Forrester

Why Read This Report

It's amazing how little progress we see year after year. As we look back to early 2007, or even 2006, not a lot has changed in what's expected of the security organization and what the chief information security officers (CISOs) are saying they'll do. The only change that we see is the intensity of some of those issues. For example, we always knew that protecting customer data was important, but The TJX Companies' breach brought new urgency to this issue. CISOs are finally getting the visibility that they had been asking for, but in order to be taken seriously, they need to change their way of doing things. Recent conversations with CISOs and results from Forrester surveys attest that CISOs are looking at the right issues; what's still missing is the business-centric approach.