Forrester

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:New Report: The GRC Platform Market Is Taking Big Steps Toward Clarity But Still Has A Long Way To Go

I'm proud to say that we published my report "Market Overview: GRC Platforms" earlier today. It will come as little surprise to most of you that the overall GRC market is still saturated with...

For Security & Risk Professionals

Tool:IT GRC Adoption

For Security & Risk Professionals

Blog:For GRC Decisions, Avoid The ROI Discussion If Possible . . . But If You Can't, Here Are Some Tips

This week we published the first in a series of reports I'll be writing to help clients calculate the return on investment of GRC technologies. This report, How To Measure The ROI Of A GRC...

For Security & Risk Professionals

Report:The Forrester Wave™: Enterprise Governance, Risk, And Compliance Platforms, Q4 2011

As Leaders, BWise, MetricStream, IBM OpenPages, And RSA Archer Continue To Push The Envelope

Innovation among top enterprise GRC platform vendors has kept up an impressive pace as vendors aim to stay one step ahead of their customers' own advancements in governance, risk, and compliance...

• Downloads: 1221
• Rating:

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Plan And Execute Appropriate Risk Treatment

Developing And Managing Efforts To Control Unacceptable Levels Of Risk

From understanding comes action. Your risk management efforts up to this point will have yielded a list of concerns; a measure of how much these concerns could affect objectives; and a decision of...

• Downloads: 194
• Rating:

For Security & Risk Professionals

Tool:GRC Revenue Distribution

For Security & Risk Professionals

Blog:Don’t Forbid Employees From Using The Escalator, Give Them Reasons To Use The Stairs

Guest post from Researcher Nick Hayes. If you had to go up one level in a train station, would you take the stairs or use the escalator? Most people would choose the escalator. But what if the...

For Security & Risk Professionals

Client Inquiry:What Is The State Of Governance, Risk, And Compliance In The Indian Market?

What is the size of the governance, risk, and compliance (GRC) market, and what is the market growth rate in India? Who are the major GRC vendors in India, and what are the areas of opportunity?

For Security & Risk Professionals

Client Inquiry:What Are The Governance, Risk, And Compliance Characteristics Of Firms Of Varying Adoption Levels?

What would you see as the governance, risk, and compliance characteristics of each of the following groups: 1) laggards; 2) middle of the pack; and 3) early adopters? Are there any special...

For Security & Risk Professionals

Report:Optimize Your GRC Program For 2012 And Beyond

This report outlines Forrester's solution for security and risk (S&R) professionals looking to establish a formal risk and compliance management program. We designed this report to help S&R...

• Downloads: 605

For Security & Risk Professionals

Blog:Developing A Formal Risk Management Program

Of all the client inquiries and advisories we get related to risk management, one of the most frequent topics of discussion continues to be the role of risk management. Who should be involved? How?...

Client Inquiry:What Are Our Options For Software That Tracks Employee Gifts?

We're looking for software that assists with the management and auditing of gifts that our employees receive from customers and suppliers.

For Security & Risk Professionals

Report:Topic Overview: Governance, Risk, And Compliance

Governance, risk, and compliance (GRC) as a concept continues its steady march toward recognition as an accepted business practice. And even if they aren't using the term, organizations around the...

• Downloads: 1284

For Security & Risk Professionals

Report:Stop Ignoring Third-Party Risk

Practical Steps To Start Uncovering And Treating The Hidden Risks In Third-Party Relationships

The growing reliance on third-party providers is an increasingly uncomfortable trend for security and risk professionals. Financial pressures and efficient delivery models create great incentives for...

• Downloads: 477

For Security & Risk Professionals

Blog:Risk Professionals' Window Of Opportunity

In my ongoing work with risk management professionals, I've been encouraged to see how quickly the role is growing in influence and responsibility in today's...

For Security & Risk Professionals

Blog:Implement A Successful GRC Program With Forrester's Governance, Risk, and Compliance Playbook

I’m proud to announce that this week Forrester launched our Governance, Risk, and Compliance Playbook, a collection of in-depth reports covering the critical information you need to implement a...

For Security & Risk Professionals

Report:TechRadar™ For Risk Management Professionals: GRC, Q4 2012

Road Map: The Governance, Risk, And Compliance Playbook

The governance, risk management, and compliance (GRC) technology market is one of fluctuation, confusion, and contention. Many technologies relevant for governance, risk management, and compliance...

• Downloads: 380
• Rating:

For Security & Risk Professionals

Blog:Are Your Risk Management Efforts Enabling Partnership Opportunities?

Forrester's Security and Risk Management clients often describe the frustration they feel when they are not included in important initiatives until after decisions have been made. Lately, this...

For Security & Risk Professionals

Report:Assess Your Security Program With Forrester's Information Security Maturity Model

Assessment Framework: The S&R Practice Playbook

This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

• Downloads: 2040
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:Cultivate A Compliance And Risk Management Culture For Sustained Performance

Continuous Improvement: The Governance, Risk, And Compliance Playbook

When you're challenged by a constantly changing regulatory landscape, business environment, and risk profile, it's easy to overlook the critical role corporate culture plays in keeping compliance and...

• Downloads: 444

For Security & Risk Professionals

Blog:IBM To Acquire Algorithmics... GRC And Financial Risk Management Get A Little Closer

Today IBM announced plans to acquire the Fitch Group’s Algorithmics, a heavy-hitter in financial risk management software and services market, for $387 million.  Here are my initial...

For Security & Risk Professionals

Report:Maximize Business Performance With A World-Class GRC Program

Executive Overview: The Governance, Risk, And Compliance Playbook

Unexpected events are at best distracting and at worst catastrophic for an organization as it strives to meet its objectives. Risk and compliance professionals must help their colleagues anticipate...

• Downloads: 202

For Security & Risk Professionals

Client Inquiry:The Role Of IT Security Management Versus IT Audit

We (IT security management) are currently discussing our tasks in relation to those of the auditing department. We would like to get advice about a typical or legally defined separation between the...

For Security & Risk Professionals

Client Inquiry:How Long Does It Take A Company To Move Up In Forrester's Information Security Maturity Model?

How long does it take a company to move up a level of maturity in Forrester's Information Security Maturity Model?