Forrester

For Security & Risk Professionals

Report:Build An Information Security Management System

Policy And Procedures: The S&R Practice Playbook

Over recent years, the information security industry has matured nicely; experts and associations have documented many best practice models, and their adoption has been widespread. It's disconcerting...

• Downloads: 765

For Security & Risk Professionals

Blog:Starving The Golden Goose

The new revolution in apps and social media continues at a stunning rate. Nearly every day a colleague tells me of another app or site that is bubbling up and about to hit the big time. Many will not...

For Security & Risk Professionals

Report:Define A Road Map To Accelerate The Organizational Maturity Of Your Security Program

Road Map: The S&R Practice Playbook

This report outlines the future state of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...

• Downloads: 1033

For Security & Risk Professionals

Report:Build A Strategic Security Program And Organization

Strategic Plan: The S&R Practice Playbook

This report outlines the strategic vision of Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. This report is...

• Downloads: 2299

For Security & Risk Professionals

Report:Prepare Your Security Organization For The Internet Of Things

Why The Next Internet Revolution Is Much More Alarming Than The Last

There is a revolution happening right now; innovative organizations are planning how they can merge the physical and digital worlds to bring new products and experiences to their customers. At the...

• Downloads: 373
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:Assess Your Security Program With Forrester's Information Security Maturity Model

Assessment Framework: The S&R Practice Playbook

This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

• Downloads: 2097
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:Understand Security And Risk Budgeting For 2013

Benchmarks: The S&R Practice Playbook

The global downturn has constrained security budgets for several years now, and chief information security officers (CISOs) have become accustomed to taking on more responsibilities without...

• Downloads: 873

For Security & Risk Professionals

Report:Q&A: Cyberinsurance Fundamentals For Security And Risk Professionals

Since cyberinsurance first emerged in the late '90s, the number of available policies, the scope of those policies, and the number of insurers offering them have all significantly increased. Due to...

• Downloads: 58

For Security & Risk Professionals

Report:Recruit And Retain An Information Security Team

Skills And Staffing: The S&R Practice Playbook

This report outlines the skills and staffing strategy for Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We...

• Downloads: 420
• Comments: 2

For Security & Risk Professionals

Blog:Is CyberLiability Insurance Becoming A More Feasible Risk Management Strategy?

The cyberinsurance market today represents only a tiny segment of the overall insurance industry, and a recent Forrester paper on the topic identified that only a very small percentage of...

For Security & Risk Professionals

Blog:Is The Time Right To Spread Your Risk?

For many years, security professionals have lived by the three pillars of risk management – AVOID, TREAT, ACCEPT.  These great tenets have served the profession well, enabling CISOs to...

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security Consulting Services, Q1 2013

Ernst & Young, Deloitte, IBM, Accenture, PwC, And KPMG Lead, With Wipro Following Close Behind

The information security consulting market is growing explosively because security and risk professionals often lack the skill and bandwidth to accomplish their increasingly difficult mission. To...

• Downloads: 569
• Rating:

For Security & Risk Professionals

Report:Navigate The Future Of The Security Organization

Future Look: The S&R Practice Playbook

This report outlines the future look of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...

• Downloads: 947

For Security & Risk Professionals

Blog:Call Record Privacy Is Not Just A US Issue

As individuals get better access to the technology that enables their participation in the information age, so privacy has to be considered and regulation applied to raise standards to those that are...

For Security & Risk Professionals

Blog:InfoSec In The Supply Chain

The importance of data security throughout the supply chain is something we have all considered, but Greg Schaffer, acting deputy undersecretary of the Homeland Security Department of the National...

For Security & Risk Professionals

Blog:Open & Honest - Should Breach Disclosure Be Mandatory?

A few months ago I shared a flight with a very pleasant lady from a European regulatory body.  After shoulder surfing her papers and seeing we were both interested in information security...

For Security & Risk Professionals

Blog:Rewind And Replay For Web App Vulnerabilities

Security threats develop and evolve with startling rapidity, with the attackers always seeking to stay one step ahead of the S&R professional. The agility of our aggressors is understandable; they do...

For Security & Risk Professionals

Report:Build A High-Performance Security Organization

Executive Overview: The S&R Practice Playbook

Today, business leaders expect the CISO to not only protect the organization from run-of-the-mill hackers but to also protect its brand and competitive advantage in the marketplace — all while...

• Downloads: 614
• Rating:

For Security & Risk Professionals

Blog:Go Beyond Technology To Build An Effective Security Practice

It’s common knowledge that the security landscape has shifted over the past few years and the once-strong perimeters that CISOs relied upon have become stretched, fragmented, and overrun by...

For Security & Risk Professionals

Blog:Security Pros Need To Value Pragmatism Above All Else

Last night I attended a vendor presentation about cloud-based risk and the threat from nation state attacks. Unfortunately, due to a busy schedule and a difficult journey, I arrived just as the final...

For Security & Risk Professionals

Blog:The Psychology Of Bad News

  Last night I stumbled across a documentary on BBC2 (content only available to UK residents – sorry!) about the human brain. One section talked about how the brain perceived risk issues...

For Security & Risk Professionals

Blog:A 'BYO' Too Far?

Undoubtedly, most of you will have seen the amazing story about the developer who secretly outsourced his own role to China, investing 20% of his annual salary to free up almost all his work time....

For Security & Risk Professionals

Blog:CISOs Need To CYA - 'Comprehend Your Assets'

I recently went for coffee with a very interesting gentleman who had previously been responsible for threat and vulnerability management in a global bank – our conversation roamed far and wide...

For Security & Risk Professionals

Report:Building An Effective Information Security Policy Framework

CISOs Need To Act To Realize True Business Benefit From Security Policy

As information security has become more widely understood, the majority of organizations have built a set of supporting policies. Unfortunately, many of these are slowly drifting toward irrelevance...

• Downloads: 666

For Security & Risk Professionals

Blog:The Demise Of The Player/Manager CISO

The role of the CISO is changing. For years we have talked about the requirement to make the top security and risk (S&R) role increasingly business-facing, and this is now turning into a reality....