About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Andy is a member of Forrester's Business Technology Futures team, which serves CIOs and their business partners by predicting the long-term business impact of information technology. His research focus is on smart computing and analytics and tech-driven business transformation, analyzing the shifting economics of the industry, including spending, budgeting, and the influence of macroeconomic trends.
He also researches the growing customization of IT systems for industry-specific applications, especially in the utilities, energy, and professional services sectors. He is also a thought leader in the sourcing and procurement technology markets.
Andy has extensive experience in the technology market and in strategic planning, both as an analyst and a practitioner in the business world. He came to Forrester through its acquisition of Giga Information Group in 2003, where he had worked as a vice president and research leader since 1998. Prior to joining Giga, Andy held a variety of vice president positions at American Express in the chairman's office, technologies, strategic planning, and re-engineering. Before joining American Express, Andy worked as an economist, writer, and editor for various organizations, including Shearson Lehman Brothers; the US House of Representatives' Committee on Banking, Finance, and Urban Affairs; and the Council on Wage and Price Stability in the Executive Office of the President.
Andy has been a regular participant in Forrester's IT Forum conferences, delivering keynote addresses in 2006 and 2007 with colleagues on the future of software. He has also been a recurring presenter at Conference Board conferences on eProcurement and eSourcing. He has been quoted in leading business and technology publications, including BusinessWeek, The Economist, The New York Times, and The Wall Street Journal.
Andy earned a B.A. in philosophy from Haverford College and a Ph.D. in history from Johns Hopkins University.
Be Ready To Comply With Dynamic Regulatory Changes
Understanding the laws and regulations that govern data privacy across your organization is critical for any company, but it can be challenging. As a result, too many security and risk (S&R)...
Policy And Procedures: The S&R Practice Playbook
Over recent years, the information security industry has matured nicely; experts and associations have documented many best practice models, and their adoption has been widespread. It's disconcerting...
Road Map: The S&R Practice Playbook
This report outlines the future state of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...
Benchmarks: The S&R Practice Playbook
The global downturn has constrained security budgets for several years now, and chief information security officers (CISOs) have become accustomed to taking on more responsibilities without...
The role of the chief information security officer (CISO) is increasingly central to many organizations; however, it has many guises. No two CISOs have exactly the same roles and responsibilities,...
Change Management: The S&R Practice Playbook
For too long, creating security awareness has been an afterthought, something CISOs did in their spare time after putting out the operational fires that sprang up around them with alarming...
Since cyberinsurance first emerged in the late '90s, the number of available policies, the scope of those policies, and the number of insurers offering them have all significantly increased. Due to...
Stakeholder Needs: The S&R Practice Playbook
This report maps out the key stakeholders for Forrester's solution for security & risk (S&R) professionals looking to build a high-performance security program and organization. This report is...

Assessment Framework: The S&R Practice Playbook
This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

Future Look: The S&R Practice Playbook
This report outlines the future look of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...
Strategic Plan: The S&R Practice Playbook
This report outlines the strategic vision of Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. This report is...
CISOs Need To Act To Realize True Business Benefit From Security Policy
As information security has become more widely understood, the majority of organizations have built a set of supporting policies. Unfortunately, many of these are slowly drifting toward irrelevance...
Ernst & Young, Deloitte, IBM, Accenture, PwC, And KPMG Lead, With Wipro Following Close Behind
The information security consulting market is growing explosively because security and risk professionals often lack the skill and bandwidth to accomplish their increasingly difficult mission. To...

Skills And Staffing: The S&R Practice Playbook
This report outlines the skills and staffing strategy for Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We...
Why The Next Internet Revolution Is Much More Alarming Than The Last
There is a revolution happening right now; innovative organizations are planning how they can merge the physical and digital worlds to bring new products and experiences to their customers. At the...

Executive Overview: The S&R Practice Playbook
Today, business leaders expect the CISO to not only protect the organization from run-of-the-mill hackers but to also protect its brand and competitive advantage in the marketplace — all while...
