PwC has been named as a Leader in the IDC MarketScape: European Cybersecurity Governance, Risk, and Compliance Consulting and Professional Services 2026 Vendor Assessment (July 2026, IDC #EUR154110926).
According to the report, ‘Global and European providers, spanning large professional services firms, major IT services companies, and specialist consultancies, are investing heavily in GRC capability, proprietary tooling, and AI-enabled delivery to meet growing client demand. Vendors are competing on the depth of their regulatory coverage, the sophistication of their risk quantification capabilities, and increasingly, their ability to demonstrate sovereignty-aligned delivery (however defined) for clients with data residency and security independence requirements.’
IDC MarketScape vendor analysis model is designed to provide an overview of the competitive fitness of technology and suppliers in a given market. The research methodology utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each supplier’s position within a given market. The Capabilities score measures supplier product, go-to-market and business execution in the short-term. The Strategy score measures alignment of supplier strategies with customer requirements in a 3-5-year timeframe. Supplier market share is represented by the size of the icons.
Commenting on PwC, the IDC MarketScape report states, ‘PwC delivers cybersecurity GRC consulting and advisory services in Europe across the full spectrum from strategy and governance through to execution and managed services.’
“PwC applies a risk and threat-led approach to GRC delivery in Europe, informed by its Global Threat Intelligence capability and aligned with European regulatory frameworks such as DORA, NIS2, GDPR, the Cyber Resilience Act, and the EU AI Act. Across Europe, the firm operates COEs specializing in regulatory transformation, cyber-resilience, AI governance, operational technology (OT) security, and controls modernization.”
“PwC has been named a Leader in a competitive European cyber security GRC consulting market. Their focus on strategy and execution, attention to boardroom priorities, and alliance partner capabilities are key differentiators, and enable them to help clients move from uncertainty to stability with confidence.”
On PwC’s strengths, the IDC MarketScape states, “PwC combines broad European coverage across six GRC domains with purpose-built platforms including MCR and Risk Link, supporting delivery from strategy through managed services.”
“Nine purpose-built GRC automation agents, combined with MCR and a global AI hub, position PwC to shift GRC delivery toward scalable, AI-assisted workflows.”
The report goes on to say, ‘Organizations that need GRC advisory and governance reporting connected across strategy, technology, and managed services may benefit from PwC's end-to-end model and MCR platform. Organizations undertaking multiyear programs spanning GRC strategy, controls uplift, and managed services may benefit from PwC's global talent network, delivery centers, and alliance partnerships.’
“We are proud to be recognised as a Leader in the IDC MarketScape for European Cybersecurity Governance, Risk, and Compliance Consulting and Professional Services. We believe this recognition reflects our commitment to helping clients address complex regulatory challenges, strengthen resilience and transform cyber risk management through deep sector expertise, leading technology and AI-enabled innovation.”
IDC MarketScape vendor assessment model is designed to provide an overview of the competitive fitness of technology and service suppliers in a given market. The research utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each vendor’s position within a given market. IDC MarketScape provides a clear framework in which the product and service offerings, capabilities and strategies, and current and future market success factors of technology suppliers can be meaningfully compared. The framework also provides technology buyers with a 360-degree assessment of the strengths and weaknesses of current and prospective vendors.