About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Connie is a member of Forrester's Business Technology Futures team, which serves CIOs and their business partners by predicting the long-term business impact of information technology. Her research focus is on smart computing and analytics.
Connie came to Forrester through its acquisition of Giga Information Group in 2003. She has more than 25 years of experience in the IT industry and has been an analyst for 19 years. Most of her research focuses on business process management and business optimization. Prior to joining Giga, Connie managed BIS Strategic Decisions' European IT consulting group, headquartered in the UK. Before then, Connie was vice president of product marketing at TDC (now part of BancTec), a manufacturer of high-end document capture systems. She was also a manager with Andersen Consulting (now Accenture), specializing in document management, document imaging, and end user computing. Earlier, Connie was with Wang Laboratories, where she managed Wang's technical support resources for the US Department of Defense and intelligence agencies. She began her career in IT and management at Mathematica Policy Research.
Connie was the co-champion of Forrester's 2009 Business Technology Forum, with its theme of "Lean: The New Business Technology Imperative." Connie also co-championed Forrester's 2007 Technology Leadership Forum, with the theme of "Design for People, Build for Change," and Forrester's 2008 Technology Leadership Forum, themed as "Embrace Technology Chaos, Deliver Business Results." Connie is a widely sought speaker. She has keynoted at many industry events, chaired 10 business process and workflow conferences in Europe and the US, and co-chaired Giga's "Leveraging Knowledge" conference. Connie also served as a director of AIIM International, the premier association for the content management industry, and is a member of the Association of Business Process Management Professionals.
Connie attended the University of North Carolina at Chapel Hill and holds a B.A. in political science and history from East Carolina University and an M.B.A. in information systems from George Washington University.
Strategic Plan: The Data Security And Privacy Playbook
As cybercriminals have become more skillful and sophisticated, they have eroded the effectiveness of our traditional perimeter-based security controls. The constantly mutating threat landscape...
Strategic Plan: The Security Architecture And Operations Playbook
One of our goals with Zero Trust is to optimize the security architectures and technologies for future flexibility. As we move toward a data-centric world with shifting threats and perimeters, we...

Can you provide us with definitions on the following types of security certificates: 1) SSL; 2) EFS; 3) device certificates; 4) user certificates; 5) code certificates; 6) signed and unsigned...
An Effective Incident Management Program Is Essential To Help You Stay In Business
It's not a question of if — but when — your organization will experience a serious security breach. Cybercriminals are using more sophisticated and targeted attacks to steal everything...
Forrester's Data Security And Control Framework
Forrester segments the problem of securing and controlling data into three areas: 1) defining the data; 2) dissecting and analyzing the data; and 3) defending and protecting the data. We refer to...

Rethinking Data Discovery And Classification For Data Security
Defining data via data discovery and classification is an often overlooked, yet critical, component of data security and control. Security and risk (S&R) pros can't expect to adequately protect data...

Today EMC’s security division RSA announced the acquisition of NAV (Network Analysis and Visibility) vendor NetWitness. Some pundits have suggested that this is a direct...
Is it possible to use an intrusion prevention system (IPS) instead of using the full capabilities of a web security gateway (WSG)? What could an IPS provide for the web traffic beyond the WSG?
The legendary British Prime Minister Benjamin Disraeli is said to have noted that “There are lies, damn lies, and statistics.” Much of the technology world is focused on statistics and...
To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...
What vendors compete in the enterprise key management market?
To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...
Are there any standard PCI report templates for providing information to my QSA?
Executive Overview: The Security Architecture And Operations Playbook
We've all heard about the "evolving threat landscape." In biology, evolution is a process that takes millions of years to occur as a result of small changes in successive generations. Mutations, on...
From frantic security operations problems to the changing threat landscape, CISOs, senior security leaders, and other IT risk management leaders consistently have trouble keeping up with key trends...

Future Look: The Data Security And Privacy Playbook
This report outlines the future look of Forrester's solution for security and risk (S&R) executives seeking to develop a holistic strategy to protect and manage sensitive data. In the...

Executive Overview: The Data Security And Privacy Playbook
Data is the lifeblood of today's digital businesses, and for economic and even political gain, highly skilled cybercriminals are determined to steal it. Meanwhile, customers around the globe have...

Road Map: The Security Architecture And Operations Playbook
This report outlines Forrester's solution to help security and risk (S&R) leaders develop their road map for Zero Trust network threat mitigation technologies using Forrester's TechRadar™...

Forrester continues to receive many customer inquiries related to effective patch management of servers and endpoints. Balancing the urgency of patching with the need to minimize employee downtime...
Last year the country of Japan suffered a devastating disaster of unspeakable proportions. A massive earthquake on the eastern coast of the country triggered a deadly tsunami that caused the flooding...
Essential Functionality For The Zero Trust Model Of Information Security
In today's threat environment, the network perimeter has disappeared. Insiders are as insidious a threat as outsiders. In the past, the "trust but verify" model did not facilitate insight into...
The PCI Security Standards Council released the summary of changes for the new version of PCI — 2.0. Merchants, you can quit holding your breath as this document is a yawner...
Assessment Framework: The Data Security And Privacy Playbook
Data loss prevention or protection (DLP) — depending upon your usage — is both one of the hottest topics and most difficult challenges among information security professionals today. In...

Business Case: The Security Architecture And Operations Playbook
We may look back on 2011 and 2012 as the golden age of hacking. In 2011, we saw well-publicized and devastating attacks such as the one that brought down the Sony PlayStation Network (PSN). In 2012,...