After a few years around Gartner, Deloitte, and Accenture I have learned that consulting reports are usually PR thinly disguised as analysis.
Look at security breakdowns of security flaws from outside firms that end with 'you don't want to get fucked by this, buy our services'