Where to Play and How to Win in Cybersecurity: Strategic Portfolio Priorities for RISE in the DACH Region

EXECUTIVE SUMMARY 

Building on its established cybersecurity expertise and technical foundation, RISE is well positioned to expand its cybersecurity portfolio in response to evolving market and regulatory demands in the DACH region. While the current portfolio already covers core security domains, increasing digitalisation, regulatory pressure, and a rapidly changing threat landscape require a more focused and forward-looking portfolio orientation. This project evaluates cybersecurity requirements across multiple industries and solution areas to identify where demand is strong, competitive pressure is manageable, and RISE’s capabilities can be leveraged most effectively. By defining clear priority areas for portfolio expansion, the project supports RISE in strengthening its market position, addressing emerging customer and regulatory needs proactively, and establishing a foundation for growth in the cybersecurity segment. 

Goal 

The goal of this project is to identify strategic priorities for the expansion of RISE’s cybersecurity portfolio in the DACH region. Building on RISE’s strong technical foundation and established cybersecurity expertise, the project aims to determine where portfolio extension can create the highest strategic value by addressing evolving customer requirements, regulatory obligations, and industry-specific cybersecurity needs. Accordingly, the project delivers actionable, evidence-based recommendations that translate complex market and regulatory dynamics into clear strategic guidance, while remaining aligned with RISE’s core capabilities and supporting long-term growth.  

Methodology 

A market analysis is conducted using a PETL framework to assess political, economic, technological, and legal drivers shaping cybersecurity demand in the DACH region, complemented by an analysis of prevailing threats and solution patterns. Findings from secondary research are validated through expert interviews. A competitor analysis evaluates how international cybersecurity providers address the identified cybersecurity implications, enabling the assessment of competitive intensity and the identification of market gaps. In parallel, an internal portfolio analysis maps RISE’s existing cybersecurity services against the same implications. Finally, an industry analysis applies a qualitative scoring model to evaluate eight implications across six industries, with results consolidated into an industry × implications matrix. 

Results 

The project results in recommendations for expanding RISE’s cybersecurity portfolio. The market analysis, validated by the expert interviews, identifies eight cybersecurity implications and six priority industries in the DACH region, confirming regulation, rising threat intensity, and a shift toward security services as key demand drivers. The industry × implications matrix enables structured prioritisation of expansion opportunities and highlights defence and banking as the most attractive target industries due to strong regulatory pressure, stable budgets, and feasible delivery models. Defence shows urgent potential in AI-assisted Detection and Incident Response & Cyber Resilience Planning, while banking is best addressed through Regulation-as-a-Service. Healthcare and insurance offer selective opportunities, whereas payments and automotive are limited by feasibility constraints and high competitive intensity. 

Cooperation Partner 

• ​​RISE Austria 
  Research Industrial Systems Engineering (RISE) Forschungs-, Entwicklungs- und Großprojetkberatung GmbH 
  Concorde Business Park F 
  Austria 
  rise-world.com​ 

​​Contact Person​ 

• ​​Dominik Schmelz 
  dominik.schmelz@rise-world.com​ 

Student Team 

• ​​​Victor Generalov​ 

• ​​Lucas Harrich​ 

• ​​Ema Mnichova​ 

• ​Farah Emina Puric 

• ​Vincent Straussberger 

• ​Severin Vierlinger​ 

Project Manager 

• ​​​Melina Mazzucato​ 

• ​​Caroline Fabian​​