024, and is projected to reach $9.97 billion by 2033, according to Business Research Insights,” says Max Pruger, general manager, IT Risk Management Suite, Kaseya. “There are several key drivers for the growth, including increasing regulatory complexity (GDPR, HIPAA, CCPA), rising cybersecurity threats and data breaches, shift to remote work and cloud-based infrastructure, and demand for scalable, cost-effective compliance solutions.” Kevin Kriebel, SVP of partnerships at Drata, notes that EU regulatory frameworks such as the NIS2 directive, which requires stricter incident reporting, and DORA, which requires organisations to prove digital operational resilience, are adding more demands on business. “Also, manual evidence collection is not only now impractical but scattered across domains and wastes vital hours and proves a particular struggle for firms with limited staff and expertise,” he says. “For organisations, compliance is about more than just being ready for a yearly audit, when done effectively it can demonstrate a real commitment to security and accountability.”

Tracey Hannan-Jones, consulting director – information security at UBDS Digital, agrees that businesses often have small compliance teams who are not across every framework. “Add to that, organisations migrating to pure SaaS (cloud) services compliance needs to be responsive and scalable to support transition and agility,” she notes. “As organisations become more converged, so does the need for effective risk assessments, internal audits and support for policy management whereby one policy can meet many frameworks. By outsourcing, organisations can reduce internal cost overheads and focus on their core operations, leaving experts

“

By outsourcing, organisations can reduce internal cost overheads and focus on their core operations, leaving experts to guarantee compliance and delivery...

”

CONTINUED