Forrester

For Security & Risk Professionals

Report:Simplify Cybersecurity With PCI

Policy And Procedures US Government Spotlight: The Security Architecture And Operations Playbook

US federal law, specifically the Federal Information Security Management Act (FISMA), requires US federal government agencies to adhere to National Institute of Standards and Technology (NIST)...

• Downloads: 230

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Client Inquiry:How Retailers Handle Login Expiration Time

How do retailer websites handle login expiration? Is it session-based, login-persisted, 30-day cookie, and so on? What is the norm or best practice?

For Security & Risk Professionals

Report:Create New Mobile Operations And Security Professionals

Skills And Staffing: The Mobile Operations And Security Playbook

This report outlines the skills and staffing needs for Forrester's solution for security and risk (S&R) and infrastructure and operations (I&O) executives working on mobile security and operations...

• Downloads: 526
• Rating:

For Security & Risk Professionals

Report:How To Market Security To Gain Influence And Secure Budget

Traditional security awareness initiatives focus on end user activities that help to create a security culture. Unfortunately, these activities don't succeed in obtaining buy-in or engagement from...

• Downloads: 777
• Comments: 1

For Security & Risk Professionals

Blog:What The Citi iPhone Security Flaw Says About Mobile Security

Yesterday, the Wall Street Journal reported that Citigroup’s iPhone electronic banking app contained a security flaw that had been fixed. According to the article, a new version of the app...

For Security & Risk Professionals

Blog:President Obama Cares About Records Management – Do You?

Last week, following on President Obama’s memorandum on managing government records, the Office of Management and Budget (OMB) and the National Archives and Records Administration (NARA) issued...

For Security & Risk Professionals

Client Inquiry:Active Directory Password Policy

We're looking for current best practices and recommendations for Active Directory (AD) password policies.

For Security & Risk Professionals

Report:Survey Employees To Target Mobility Improvements

Benchmarks: The Mobile Security And Operations Playbook

This report outlines the benchmarks of Forrester's solution for security and risk (S&R) executives working on mobile security and operations initiatives. This report provides a benchmark of budgets,...

• Downloads: 518
• Rating:

For Security & Risk Professionals

Blog:Nine Managed Security Services Providers (MSSPs) Compete In The North American Market

After months of diligent vendor evaluations, last week we officially published The Forrester Wave: Managed Security Services: North America, Q1 2012. This report features our detailed analysis on...

For Security & Risk Professionals

Report:Work With Marketing Pros To Prevent Breaches

How To Protect Your Email Data

In facing security woes such as the Epsilon breach, email marketing professionals have received a wake-up call: Security failures can cost a lot — not just a lot of money but also goodwill with...

• Downloads: 168

For Security & Risk Professionals

Client Inquiry:Is The USA Patriot Act A "No Go" For EU Companies That Want To Use US Cloud Services?

We plan to move our mailing and collaborative systems to the cloud where main actors are US companies and subject to the USA Patriot Act. How do European companies deal with this US law? Is the...

For Security & Risk Professionals

Blog:New Report: The GRC Platform Market Is Taking Big Steps Toward Clarity But Still Has A Long Way To Go

I'm proud to say that we published my report "Market Overview: GRC Platforms" earlier today. It will come as little surprise to most of you that the overall GRC market is still saturated with...

For Security & Risk Professionals

Tool:E-SSO Adoption Outpaces Other IAM Initiatives

For Security & Risk Professionals

Tool:IT GRC Adoption

For Security & Risk Professionals

Report:Build A High-Performance Security Organization

Executive Overview: The S&R Practice Playbook

Today, business leaders expect the CISO to not only protect the organization from run-of-the-mill hackers but to also protect its brand and competitive advantage in the marketplace — all while...

• Downloads: 596
• Rating:

For Security & Risk Professionals

Blog:How To Survive And Thrive At #SXSW If You’re Not From Texas

I’ll be in Austin, TX this weekend to participate in South-by-Southwest Interactive. My panel “Big Data Smackdown on Cybersecurity” will be held Sunday, March 11 from 12:30PM -...

For Security & Risk Professionals

Report:Prepare Your Security Organization For The Internet Of Things

Why The Next Internet Revolution Is Much More Alarming Than The Last

There is a revolution happening right now; innovative organizations are planning how they can merge the physical and digital worlds to bring new products and experiences to their customers. At the...

• Downloads: 353
• Comments: 1
• Rating:

For Security & Risk Professionals

Client Inquiry:What Are Our Options For Secure Access Solutions For A Web Interface?

We're looking for secure access solutions for a web interface that will enable some sort of strong authentication but doesn't use a two-factor password token. We're thinking of solutions that allow a...

For Security & Risk Professionals

Report:Managing The Security And Risk Challenges Of Personal Devices In The Workplace

An Empowered Report: Security Pros Must Work Inside And Outside Of IT To Address The Challenges

Amid the rising trend of personally owned smartphone and tablet use in the workplace, security professionals face the tough question of how to properly manage and secure these devices. Secure...

• Downloads: 1823

For Security & Risk Professionals

Report:The 2012 Consumer Security Market Landscape: Key Dynamics And Growth Opportunities

Freeware solutions, device proliferation, consumerization, the app Internet, and new entrants offering adjacent consumer privacy and security offerings have and will continue to change consumer...

• Downloads: 278

For Security & Risk Professionals

Blog:Application Whitelisting Offers A Tantalizing Alternative To Popular "Whack-A-Mole" Antivirus Strategies

Guest Post From Researcher Chris Sherman Traditional antivirus techniques have been fighting a losing battle for years. Popular hacker exploit kits pounce on new vulnerabilities quickly...

For Security & Risk Professionals

Report:Pull Your Head Out Of The Sand And Put It On A Swivel: Introducing Network Analysis And Visibility

Essential Functionality For The Zero Trust Model Of Information Security

In today's threat environment, the network perimeter has disappeared. Insiders are as insidious a threat as outsiders. In the past, the "trust but verify" model did not facilitate insight into...

• Downloads: 890

For Security & Risk Professionals

Blog:Participating In Markets For Portable Identities In The Cloud: What’s The Coin Of Your Realm?

Many IT security pros are moving toward disruptive new authentication and authorization practices to integrate securely with cloud apps at scale. If you’re considering such a move yourself,...

For Security & Risk Professionals

Client Inquiry:What Are The Most Critical PCI Log Management Requirements?

When it comes to selecting a logging consolidation tool for an enterprise, what are some tips for developing a request for proposal? Based on your experience, what would you single out as the most...