Forrester

For Security & Risk Professionals

Report:Strategy Deep Dive: Define Your Data

Rethinking Data Discovery And Classification For Data Security

Defining data via data discovery and classification is an often overlooked, yet critical, component of data security and control. Security and risk (S&R) pros can't expect to adequately protect data...

• Downloads: 170
• Rating:

For Security & Risk Professionals

Report:Develop A Two-Phased DDoS Mitigation Strategy

Protect Yourself From Hacktivists And Other Cybercriminals

Until recently, distributed denial of service (DDoS) attacks had been part of infosec lore: something you heard about but rarely experienced. With the rise of hacktivist groups and other...

• Downloads: 7

For Security & Risk Professionals

Blog:Your Vertical Is . . .

Companies often demand to know what their peers in a particular vertical market are doing within the realm of information security before making new decisions. “We’re in retail” or...

For Security & Risk Professionals

Report:The Forrester Wave™: Network Access Control, Q2 2011

ForeScout, Juniper, And Bradford Networks Outdistance The Pack, But Cisco, McAfee, And Enterasys Are Close Behind

In Forrester's 72-criteria evaluation of network access control (NAC) vendors, we found few notable points of differentiation between vendor offerings. Thus we have a tight clustering of vendors...

• Downloads: 984

For Security & Risk Professionals

Report:Simplify Cybersecurity With PCI

Policy And Procedures US Government Spotlight: The Security Architecture And Operations Playbook

US federal law, specifically the Federal Information Security Management Act (FISMA), requires US federal government agencies to adhere to National Institute of Standards and Technology (NIST)...

• Downloads: 228

For Security & Risk Professionals

Client Inquiry:What Are Current Trends In Remote Access And SSL Functionality?

We are currently exploring all remote access options, particularly SSL functionality. What kind of trends are you are seeing in these areas?

For Security & Risk Professionals

Report:Control And Protect Sensitive Information In The Era Of Big Data

Future Look: The Data Security And Privacy Playbook

This report outlines the future look of Forrester's solution for security and risk (S&R) executives seeking to develop a holistic strategy to protect and manage sensitive data. In the...

• Downloads: 1599
• Rating:

For Security & Risk Professionals

Client Inquiry:What Are Some Best Practices For Using Jump Servers?

Are there certain vendors/solutions/configurations that are considered best practices for jump servers? Are organizations relying entirely on authentication and authorization controls, without having...

For Security & Risk Professionals

Report:Applying Zero Trust To The Extended Enterprise

Preparing Your Network For Any Device, Anywhere, Any Time

You are part of an extended enterprise — a new extended ecosystem of customers, clouds, service providers, partners, supply chains, and empowered users. The business expects you, the security...

• Downloads: 798
• Rating:

For Security & Risk Professionals

Blog:InfoSec, Structural Engineering, And The Security Architecture Playbook

Last year the country of Japan suffered a devastating disaster of unspeakable proportions. A massive earthquake on the eastern coast of the country triggered a deadly tsunami that caused the flooding...

For Security & Risk Professionals

Blog:Preview Of PCI DSS 1.3 – Oops 2.0 – Released

The PCI Security Standards Council released the summary of changes for the new version of PCI — 2.0.  Merchants, you can quit holding your breath as this document is a yawner...

For Security & Risk Professionals

Report:Develop Your Road Map For Zero Trust Network Mitigation Technology

Road Map: The Security Architecture And Operations Playbook

This report outlines Forrester's solution to help security and risk (S&R) leaders develop their road map for Zero Trust network threat mitigation technologies using Forrester's TechRadar™...

• Downloads: 1131
• Rating:

For Security & Risk Professionals

Report:No More Chewy Centers: Introducing The Zero Trust Model Of Information Security

Vision: The Security Architecture And Operations Playbook

There's an old saying in information security: "We want our network to be like an M&M, with a hard crunchy outside and a soft chewy center." For a generation of information security...

• Downloads: 1632

For Security & Risk Professionals

Report:Build Security Into Your Network's DNA: The Zero Trust Network Architecture

Strategic Plan: The Security Architecture And Operations Playbook

One of our goals with Zero Trust is to optimize the security architectures and technologies for future flexibility. As we move toward a data-centric world with shifting threats and perimeters, we...

• Downloads: 1528
• Rating:

For Security & Risk Professionals

Report:Dial "H" For Hack

An Empowered Report: Understanding The Threats To Unified Communication And VoIP Deployments

In many companies, the worlds of data networking and telecommunications have merged, and voice and video traffic travels with other enterprise data on the same corporate network. Often known...

• Downloads: 522

For Security & Risk Professionals

Report:PCI X-Ray: Application Security Checklist

This is a workbook that supplements the PCI X-Ray: Application Security Document

• Downloads: 33

For Security & Risk Professionals

Report:Rethinking DLP: Introducing The Forrester DLP Maturity Grid

Assessment Framework: The Data Security And Privacy Playbook

Data loss prevention or protection (DLP) — depending upon your usage — is both one of the hottest topics and most difficult challenges among information security professionals today. In...

• Downloads: 1027
• Rating:

For Security & Risk Professionals

Report:Defend Your Business From The Mutating Threat Landscape

Business Case: The Security Architecture And Operations Playbook

We may look back on 2011 and 2012 as the golden age of hacking. In 2011, we saw well-publicized and devastating attacks such as the one that brought down the Sony PlayStation Network (PSN). In 2012,...

• Downloads: 855

Client Inquiry:Standard PCI Report Templates

Are there any standard PCI report templates for providing information to my QSA?

For Security & Risk Professionals

Report:Defend Your Data From Mutating Threats With A Zero Trust Network

Executive Overview: The Security Architecture And Operations Playbook

We've all heard about the "evolving threat landscape." In biology, evolution is a process that takes millions of years to occur as a result of small changes in successive generations. Mutations, on...

• Downloads: 302

For Security & Risk Professionals

Client Inquiry:What Are Best Practices For Log Management And Security Information Management?

We would like to understand some best practices in the field of log management. More specifically: 1. Is it a best practice to correlate, aggregate, and monitor all logs for business risk and...

For Security & Risk Professionals

Client Inquiry:How Do You Centrally Manage And Encrypt Data On USB Drives?

We are looking for a solution to centrally manage USB drives for all of our desktops. More specifically, we would want to ensure that data on the USB drive is encrypted. Does Forrester have any...

For Security & Risk Professionals

Report:PCI X-Ray: Assessment And Testing Checklist

This checklist is provided as a concise and comprehensive workbook to help organizations deal with the different types of assessments and tests that security and risk professionals must perform to...

• Downloads: 28

For Security & Risk Professionals

Blog:How To Survive And Thrive At #SXSW If You’re Not From Texas

I’ll be in Austin, TX this weekend to participate in South-by-Southwest Interactive. My panel “Big Data Smackdown on Cybersecurity” will be held Sunday, March 11 from 12:30PM -...

For Security & Risk Professionals

Report:Kill Your Data To Protect It From Cybercriminals

Strategic Plan: The Data Security And Privacy Playbook

As cybercriminals have become more skillful and sophisticated, they have eroded the effectiveness of our traditional perimeter-based security controls. The constantly mutating threat landscape...

• Downloads: 918