Forrester

For Security & Risk Professionals

Blog:IBM Announces Plans To Acquire OpenPages . . . Top GRC Vendors Are Charting Very Different Courses

Rarely does vendor consolidation reflect such fragmentation of a market. Picking up on the recent acquisition trend of independent market leaders, IBM today announced plans to acquire long-time GRC...

For Security & Risk Professionals

Client Inquiry:What Is The State Of Governance, Risk, And Compliance In The Indian Market?

What is the size of the governance, risk, and compliance (GRC) market, and what is the market growth rate in India? Who are the major GRC vendors in India, and what are the areas of opportunity?

For Security & Risk Professionals

Tool:GRC Vendor Focus Areas

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:Avoid The Headlines, Focus On Corporate Culture

Guest post from Researcher Nick Hayes. Chris and I recently published a report describing how to build risk and compliance principles into your company’s corporate culture. As we worked to...

For Security & Risk Professionals

Report:Market Overview: GRC Platforms

An Overwhelmingly Diverse Market Struggles For Definition, While Few Leaders Emerge

Failure of corporations to comply with regulations and to manage risks puts customers, employees, communities, and shareholders at risk on a daily basis. Global backlash pressures risk and compliance...

• Downloads: 1616
• Comments: 2

For Security & Risk Professionals

Blog:Is Your Security Program Ready To Support Disruptive Business Trends?

  The evolution of business practices is proving as big of an issue for Security and Risk professionals as the changing threat landscape. Sure, attackers exposed hundreds of millions of personal...

For Security & Risk Professionals

Blog:The Supreme Court Ruling Will Have Little Impact On SOX . . . Sorry

Despite some speculation that today's Supreme Court ruling might overturn large portions of the Sarbanes-Oxley Act (if not all of it), the final opinion will likely have no significant impact on...

For Security & Risk Professionals

Report:It's Time To Include Social Technology In Your Crisis Communication Strategy

Among risk professionals who have successfully navigated their organization through a crisis, almost all will say that they had grossly underestimated the difficulty of communicating effectively...

• Downloads: 522

For Security & Risk Professionals

Tool:IT GRC Adoption

For Security & Risk Professionals

Report:Assess Your Security Program With Forrester's Information Security Maturity Model

Assessment Framework: The S&R Practice Playbook

This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

• Downloads: 2097
• Comments: 1
• Rating:

For Security & Risk Professionals

Blog:A Few Thoughts On Communicating Risk

In my new report, The Risk Manager's Handbook: How To Measure And Understand Risks, I present industry best practices and guidance on ways to articulate the extent or size of a risk. More than...

For Security & Risk Professionals

Report:Ten Priorities For Your Current And Future Compliance Program

Making Sure Today's Compliance Dollars Tackle Tomorrow's Compliance Challenges

As long as the general population suffers as a result of corporate malfeasance and missteps, government oversight will continue to grow. If compliance is one of your responsibilities, the near future...

• Downloads: 648

For Security & Risk Professionals

Tool:Forrester Wave™: IT GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:In 2011 The GRC Market Will Grow 20%, Driven More By Breadth Than Maturity

On the heels of Forrester's GRC Market Overview last month, this week we published my Governance, Risk, And Compliance Predictions: 2011 And Beyond report. Based on our research...

For Security & Risk Professionals

Blog:Don’t Forbid Employees From Using The Escalator, Give Them Reasons To Use The Stairs

Guest post from Researcher Nick Hayes. If you had to go up one level in a train station, would you take the stairs or use the escalator? Most people would choose the escalator. But what if the...

For Security & Risk Professionals

Blog:Risk Professionals' Window Of Opportunity

In my ongoing work with risk management professionals, I've been encouraged to see how quickly the role is growing in influence and responsibility in today's...

For Security & Risk Professionals

Blog:Implement A Successful GRC Program With Forrester's Governance, Risk, and Compliance Playbook

I’m proud to announce that this week Forrester launched our Governance, Risk, and Compliance Playbook, a collection of in-depth reports covering the critical information you need to implement a...

For Security & Risk Professionals

Report:Define And Articulate The Role Of Risk Management

Processes: The Governance, Risk, And Compliance Playbook

As a risk professional, you are currently in a position to exert more influence on your organization and increase the value you and your team can offer. Many of you will feel pressure to develop...

• Downloads: 1414
• Rating:

For Security & Risk Professionals

Report:TechRadar™ For Risk Management Professionals: GRC, Q4 2012

Road Map: The Governance, Risk, And Compliance Playbook

The governance, risk management, and compliance (GRC) technology market is one of fluctuation, confusion, and contention. Many technologies relevant for governance, risk management, and compliance...

• Downloads: 427
• Rating:

For Security & Risk Professionals

Blog:Announcing Two New Forrester Waves: Enterprise GRC And IT GRC

After months of diligent product and vendor evaluations, today we published The Forrester Wave: Enterprise GRC Platforms, Q4 2011. In the next few days, we will also publish The Forrester Wave: IT...

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Measure And Understand Risks

Estimating Levels Of Risk Exposure To Help Guide Informed Decisions

Opposition to adopting formal risk management tends to use the process of risk measurement as its attack target — it's too subjective, it's too complicated, or it's too much investment just to...

• Downloads: 1004

For Security & Risk Professionals

Blog:Think You Know About All The Big US Government Regulations Coming Up? All 191 Of Them?

There has been an interesting PR battle in Washington over the last few weeks about the number of massive regulations still on the administration's agenda. House Minority Leader John Boehner...

For Security & Risk Professionals

Report:The Forrester Wave™: Enterprise Governance, Risk, And Compliance Platforms, Q4 2011

As Leaders, BWise, MetricStream, IBM OpenPages, And RSA Archer Continue To Push The Envelope

Innovation among top enterprise GRC platform vendors has kept up an impressive pace as vendors aim to stay one step ahead of their customers' own advancements in governance, risk, and compliance...

• Downloads: 1243
• Rating:

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Identify And Describe Risks

Documenting The Sources Of Uncertainty That Might Affect Your Organization, Project, Asset, Or Objective

Enterprise risk management (ERM) programs are helping to break down organizational silos so that executives can gain insight on the risks that may affect all aspects of their business. Unfortunately,...

• Downloads: 1470