Forrester

For Security & Risk Professionals

Report:Determine The Value Of Information Security Assets And Liabilities — Information Security Economics 102

This is the second in a series of reports providing guidance and new methods for the financial management of information security. The CISO's role is rapidly changing. A few years ago the CISO for...

• Downloads: 102
• Comments: 2
• Rating:

For Security & Risk Professionals

Report:The Forrester Information Security Metrics Maturity Model

In conjunction with Forrester's update to our information security metrics and best practices report, Forrester has developed a model to help you assess the maturity of your security metrics program.

• Downloads: 127
• Comments: 1

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security Consulting Services, Q1 2013

Ernst & Young, Deloitte, IBM, Accenture, PwC, And KPMG Lead, With Wipro Following Close Behind

The information security consulting market is growing explosively because security and risk professionals often lack the skill and bandwidth to accomplish their increasingly difficult mission. To...

• Downloads: 523
• Rating:

For Security & Risk Professionals

Report:SAS 70 Out, New Service Organization Control Reports In

Security And Risk Professionals Must Prepare To Phase Out SAS 70 Today

Developed by the American Institute of CPAs (AICPA), the Statements on Auditing Standards 70 (SAS 70) has been around since 1992. When the Sarbanes-Oxley Act (SOX) of 2002 passed, SAS 70 gained new...

• Downloads: 434

For Security & Risk Professionals

Report:Develop Effective Security Metrics

Performance Management: The S&R Practice Playbook

This report outlines the benchmarks for Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We designed this report...

• Downloads: 2156

For Security & Risk Professionals

Report:Measure The Effectiveness Of Your Security Architecture And Operations

Performance Management: The Security Architecture And Operations Playbook

Information security programs have struggled with legitimacy with senior leaders for a long time. There are many reasons for this, but they all can be traced back to the historical inability of chief...

• Downloads: 482
• Rating:

For Security & Risk Professionals

Report:The Forrester Wave™: Emerging Managed Security Service Providers, Q1 2013

Ten Emerging Service Providers That Have The Chops To Be Your Managed Security Service Provider

In Forrester's 15-criteria evaluation of the emerging managed security services provider (MSSP) market, we identified the 10 most significant providers in this category — Alert Logic; CompuCom;...

• Downloads: 572
• Rating:

For Security & Risk Professionals

Report:The Forrester Wave™: Managed Security Services: North America, Q1 2012

The Nine Service Providers That Matter Most And How They Stack Up

In Forrester's 60-criteria evaluation of the North American managed security services market, we identified the nine significant service providers in this category — AT&T, CSC, Dell...

• Downloads: 1045
• Comments: 10
• Rating:

For Security & Risk Professionals

Report:Source Your Security Services

Build/Buy Capabilities: The S&R Practice Playbook

This report outlines a sourcing strategy and Forrester's decision support solution for security and risk (S&R) executives working to build a high-performance security program and organization. We...

• Downloads: 527
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:The Forrester Information Security Metrics 3R Dashboard

The Information Security Metrics 3R Dashboard should be used as a template to present information security metrics organized across three dimensions: Readiness, Response, and Recovery. Forrester...

• Downloads: 45
• Comments: 2
• Rating:

For Security & Risk Professionals

Report:Determine The Business Value Of An Effective Security Program — Information Security Economics 101

Business Impact: The S&R Practice Playbook

This report outlines Forrester's approach to helping you financially model information security. In today's seemingly never-ending cycle of new technologies, cyberthreats, and regulations, it's...

• Downloads: 539

For Security & Risk Professionals

Report:Measure The Effectiveness Of Your Data Privacy Program

Performance Management: The Data Security And Privacy Playbook

Privacy is one of the most important and emotional issues in information security. Privacy, or the lack thereof, affects a company's management, employees, and most importantly, customers. With the...

• Downloads: 234
• Rating:

For Security & Risk Professionals

Report:Don't Bore Your Executives — Speak To Them In A Language That They Understand

Seven Critical Executive-Level Metrics For CISOs And The Business

The ability to communicate effectively has always been a core competency for any business executive, and today's chief information security officer (CISO) is fast becoming a business executive. The...

• Downloads: 817