Forrester

For Security & Risk Professionals

Report:Build A Governance, Risk, And Compliance Strategy Worthy Of Business Consideration

Strategic Plan: The Governance, Risk, And Compliance Playbook

Governance, risk management, and compliance (GRC) are far too often positions of emergency response. What's worse, as you constantly rush to respond to new mandates, enforce policies, or pull...

• Downloads: 546
• Rating:

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Measure And Understand Risks

Estimating Levels Of Risk Exposure To Help Guide Informed Decisions

Opposition to adopting formal risk management tends to use the process of risk measurement as its attack target — it's too subjective, it's too complicated, or it's too much investment just to...

• Downloads: 999

For Security & Risk Professionals

Report:Build The Business Case For A GRC Platform

Business Case: The Governance, Risk, And Compliance Playbook

As the governance, risk, and compliance (GRC) platform market matures, product vendors struggle to point to credible return on investment figures, and potential buyers similarly struggle when asked...

• Downloads: 963

For Security & Risk Professionals

Tool:GRC Revenue Distribution

For Security & Risk Professionals

Client Inquiry:What Is The State Of Governance, Risk, And Compliance In The Indian Market?

What is the size of the governance, risk, and compliance (GRC) market, and what is the market growth rate in India? Who are the major GRC vendors in India, and what are the areas of opportunity?

For Security & Risk Professionals

Report:TechRadar™ For Risk Management Professionals: GRC, Q4 2012

Road Map: The Governance, Risk, And Compliance Playbook

The governance, risk management, and compliance (GRC) technology market is one of fluctuation, confusion, and contention. Many technologies relevant for governance, risk management, and compliance...

• Downloads: 379
• Rating:

For Security & Risk Professionals

Report:Assess Your Security Program With Forrester's Information Security Maturity Model

Assessment Framework: The S&R Practice Playbook

This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

• Downloads: 2037
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:The Regulatory Intelligence Battlefield Heats Up

In the cyclical nature of increasing and decreasing industry regulations, we are clearly on an upswing. Regulators that have faced public scorn for lax oversight are reacting with newfound...

• Downloads: 377

For Security & Risk Professionals

Blog:IBM Announces Plans To Acquire OpenPages . . . Top GRC Vendors Are Charting Very Different Courses

Rarely does vendor consolidation reflect such fragmentation of a market. Picking up on the recent acquisition trend of independent market leaders, IBM today announced plans to acquire long-time GRC...

For Security & Risk Professionals

Report:Define And Articulate The Role Of Risk Management

Processes: The Governance, Risk, And Compliance Playbook

As a risk professional, you are currently in a position to exert more influence on your organization and increase the value you and your team can offer. Many of you will feel pressure to develop...

• Downloads: 1387
• Rating:

For Security & Risk Professionals

Blog:NASDAQ OMX Acquires BWise… Where Is GRC Headed?

Last week saw news that yet another top GRC software vendor has been acquired, following in the footsteps of Paisley, Archer, OpenPages, among others. BWise has always been an impressive vendor in...

For Security & Risk Professionals

Blog:Think You Know About All The Big US Government Regulations Coming Up? All 191 Of Them?

There has been an interesting PR battle in Washington over the last few weeks about the number of massive regulations still on the administration's agenda. House Minority Leader John Boehner...

For Security & Risk Professionals

Report:The Forrester Information Security Maturity Model

The Forrester Information Security Maturity Model is a framework that consists of four main security domains (oversight, technology, process, and people) with 25 functions and 123 low-level...

• Downloads: 67
• Rating:

For Security & Risk Professionals

Tool:Forrester Wave™: IT GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:The Forrester Information Security Maturity Model

After an in-depth survey of IT security and risk professionals, as well as our ongoing work with leaders in this field, Forrester recognized the need for a detailed, practical way to measure the...

For Security & Risk Professionals

Report:Market Overview: GRC Platforms

An Overwhelmingly Diverse Market Struggles For Definition, While Few Leaders Emerge

Failure of corporations to comply with regulations and to manage risks puts customers, employees, communities, and shareholders at risk on a daily basis. Global backlash pressures risk and compliance...

• Downloads: 1603
• Comments: 2

For Security & Risk Professionals

Blog:Tips For Using Spreadsheets For Business Intelligence, Compliance, And Risk Management

My colleague Boris Evelson, who covers business intelligence for Forrester and serves business process professionals, recently wrote a great post about the use of spreadsheets for business...

For Security & Risk Professionals

Tool:Sources Of Regulatory Content

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:Nasdaq Hack Brings Security Issues Into The Boardroom

 Have you been having trouble getting your board of directors to care about information security? This weekend’s news that Nasdaq’s Directors Desk web application was...

For Security & Risk Professionals

Report:Stop Ignoring Third-Party Risk

Practical Steps To Start Uncovering And Treating The Hidden Risks In Third-Party Relationships

The growing reliance on third-party providers is an increasingly uncomfortable trend for security and risk professionals. Financial pressures and efficient delivery models create great incentives for...

• Downloads: 477

For Security & Risk Professionals

Report:The Forrester Wave™: IT Governance, Risk, And Compliance Platforms, Q4 2011

RSA Archer, Agiliance, Rsam, Symantec, and Modulo Are All Leaders For Very Different Reasons

IT governance, risk, and compliance (GRC) vendors continue to show strong technical and strategic advances, while the market itself still struggles to define its direction. A small set of vendors...

• Downloads: 1149

Client Inquiry:What Are Our Options For Software That Tracks Employee Gifts?

We're looking for software that assists with the management and auditing of gifts that our employees receive from customers and suppliers.

For Security & Risk Professionals

Blog:For GRC Decisions, Avoid The ROI Discussion If Possible . . . But If You Can't, Here Are Some Tips

This week we published the first in a series of reports I'll be writing to help clients calculate the return on investment of GRC technologies. This report, How To Measure The ROI Of A GRC...

For Security & Risk Professionals

Report:Ten Priorities For Your Current And Future Compliance Program

Making Sure Today's Compliance Dollars Tackle Tomorrow's Compliance Challenges

As long as the general population suffers as a result of corporate malfeasance and missteps, government oversight will continue to grow. If compliance is one of your responsibilities, the near future...

• Downloads: 646