Forrester

For Security & Risk Professionals

Report:The Forrester Information Security Maturity Model

The Forrester Information Security Maturity Model is a framework that consists of four main security domains (oversight, technology, process, and people) with 25 functions and 123 low-level...

• Downloads: 67
• Rating:

For Security & Risk Professionals

Blog:Twitter Settles With FTC For Privacy Breach

Organizations continue to face risk for security breaches. Normally, we talk about the risk of security breaches being fines and other costs around loss of PII, per California Senate Bill 1386 and...

For Security & Risk Professionals

Blog:Avoid The Social Media Binary

Many organizations today get caught up in what I call the “social media binary,” where there are only two options to social media control: 1) Allow unrestricted access to social networks,...

For Security & Risk Professionals

Report:Actionable Identity Intelligence Protects Big Data And Zero Trust Identities

Predictive And Behavioral Analysis Finds Its Way Into Identity And Access Management

Identity and access management (IAM) professionals need to protect information and prevent unauthorized users from accessing business-critical systems in an increasingly complex IT environment. They...

• Downloads: 462
• Rating:

For Security & Risk Professionals

Client Inquiry:Can You Use Intrusion Prevention Instead Of A Web Security Gateway?

Is it possible to use an intrusion prevention system (IPS) instead of using the full capabilities of a web security gateway (WSG)? What could an IPS provide for the web traffic beyond the WSG?

For Security & Risk Professionals

Report:Data Leak Prevention: Scenarios For Testing Vendor Products

Enterprises of all sizes are interested in evaluating products for detecting and preventing the transmission and storage of PII, PHI and sensitive corporate secrets. By the end of 2010, Forrester...

• Downloads: 31

For Security & Risk Professionals

Report:The Forrester Information Security Metrics 3R Dashboard

The Information Security Metrics 3R Dashboard should be used as a template to present information security metrics organized across three dimensions: Readiness, Response, and Recovery. Forrester...

• Downloads: 45
• Comments: 2
• Rating:

For Security & Risk Professionals

Blog:From Customer To Channel Partner

 Even though it is not specific to security, this idea came to me while attending Dell’s Annual Analyst Conference (DAAC) in Austin, Texas two weeks ago. One of the hot topics discussed at...

For Security & Risk Professionals

Client Inquiry:Will SMS Messaging And Email Emergency Notification Replace Voice-To-Voice Communication?

What changes in emergency notification tactics do you foresee? More specifically, it seems as if SMS messaging and email will replace telephone voice-to-voice communications. Will SMS messaging and...

For Security & Risk Professionals

Report:Show Me The Loot!

Determine The Right Practices For Your Organization's BYOD Stipends

In this age of the empowered, tech-savvy worker, more and more employees are bringing their unsecured devices to work and using them for work activities. To prepare for this tide of devices,...

• Downloads: 124
• Rating:

For Security & Risk Professionals

Report:Market Overview: Fraud Management Solutions

Seven Tenets Of Effectively Combating Fraud Costs

Fraud causes companies to lose money in many ways: They face losses due to chargebacks, unrecoverable transfers, and unnecessary shipping costs; and spend extensive time and resources investigating...

• Downloads: 1461

For Security & Risk Professionals

Report:API Management For Security Pros

Security professionals increasingly must respond to the needs of business owners exploring web application programming interfaces (APIs) as a new channel for recognizing business value. APIs can...

• Downloads: 126

For Security & Risk Professionals

Report:eDiscovery Market Consolidation Continues Its Steady March

How Mergers And Acquisitions Will Impact Your eDiscovery Strategies

Organizations struggle to keep up with eDiscovery demands and are burdened by a proliferation of point products. Navigating the eDiscovery marketplace isn't trivial, and many enterprises report...

• Downloads: 356

For Security & Risk Professionals

Blog:Your Vertical Is . . .

Companies often demand to know what their peers in a particular vertical market are doing within the realm of information security before making new decisions. “We’re in retail” or...

For Security & Risk Professionals

Report:Build A High-Performance Security Organization

Executive Overview: The S&R Practice Playbook

Today, business leaders expect the CISO to not only protect the organization from run-of-the-mill hackers but to also protect its brand and competitive advantage in the marketplace — all while...

• Downloads: 595
• Rating:

For Security & Risk Professionals

Report:Market Overview: Intrusion Prevention Systems, Q2 2011

A Mature Space, IPS Is Still The Bulwark Of Network Security

An intrusion prevention system (IPS) complements traditional firewalls by inspecting the entire network packet looking for malicious traffic that is often invisible to Layer 3 firewalls. While...

• Downloads: 961

For Security & Risk Professionals

Tool:Data Protection And Compliance Are Top Of Mind Concerns

For Security & Risk Professionals

Blog:Active Directory Moving To The Cloud?

We hear a lot about cloud IAM vendors offering metadirectories or user repositories in the cloud. We predict that in 1-2 years we'll see AD being moved from on-premises installations into cloud...

For Security & Risk Professionals

Blog:Communication And Coordination Should Be The Cornerstone Of Your BC Plan

In a recent Forrester/DRJ joint survey on BC preparedness, of organizations that have invoked a BC plan in the last five years, 37% said that their BC plans had not adequately addressed...

For Security & Risk Professionals

Client Inquiry:How Retailers Handle Login Expiration Time

How do retailer websites handle login expiration? Is it session-based, login-persisted, 30-day cookie, and so on? What is the norm or best practice?

For Security & Risk Professionals

Tool:GRC Revenue Distribution

For Security & Risk Professionals

Report:Build A Corporate App Store Into Your Corporate Mobility Strategy

Manage Mobile Complexity Through A Corporate App Store

Today, many employees use their personally owned smartphones and tablets for work to access a variety of mobile applications. Some companies are also proactively deploying mobile applications to...

• Downloads: 302
• Rating:

For Security & Risk Professionals

Blog:iPad And iPhone: Secure Enough For Most Businesses

Greetings everyone. My name is Andrew Jaquith, and I serve security and risk professionals. Normally I blog over on the S&R analyst team blog. But because Forrester has been receiving so many...

For Security & Risk Professionals

Tool:The Forrester Identity And Access Management Maturity Model

For Security & Risk Professionals

Tool:The State Of Legal Hold Integration With Records Management Is Bleak