About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Pascal is a member of Forrester's Business Technology Futures team, which serves CIOs and their business partners by predicting the long-term business impact of information technology. His research focus is on as-a-service business models and tech-driven business transformation, analyzing the shifting and consolidating IT services and outsourcing market, as well as underlying IT market dynamics. His research examines new constituencies of buyers and suppliers that are currently reshaping and recasting the IT services market.
In addition, Pascal regularly advises end user clients on their IT services and sourcing strategies, with a particular emphasis on outsourcing decision issues, RFP creation, and vendor selection and vendor management. His research spans the business strategies, operational processes, and portfolio elements required to achieve and sustain market leadership. For example, he co-authored Forrester's Big Idea on "Converged Service Delivery: The Missing Link In Achieving Business Flexibility." Pascal is a frequent public speaker and is regularly quoted by leading business newspapers and IT magazines, such as CIO Magazine, Computing, The Economist, the Financial Times, Handelsblatt, InformationWeek, and the International Herald Tribune.
Pascal joined Forrester in 2005 from META Group, where he was a European lead analyst and consulting director responsible for IT services and vendor strategy issues. Previously, Pascal came from Giga Information Group, where he was a senior analyst and solution program manager covering IT services and outsourcing topics, as well as the relevant vendor evaluation methodologies. Prior to joining Giga Information Group in 1997, Pascal was involved in management consulting projects at a Munich-based consulting company, mainly in the telecommunications and IT services area.
Pascal earned an M.A. in political science, economics, and modern history from the Ludwig-Maximilians-University in Munich, Germany.
Last week I had the opportunity to attend the 15th annual Black Hat security conference in Las Vegas. I have attended DEFCON in the past, but never Black Hat. The conference has grown significantly...
The San Francisco RSA conference is now less than two weeks away, and this year I am moderating two great panels. I thought I'd reach out and solicit suggestions for discussion. ...
You remember the tribbles don't you? The cute, harmless looking alien species from the second season of the original Star Trek that turn out to be anything but benign. They are born pregnant and...
I'm looking for an industry-standard definition of an "intrusion," including examples, scope, and scale if applicable. We have reporting obligations to the FBI and DSS for cyber intrusions.
This week I did a webcast, Planning for Failure, which makes the assumption that if you haven't been breached, it is inevitable, and you must be able to quickly detect and respond to...
I was very excited to finally get a copy of the much-anticipated 2013 Verizon Data Breach Investigations Report (DBIR.) I have found the report to be valuable year after year. This is the...
I am excited to announce my latest research, The CISO's Guide To Virtualization Security. This is the first report in a new series focusing on securing virtual environments. The reduced...
Why don't some companies inspect outbound HTTPS? Are privacy or legal considerations the primary factor?
I am very excited to introduce my first Forrester report, "The Content Security Forecast Calls For Clouds." I wrote the report to help guide your strategy on SaaS based email and web content...
We are excited to announce "Planning For Failure," the first collaborative report in a series of new research taking a closer look at incident management and response. A look back at the...
You are now no doubt aware that Boston-based security firm Bit9 suffered an alarming compromise, which resulted in attackers gaining access to code-signing certificates that were then used to sign...
Our next installment of "Hackers vs. Executives" is just weeks away. Join us at the Forrester Security Forum and sit in on one of the most popular sessions of the event each year. We have a...
We have several questions: 1) How do companies manage employee Internet access? 2) How do they authenticate employees? 3) How do they block access to unwanted applications? 4) How can we block...
"My master made me this collar. He is a good and smart master and he made me this collar so that I may speak. Squirrel!" In the Pixar film Up, squirrels frequently distract Dug the talking...
Last Friday, after a long week of RSA conference events and meetings, I eagerly looked forward to slipping on my headphones and enjoying the relative silence of my flight back to Dallas. As I...
Could you provide information on data leak prevention (DLP) versus information rights management (IRM) solutions? Do you recommend one or the other or both? What vendors play in this space?
Winter is coming; the year is quickly drawing to a close, and its time to a look back and see how accurate our content security crystal ball was for 2011. Last year we predicted three trends;...
Last week I read an article on wired.com’s Danger Room blog about the elite US military Special Forces command, JSOC. The units within the Joint Special Operations Command (Delta Force...
Today EMC announced the acquisition of Silicium Security. Silicium’s ECAT product is a malware threat detection and response solution. ECAT did not adopt the failed signature based...
We have started a new report series on Cyber Threat Intelligence. The first report, "Five Steps To Build An Effective Threat Intelligence Capability," is designed to help organizations...
We're looking for some information about antivirus products. What's the best technology available in the market?
Have you ever been in a vendor meeting and heard the vendor extol the greatness of their threat intelligence? You may have even seen a slide that looks similar to this: The vendor probably...
What standards — if any — exist as to file types to block? Are zip files still viewed as a significant security risk, and if so, how do organizations balance the business need to access...
It is with great pleasure that I announce the completion of my first Forrester Wave™: Email Content Security, Q4 2012. I’d like to thank the research associates (Jessica McKee and...
FAIL at 30,000ish feet When you fly nearly every week, you can get pretty bored on a plane. When I am sick of working, playing games, or watching movies, my latest distraction is checking...