About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Derek serves Enterprise Architecture Professionals. He is an internationally recognized expert in business process management (BPM) and organizational transformation. He has worked in this area for more than 20 years, dealing with major brands, governmental organizations, and nongovernmental organizations (NGOs). Derek's research focuses on the methods, approaches, frameworks, tools, techniques, and technologies of business architecture; BPM; business process improvement; business transformation; and organizational change. He places special emphasis on an outcome-based, customer-focused approach.
Derek is a well-known keynote speaker and chair of major EA conferences. As co-chair of BPMI.org, he helped merge the organization with the Object Management Group (OMG).
Derek completed the Early Growth Program at London Business School.
Assessment Framework: The Identity And Access Management Playbook
An identity and access management (IAM) maturity model is necessary for assessing your current state against industry best practices, understanding your performance relative to that of your peers,...
A Review Of Budgets, Spending Intentions, Technology Adoption, And Key Trends
To help Forrester clients with their identity and access management (IAM) strategy for 2011, Forrester predicted four significant trends. So how'd we do? We got two right and two half right. Heading...

Software-As-A-Service Adoption Drives Federated Access; Provisioning Still Lags
The wait is over. According to Forrester's recent security survey, adoption of identity federation jumped from less than 5% two years ago to more than 12% in 2009. Why? Because software-as-a-service...
The Eight Providers That Matter Most And How They Stack Up
In Forrester's 15-criteria evaluation of enterprise fraud management vendors, we identified the eight most significant vendors in the category — 41st Parameter, ACI Worldwide, CA Technologies,...
Predictive And Behavioral Analysis Finds Its Way Into Identity And Access Management
Identity and access management (IAM) professionals need to protect information and prevent unauthorized users from accessing business-critical systems in an increasingly complex IT environment. They...

When a global financial institution saw a large uptick in fraud in its commercial banking, it realized that transaction monitoring alone was insufficient. The bank needed to do more, but it was...
A North American online retailer found that fraud losses ate at profits and affected the customer experience. The retailer's manual fraud management processes could not scale with the volume of its...
During the past three years, cloud-based identity and access management (IAM) solutions have become a viable and cost-effective alternative to on-premises, commercial off-the-shelf (COTS), or...

Business Impact: The Identity And Access Management Playbook
Security and risk (S&R) executives responsible for identity and access management (IAM) must manage access to sensitive applications and data because of security and compliance requirements -- and...
Strategic Plan: The Identity And Access Management Playbook
This report outlines the strategic vision of Forrester's solution for security and risk (S&R) professionals looking to build their identity and access management strategy (IAM). This report is...

Protecting Information Consistently With Identity Context (PICWIC) Is A Must
According to Forrester survey data, "trusted" insiders and business partners, intentionally or unintentionally, are responsible for 43% of security breaches. The recent WikiLeaks breach illustrates...

Insurers Must Catch Up To The Sophistication Of Today's Fraudsters
Fraud costs the US insurance industry upward of $40 billion, which the industry then passes on to policyholders in the form of higher premiums. Financial crime is on the rise as fraudsters become...
Seven Tenets Of Effectively Combating Fraud Costs
Fraud causes companies to lose money in many ways: They face losses due to chargebacks, unrecoverable transfers, and unnecessary shipping costs; and spend extensive time and resources investigating...
Executive Overview: The Identity And Access Management Playbook
The rapid adoption of mobile devices and cloud services, together with a multitude of new partnerships and customer-facing applications, has "extended" the identity boundary of today's enterprise....
Desktop or enterprise single sign-on (E-SSO) is a relatively easy way to provide end user convenience and to get started in identity and access management (IAM). The end user benefits of E-SSO are...
Skills And Staffing: The Identity And Access Management Playbook
This report outlines the skills and staffing requirements for security and risk (S&R) executives working on building an identity and access management strategy for the extended enterprise. Identity...
Six Vendors That Matter Most And How They Stack Up
In Forrester's 15-criteria evaluation of cloud identity and access management (IAM) vendors, we identified the six most significant solution providers in this category — Covisint, Lighthouse...

Build/Buy Capabilities: The Identity And Access Management Playbook
Reducing the costs of an identity and access management (IAM) solution has been a top priority for security and risk professionals for a long time. Although IAM solutions have matured significantly...

Plan Your Move To Risk-Based Authentication And Software-Based Tokens
The RSA breach presents IT security professionals with significant challenges regarding authentication and questions the security of the bulletproof hardware token hitherto thought to be invincible....

Aveksa And SailPoint Lead, With NetIQ, Oracle, And CA Technologies Following
Role management and access recertification has moved to center stage for security and risk (S&R) professionals, business, and auditors. It provides higher security because it provides a better...
The Six Vendors That Matter Most And How They Stack Up
In Forrester's 16-criteria evaluation of risk-based authentication vendors, we identified the six significant vendors in this category — CA Technologies, Entrust, iovation, RSA, Symantec, and...
Requirements For Data Security, Mobile Devices, And Cloud-Based Services Will Forge Ahead
For 2011, Forrester predicts that IT administration efficiency and business agility will become the main drivers for using identity and access management (IAM). A bevy of acquisitions during the past...
Traditional Methods Start To Sag, While Mobile-Fueled Methods Surge
The strong authentication landscape has undergone tremendous churn in recent years as new mobile-fueled technologies have come online and as RSA, the premier vendor of hardware one-time password...
How One Healthcare Provider Improved The End User Experience Of 1,500 Physicians
In today's healthcare environment, physicians must access a wide array of IT applications to provide quality patient care. Because of the growing number of both on-premises and SaaS-based...
You Must Invest In Commercial Solutions To Combat Sophisticated Fraud Rings
Forrester uncovered three major trends for 2011 that organizations and vendors alike must address to combat increasingly sophisticated fraud rings. First, fraud professionals should insist that their...
