Forrester

For Security & Risk Professionals

Report:Assess Your Security Program With Forrester's Information Security Maturity Model

Assessment Framework: The S&R Practice Playbook

This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

• Downloads: 2040
• Comments: 1
• Rating:

For Security & Risk Professionals

Report:Spotlight On Security Service Providers For The US Government

Firms Must Improve The Maturity Of Their Services To Remain Relevant

While it hasn't always been seen in the past as the earliest adopter of information security technologies or the largest market for information security services, the US federal government is...

• Downloads: 538

For Security & Risk Professionals

Report:Q&A: Cyberinsurance Fundamentals For Security And Risk Professionals

The cyberinsurance market has existed for longer than most would guess. In fact, insurance companies wrote the first cyberinsurance policies more than a decade ago. Since cyberinsurance first emerged...

• Downloads: 267

For Security & Risk Professionals

Report:Twelve Recommendations For Your 2011 Security Strategy

Governance, Maturity, And Analytics Are The Major Themes For 2011

Every winter Forrester outlines 12 important recommendations for your security strategy for the coming year. We base these recommendations on hundreds of client inquiries, numerous consulting...

• Downloads: 2094

For Security & Risk Professionals

Report:CISO Handbook: Ten Tips For Building A Successful Security Steering Committee

As information security matures into a formal discipline, it needs formal governance mechanisms. Over the past 12 months, Forrester has seen increased interest and activity in establishing security...

• Downloads: 658

For Security & Risk Professionals

Report:The New Threat Landscape: Proceed With Caution

Understand The New Threat Paradigm To Make Your Responses More Effective

The information security threat landscape is changing rapidly, and many security organizations are struggling to keep up with the changing nature, complexity, and scale of attacks. Not only is it...

• Downloads: 722

For Security & Risk Professionals

Report:The Forrester Wave™: Managed Security Services, Q3 2010

In Forrester's 78-criteria evaluation of managed security services providers (MSSP), we found that IBM and SecureWorks led the pack because of flexibility, competency, and breadth of coverage. While...

• Downloads: 1959

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security And Risk Consulting Services, Q3 2010

Deloitte Leads The Pack, With PricewaterhouseCoopers, Ernst & Young, And Accenture Close Behind

In Forrester's 75-criteria evaluation of information security and risk consulting service providers, we found that Deloitte led the pack because of its maniacal customer focus and deep technical...

• Downloads: 1762

For Security & Risk Professionals

Report:The Forrester Information Security Maturity Model

The Forrester Information Security Maturity Model is a framework that consists of four main security domains (oversight, technology, process, and people) with 25 functions and 123 low-level...

• Downloads: 67
• Rating:

For Security & Risk Professionals

Report:CISO Handbook: Presenting To The Board

Only a few years ago, the vast majority of chief information security officers (CISOs) reported to the CIO. Their task was to run and manage the technical and operational security infrastructure....

• Downloads: 567

For Security & Risk Professionals

Report:Market Overview: Managed Security Services

Look Beyond Cost Savings And 24x7 Support To Select An MSSP

The managed security services market is growing at a healthy clip due to a confluence of several factors, most notably staffing and skill pressures, an ever-evolving threat landscape, and an...

• Downloads: 1739
• Comments: 9
• Rating:

For Security & Risk Professionals

Report:Security Organization Trends 2010

The scope of IT security continues to expand, and with it the visibility of the security organization is rising. Most security organizations now regularly engage with executives and business...

• Downloads: 28

For Security & Risk Professionals

Report:Twelve Recommendations For Your 2010 Information Security Strategy

As we enter 2010 and look ahead, the challenges we face are very familiar. The technology has been changing as usual, the business has been demanding more and more from security professionals as...

• Downloads: 2046

For Security & Risk Professionals

Report:Case Study: Intel Implements People As The New Perimeter To Mitigate Social Computing Risks

Intel, a large global technology provider, has more than 86,000 employees worldwide. It's only natural that, working for a technology provider, Intel's employees are generally ahead of the curve in...

• Downloads: 579

For Security & Risk Professionals

Report:CISO Handbook: How To Plan For A Security Breach

Many chief information security officers (CISOs) are forced to respond to security breaches with little knowledge or planning. Not only is it important to have the tools for responding to security...

• Downloads: 815

For Infrastructure & Operations Professionals

Report:IT Compliance: From Painful To Pleasant

With increasing workforce mobility and the extension of the business supply chain globally, organizations are struggling to keep up with increasing corporate and regulatory compliance requirements....

• Downloads: 746

For Security & Risk Professionals

Report:Healthcare Security: Ready Or Not, Here It Comes

Applying Five Cardinal Rules Of Information Security To Healthcare Companies

The US Congress enacted the Health Insurance Portability and Accountability Act (HIPAA) in 1996. The security and privacy rules took effect in 2003, but none of this really improved the overall state...

• Downloads: 901

For Security & Risk Professionals

Report:Articulating The Business Value Of Information Security

Many CISOs struggle to articulate the value of their security programs and justify the security budget to business and executive management. This problem was acutely evident in the current economic...

• Downloads: 1319

For Security & Risk Professionals

Report:Case Study: Harland Clarke Turns To Corporate Objectives For Defining Security Metrics

John Petrie at Harland Clarke was lucky to report directly to executive management, and he reported on a routine basis to the executive management team on information security issues. This gave him a...

• Downloads: 357

For Security & Risk Professionals

Report:Case Study: DTCC Implements A Process-Based Approach To Security Metrics

Jim Routh at DTCC took a unique approach in developing his security metrics program. He identified all of the processes that the security team was responsible for and then defined a process owner for...

• Downloads: 389

For Security & Risk Professionals

Report:Real World Example: Eastman Kodak Security Metrics Dashboard

Includes a real world example of a security metrics dashboard courtesy of Eastman Kodak Company.

• Downloads: 19

For Security & Risk Professionals

Report:Case Study: Eastman Kodak Company Takes A Tiered-Risk Approach To Security Metrics

Eastman Kodak's matrixed organizational structure enables its business units to act quickly in response to changing business conditions, but it also creates a decentralized security function....

• Downloads: 517

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security And IT Risk Consulting, Q1 2009

Deloitte And PricewaterhouseCoopers Lead, With Accenture Close Behind

In Forrester's 72-criteria evaluation of information security and IT risk consulting service providers, we found that Deloitte and PricewaterhouseCoopers (PwC) lead the pack because of their superior...

• Downloads: 1779

For Security & Risk Professionals

Report:Security Budgets, Reporting, And Responsibilities Are All Rising In 2009

Security professionals have been complaining for years about their inability to influence the organization and that information security is a thankless job. Recent conversations with CISOs and data...

• Downloads: 608

For Security & Risk Professionals

Report:Twelve Recommendations For Your 2009 Information Security Strategy

Many security predictions paint a doomsday scenario where a crippling cyberattack will leave us all reeling from its effects or Supervisory Control and Data Acquisition (SCADA) systems...

• Downloads: 1559