Forrester

For Security & Risk Professionals

Blog:Information Security Metrics Insanity, The 3Rs And Dashboards!

  I just finished a research document titled Measure The Effectiveness Of Your Data Security And Privacy Program for the The Security Architecture And Operations Playbook. This was a lot of fun...

For Security & Risk Professionals

Blog:Information Security Metrics

Forrester receives a significant number of inquiries from clients requesting Forrester guidance on Information Security Metrics.  Chief Information Security Officers (CISOs) need new types of...

For Security & Risk Professionals

Report:The Forrester Wave™: Managed Security Services: North America, Q1 2012

The Nine Service Providers That Matter Most And How They Stack Up

In Forrester's 60-criteria evaluation of the North American managed security services market, we identified the nine significant service providers in this category — AT&T, CSC, Dell...

• Downloads: 1047
• Comments: 10
• Rating:

For Security & Risk Professionals

Report:Measure The Effectiveness Of Your Data Privacy Program

Performance Management: The Data Security And Privacy Playbook

Privacy is one of the most important and emotional issues in information security. Privacy, or the lack thereof, affects a company's management, employees, and most importantly, customers. With the...

• Downloads: 236
• Rating:

For Security & Risk Professionals

Blog:Information Security Metrics & The Balanced Scorecard

I just finished a final draft of a presentation on information security executive reporting that I and some colleagues will present at the upcoming Forrester IT Forum in Las Vegas.  For those of...

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security Consulting Services, Q1 2013

Ernst & Young, Deloitte, IBM, Accenture, PwC, And KPMG Lead, With Wipro Following Close Behind

The information security consulting market is growing explosively because security and risk professionals often lack the skill and bandwidth to accomplish their increasingly difficult mission. To...

• Downloads: 530
• Rating:

For Security & Risk Professionals

Blog:New Research: Develop Effective Security Metics - Published this Month

This month I published a new report on information security metrics, best practices as well as a maturity model to measure your maturity in the reporting process.  This report outlines the...

For Security & Risk Professionals

Report:The Forrester Information Security Metrics Maturity Model

In conjunction with Forrester's update to our information security metrics and best practices report, Forrester has developed a model to help you assess the maturity of your security metrics program.

• Downloads: 127
• Comments: 1

For Security & Risk Professionals

Blog:Large Telecoms Offer A Full Menu Of Security Services, But Not Without A Little Indigestion

Guest Post From Researcher Chris Sherman  Last month, Ed and I spent a couple days in Paris with Orange's management team for their annual analyst event. Overall I was impressed with...

For Security & Risk Professionals

Tool:Forrester's Information Security Sourcing Decision Tool Kit

For Security & Risk Professionals

Blog:More On Metrics...

At Forrester, we place a great deal of emphasis on relevance and what it means when researching a topic.  For the busy executive, it's sometimes difficult to wade through deep lists of...

For Security & Risk Professionals

Blog:Enterprise Information Security Architecture

I always have been interested in Enterprise Architecture.  Enterprise Architecture is one of those terms that security professionals hear about but do not always know how it can benefit what...

For Security & Risk Professionals

Tool:Forrester Wave™: Emerging Managed Security Service Providers, Q1 2013

For Security & Risk Professionals

Blog:Calculating Breach Costs: An Accounting Problem For Risk Management Strategy

Guest post from Researcher Heidi Shey.  Calculating the cost of a data breach should be a part of every organization’s information security risk management strategy. It’s not an easy...

For Security & Risk Professionals

Report:Determine The Business Value Of An Effective Security Program — Information Security Economics 101

Business Impact: The S&R Practice Playbook

This report outlines Forrester's approach to helping you financially model information security. In today's seemingly never-ending cycle of new technologies, cyberthreats, and regulations, it's...

• Downloads: 542

For Security & Risk Professionals

Blog:OK, Tell Me I'm Wrong!

Everyone knows that in business you need to do two things: Increase top-line revenue growth and reduce bottom line cost. Doing both of these is how companies grow profitably. It really is that...

For Security & Risk Professionals

Report:Develop Effective Security Metrics

Performance Management: The S&R Practice Playbook

This report outlines the benchmarks for Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We designed this report...

• Downloads: 2159

For Security & Risk Professionals

Tool:Forrester Wave™: Managed Security Services: North America, Q1 2012

For Security & Risk Professionals

Tool:Capture Information Security Costs

For Security & Risk Professionals

Report:Determine The Value Of Information Security Assets And Liabilities — Information Security Economics 102

This is the second in a series of reports providing guidance and new methods for the financial management of information security. The CISO's role is rapidly changing. A few years ago the CISO for...

• Downloads: 108
• Comments: 2
• Rating:

For Security & Risk Professionals

Tool:Evaluated Vendors: Vendor Information And Selection Criteria

For Security & Risk Professionals

Report:Don't Bore Your Executives — Speak To Them In A Language That They Understand

Seven Critical Executive-Level Metrics For CISOs And The Business

The ability to communicate effectively has always been a core competency for any business executive, and today's chief information security officer (CISO) is fast becoming a business executive. The...

• Downloads: 821

For Security & Risk Professionals

Report:Measure The Effectiveness Of Your Security Architecture And Operations

Performance Management: The Security Architecture And Operations Playbook

Information security programs have struggled with legitimacy with senior leaders for a long time. There are many reasons for this, but they all can be traced back to the historical inability of chief...

• Downloads: 483
• Rating:

For Security & Risk Professionals

Client Inquiry:Security Reporting Structure

What are the pros and cons of security reporting within IT versus a non-IT department?

For Security & Risk Professionals

Blog:Nine Managed Security Services Providers (MSSPs) Compete In The North American Market

After months of diligent vendor evaluations, last week we officially published The Forrester Wave: Managed Security Services: North America, Q1 2012. This report features our detailed analysis on...