About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Harley serves Customer Experience Professionals. He is a research director in the Customer Experience practice at Forrester, and the coauthor of Outside In: The Power of Putting Your Customers at the Center of Your Business. The book is a comprehensive study of why customer experience is fundamental to the success of every business. It explores the six disciplines companies need to master in order to compete effectively in a world where their customers can leave them more easily than ever.
Harley's research, analysis, and opinions have appeared in The Harvard Business Review, Forbes, The Economist, FT.com, Fast Company, Investor's Business Daily, and Direct Marketing News. He is a regular contributor to the 1to1 media blog. An accomplished speaker, Harley has keynoted major business conferences around the world.
Harley founded Forrester's Customer Experience research coverage when he joined the firm in 1998. For his first report, he created a website review methodology that's now been used to evaluate the online customer experience of more than 1,500 sites for both research and consulting purposes. The methodology forms the basis for a popular series of workshops that have been delivered across the U.S., Europe, and Asia. It has since been extended to cover cross-channel customer interactions that span touchpoints ranging from voice-response systems to mobile apps.
Harley also founded Forrester's annual Customer Experience Forum, the company's largest event. In addition to its original location in New York, the Forum also takes place in Los Angeles and London. Harley hosts and moderates the forum in all three locations and leads speaker recruitment for the event.
Harley came to Forrester in 1998 after spending 18 years designing and building interactive services for companies such as Dow Jones, AT&T, MCI, Prodigy, and Sears. While at AT&T he worked for a time in the former Bell Labs, where he collaborated with scientists conducting research in the field of applied artificial intelligence (two patents awarded).
Harley holds a Master of Science degree in advertising from the University of Illinois, Urbana.
Assessment Framework: The S&R Practice Playbook
This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

Of all the client inquiries and advisories we get related to risk management, one of the most frequent topics of discussion continues to be the role of risk management. Who should be involved? How?...

As Leaders, BWise, MetricStream, IBM OpenPages, And RSA Archer Continue To Push The Envelope
I'm proud to say that we published my report "Market Overview: GRC Platforms" earlier today. It will come as little surprise to most of you that the overall GRC market is still saturated with...
Estimating Levels Of Risk Exposure To Help Guide Informed Decisions
Opposition to adopting formal risk management tends to use the process of risk measurement as its attack target — it's too subjective, it's too complicated, or it's too much investment just to...
In my new report, The Risk Manager's Handbook: How To Measure And Understand Risks, I present industry best practices and guidance on ways to articulate the extent or size of a risk. More than...
There has been an interesting PR battle in Washington over the last few weeks about the number of massive regulations still on the administration's agenda. House Minority Leader John Boehner...
On the heels of Forrester's GRC Market Overview last month, this week we published my Governance, Risk, And Compliance Predictions: 2011 And Beyond report. Based on our research...
Guest post from Researcher Nick Hayes. Chris and I recently published a report describing how to build risk and compliance principles into your company’s corporate culture. As we worked to...
Documenting The Sources Of Uncertainty That Might Affect Your Organization, Project, Asset, Or Objective
Enterprise risk management (ERM) programs are helping to break down organizational silos so that executives can gain insight on the risks that may affect all aspects of their business. Unfortunately,...
A few weeks ago, Stephanie Balaouras and I posted a podcast on a topic that has been a high priority for many of our customers — how to apply risk management techniques to IT security. We know...
RSA Archer, Agiliance, Rsam, Symantec, and Modulo Are All Leaders For Very Different Reasons
IT governance, risk, and compliance (GRC) vendors continue to show strong technical and strategic advances, while the market itself still struggles to define its direction. A small set of vendors...
I’m proud to announce that this week Forrester launched our Governance, Risk, and Compliance Playbook, a collection of in-depth reports covering the critical information you need to implement a...
Determining Whether, When, And How To Treat Risks
The goal of a risk management program is to drive effective decisions and actions based on an understanding of how uncertainty may affect objectives. However, even mature programs that have...
Business Case: The Governance, Risk, And Compliance Playbook
As the governance, risk, and compliance (GRC) platform market matures, product vendors struggle to point to credible return on investment figures, and potential buyers similarly struggle when asked...
Despite some speculation that today's Supreme Court ruling might overturn large portions of the Sarbanes-Oxley Act (if not all of it), the final opinion will likely have no significant impact on...
After months of diligent product and vendor evaluations, today we published The Forrester Wave: Enterprise GRC Platforms, Q4 2011. In the next few days, we will also publish The Forrester Wave: IT...
The evolution of business practices is proving as big of an issue for Security and Risk professionals as the changing threat landscape. Sure, attackers exposed hundreds of millions of personal...
Guest post from Researcher Nick Hayes. If you had to go up one level in a train station, would you take the stairs or use the escalator? Most people would choose the escalator. But what if the...
Continuous Improvement: The Governance, Risk, And Compliance Playbook
When you're challenged by a constantly changing regulatory landscape, business environment, and risk profile, it's easy to overlook the critical role corporate culture plays in keeping compliance and...
This report outlines Forrester's solution for security and risk (S&R) professionals looking to establish a formal risk and compliance management program. We designed this report to help S&R...
Strategic Plan: The Governance, Risk, And Compliance Playbook
Governance, risk management, and compliance (GRC) are far too often positions of emergency response. What's worse, as you constantly rush to respond to new mandates, enforce policies, or pull...
