Forrester

For Security & Risk Professionals

Blog:Nine Managed Security Services Providers (MSSPs) Compete In The North American Market

After months of diligent vendor evaluations, last week we officially published The Forrester Wave: Managed Security Services: North America, Q1 2012. This report features our detailed analysis on...

For Security & Risk Professionals

Blog:OK, Tell Me I'm Wrong!

Everyone knows that in business you need to do two things: Increase top-line revenue growth and reduce bottom line cost. Doing both of these is how companies grow profitably. It really is that...

For Security & Risk Professionals

Tool:Forrester's Information Security Sourcing Decision Tool Kit

For Security & Risk Professionals

Report:Determine The Value Of Information Security Assets And Liabilities — Information Security Economics 102

This is the second in a series of reports providing guidance and new methods for the financial management of information security. The CISO's role is rapidly changing. A few years ago the CISO for...

• Downloads: 102
• Comments: 2
• Rating:

For Security & Risk Professionals

Report:The Forrester Information Security Metrics Maturity Model

In conjunction with Forrester's update to our information security metrics and best practices report, Forrester has developed a model to help you assess the maturity of your security metrics program.

• Downloads: 127
• Comments: 1

For Security & Risk Professionals

Client Inquiry:Are Organizations Still Using War Dialing?

Are organizations in the financial services sector still using war dialing as a control to identify potential insecure modems or telephony applications? Is it still a best practice to engage in this...

For Security & Risk Professionals

Tool:Forrester Wave™: Managed Security Services: North America, Q1 2012

For Security & Risk Professionals

Blog:From Customer To Channel Partner

 Even though it is not specific to security, this idea came to me while attending Dell’s Annual Analyst Conference (DAAC) in Austin, Texas two weeks ago. One of the hot topics discussed at...

For Security & Risk Professionals

Report:The Forrester Wave™: Information Security Consulting Services, Q1 2013

Ernst & Young, Deloitte, IBM, Accenture, PwC, And KPMG Lead, With Wipro Following Close Behind

The information security consulting market is growing explosively because security and risk professionals often lack the skill and bandwidth to accomplish their increasingly difficult mission. To...

• Downloads: 523
• Rating:

For Security & Risk Professionals

Blog:Managed Security Services — Build Versus Buy

  While you are at the Forrester Security IT Forum in Miami, you might also want to attend my session on Managed Security Services Providers. In my role as an analyst, I speak to many security...

For Security & Risk Professionals

Tool:Evaluated Vendors: Vendor Information And Selection Criteria

For Security & Risk Professionals

Tool:Forrester Wave™: Managed Security Services: North America, Q1 2012

For Security & Risk Professionals

Blog:Large Telecoms Offer A Full Menu Of Security Services, But Not Without A Little Indigestion

Guest Post From Researcher Chris Sherman  Last month, Ed and I spent a couple days in Paris with Orange's management team for their annual analyst event. Overall I was impressed with...

For Security & Risk Professionals

Client Inquiry:Security Reporting Structure

What are the pros and cons of security reporting within IT versus a non-IT department?

For Security & Risk Professionals

Blog:Information Security Metrics Insanity, The 3Rs And Dashboards!

  I just finished a research document titled Measure The Effectiveness Of Your Data Security And Privacy Program for the The Security Architecture And Operations Playbook. This was a lot of fun...

For Security & Risk Professionals

Blog:Information Value and Risk Assessment

  I just wrote a paper on the value of information security. Please see the paper here. It is something I have thought about for a long time. Information security as a technical discipline...

For Security & Risk Professionals

Report:SAS 70 Out, New Service Organization Control Reports In

Security And Risk Professionals Must Prepare To Phase Out SAS 70 Today

Developed by the American Institute of CPAs (AICPA), the Statements on Auditing Standards 70 (SAS 70) has been around since 1992. When the Sarbanes-Oxley Act (SOX) of 2002 passed, SAS 70 gained new...

• Downloads: 434

For Security & Risk Professionals

Report:Develop Effective Security Metrics

Performance Management: The S&R Practice Playbook

This report outlines the benchmarks for Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We designed this report...

• Downloads: 2156

For Security & Risk Professionals

Report:Measure The Effectiveness Of Your Security Architecture And Operations

Performance Management: The Security Architecture And Operations Playbook

Information security programs have struggled with legitimacy with senior leaders for a long time. There are many reasons for this, but they all can be traced back to the historical inability of chief...

• Downloads: 482
• Rating:

For Security & Risk Professionals

Report:The Forrester Wave™: Emerging Managed Security Service Providers, Q1 2013

Ten Emerging Service Providers That Have The Chops To Be Your Managed Security Service Provider

In Forrester's 15-criteria evaluation of the emerging managed security services provider (MSSP) market, we identified the 10 most significant providers in this category — Alert Logic; CompuCom;...

• Downloads: 572
• Rating:

For Security & Risk Professionals

Blog:Enterprise Information Security Architecture

I always have been interested in Enterprise Architecture.  Enterprise Architecture is one of those terms that security professionals hear about but do not always know how it can benefit what...

For Security & Risk Professionals

Blog:Think Differently

Steve Jobs by Walter Isaacson is a very readable and honest portrayal of one of the most influential personalities in the computer industry from 1980 to the present. Often caustic, abrupt, and...

For Security & Risk Professionals

Tool:Forrester Wave™: Emerging Managed Security Service Providers, Q1 2013

For Security & Risk Professionals

Report:The Forrester Wave™: Managed Security Services: North America, Q1 2012

The Nine Service Providers That Matter Most And How They Stack Up

In Forrester's 60-criteria evaluation of the North American managed security services market, we identified the nine significant service providers in this category — AT&T, CSC, Dell...

• Downloads: 1045
• Comments: 10
• Rating:

For Security & Risk Professionals

Blog:Calculating Breach Costs: An Accounting Problem For Risk Management Strategy

Guest post from Researcher Heidi Shey.  Calculating the cost of a data breach should be a part of every organization’s information security risk management strategy. It’s not an easy...