About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Connie is a member of Forrester's Business Technology Futures team, which serves CIOs and their business partners by predicting the long-term business impact of information technology. Her research focus is on smart computing and analytics.
Connie came to Forrester through its acquisition of Giga Information Group in 2003. She has more than 25 years of experience in the IT industry and has been an analyst for 19 years. Most of her research focuses on business process management and business optimization. Prior to joining Giga, Connie managed BIS Strategic Decisions' European IT consulting group, headquartered in the UK. Before then, Connie was vice president of product marketing at TDC (now part of BancTec), a manufacturer of high-end document capture systems. She was also a manager with Andersen Consulting (now Accenture), specializing in document management, document imaging, and end user computing. Earlier, Connie was with Wang Laboratories, where she managed Wang's technical support resources for the US Department of Defense and intelligence agencies. She began her career in IT and management at Mathematica Policy Research.
Connie was the co-champion of Forrester's 2009 Business Technology Forum, with its theme of "Lean: The New Business Technology Imperative." Connie also co-championed Forrester's 2007 Technology Leadership Forum, with the theme of "Design for People, Build for Change," and Forrester's 2008 Technology Leadership Forum, themed as "Embrace Technology Chaos, Deliver Business Results." Connie is a widely sought speaker. She has keynoted at many industry events, chaired 10 business process and workflow conferences in Europe and the US, and co-chaired Giga's "Leveraging Knowledge" conference. Connie also served as a director of AIIM International, the premier association for the content management industry, and is a member of the Association of Business Process Management Professionals.
Connie attended the University of North Carolina at Chapel Hill and holds a B.A. in political science and history from East Carolina University and an M.B.A. in information systems from George Washington University.
Is it possible to use an intrusion prevention system (IPS) instead of using the full capabilities of a web security gateway (WSG)? What could an IPS provide for the web traffic beyond the WSG?
Companies often demand to know what their peers in a particular vertical market are doing within the realm of information security before making new decisions. “We’re in retail” or...
Assessment Framework: The Data Security And Privacy Playbook
Data loss prevention or protection (DLP) — depending upon your usage — is both one of the hottest topics and most difficult challenges among information security professionals today. In...

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...
Policy And Procedures US Government Spotlight: The Security Architecture And Operations Playbook
US federal law, specifically the Federal Information Security Management Act (FISMA), requires US federal government agencies to adhere to National Institute of Standards and Technology (NIST)...
An Empowered Report: Understanding The Threats To Unified Communication And VoIP Deployments
In many companies, the worlds of data networking and telecommunications have merged, and voice and video traffic travels with other enterprise data on the same corporate network. Often known...
Tokenization: Is it the right technology to encrypt cardholder (saving and debit cards) data? What is the usage level of this product and of similar technologies on the market? What is the level of...
Last year the country of Japan suffered a devastating disaster of unspeakable proportions. A massive earthquake on the eastern coast of the country triggered a deadly tsunami that caused the flooding...
The PCI Security Standards Council released the summary of changes for the new version of PCI — 2.0. Merchants, you can quit holding your breath as this document is a yawner...
This is a workbook that supplements the PCI X-Ray: Application Security Document
From frantic security operations problems to the changing threat landscape, CISOs, senior security leaders, and other IT risk management leaders consistently have trouble keeping up with key trends...

Rethinking Data Discovery And Classification For Data Security
Defining data via data discovery and classification is an often overlooked, yet critical, component of data security and control. Security and risk (S&R) pros can't expect to adequately protect data...

ForeScout, Juniper, And Bradford Networks Outdistance The Pack, But Cisco, McAfee, And Enterasys Are Close Behind
In Forrester's 72-criteria evaluation of network access control (NAC) vendors, we found few notable points of differentiation between vendor offerings. Thus we have a tight clustering of vendors...
We would like to understand some best practices in the field of log management. More specifically: 1. Is it a best practice to correlate, aggregate, and monitor all logs for business risk and...
Forrester continues to receive many customer inquiries related to effective patch management of servers and endpoints. Balancing the urgency of patching with the need to minimize employee downtime...
We are currently exploring all remote access options, particularly SSL functionality. What kind of trends are you are seeing in these areas?
I’ll be in Austin, TX this weekend to participate in South-by-Southwest Interactive. My panel “Big Data Smackdown on Cybersecurity” will be held Sunday, March 11 from 12:30PM -...
FLASH TRAFFIC: This just in! The Washington Post is reporting a new wrinkle in cyberwarfare. In the article Defense official discloses cyberattack, the Post reports that “malicious code placed...
Are there certain vendors/solutions/configurations that are considered best practices for jump servers? Are organizations relying entirely on authentication and authorization controls, without having...
We are looking for a solution to centrally manage USB drives for all of our desktops. More specifically, we would want to ensure that data on the USB drive is encrypted. Does Forrester have any...
Future Look: The Data Security And Privacy Playbook
This report outlines the future look of Forrester's solution for security and risk (S&R) executives seeking to develop a holistic strategy to protect and manage sensitive data. In the...

The legendary British Prime Minister Benjamin Disraeli is said to have noted that “There are lies, damn lies, and statistics.” Much of the technology world is focused on statistics and...
Business Case: The Security Architecture And Operations Playbook
We may look back on 2011 and 2012 as the golden age of hacking. In 2011, we saw well-publicized and devastating attacks such as the one that brought down the Sony PlayStation Network (PSN). In 2012,...
Strategic Plan: The Security Architecture And Operations Playbook
One of our goals with Zero Trust is to optimize the security architectures and technologies for future flexibility. As we move toward a data-centric world with shifting threats and perimeters, we...
