Forrester

For Security & Risk Professionals

Tool:Peer Best Practices — You Must Market Security Up, Across, And Down

For Security & Risk Professionals

Report:Q&A: Demystifying Cloud Security

An Empowered Report: Getting Past Cloud Security Fear Mongering

At Forrester's Security Forum 2010 in Boston, Eran Feigenbaum, director of security, Google Apps; and Archie Reed, chief technologist for cloud security at HP, joined me on stage for a keynote panel...

• Downloads: 1117

For Security & Risk Professionals

Report:Q&A: EU Privacy Regulations

As a consequence of increasing global commerce, security and risk (S&R) professionals face the complexity of navigating data privacy regulations from around the world. Forrester clients frequently...

• Downloads: 417

For Security & Risk Professionals

Report:Compliance With Clouds: Caveat Emptor

Today's organizations face aggressive cost-cutting and efficiency pressures that drive businesses to consider cloud sourcing solutions. While the many properties of cloud services, such as...

• Downloads: 1207

For Security & Risk Professionals

Report:Protecting Enterprise APIs With A Light Touch

By 2012, OAuth Will Be The Incumbent Cloud API Security Solution

Enterprises face a tension between the cloud-friendly software environment promoted by the Web, with its easy-to-use REST interface style and proliferation of lightweight services, and the security...

• Downloads: 648

For Security & Risk Professionals

Blog:New Research: Develop Effective Security Metics - Published this Month

This month I published a new report on information security metrics, best practices as well as a maturity model to measure your maturity in the reporting process.  This report outlines the...

For Security & Risk Professionals

Report:Q&A: Cyberinsurance Fundamentals For Security And Risk Professionals

The cyberinsurance market has existed for longer than most would guess. In fact, insurance companies wrote the first cyberinsurance policies more than a decade ago. Since cyberinsurance first emerged...

• Downloads: 267

For Security & Risk Professionals

Blog:My Threat Intelligence Can Beat Up Your Threat Intelligence

Have you ever been in a vendor meeting and heard the vendor extol the greatness of their threat intelligence?  You may have even seen a slide that looks similar to this: The vendor probably...

For Security & Risk Professionals

Report:Pull Your Head Out Of The Sand And Put It On A Swivel: Introducing Network Analysis And Visibility

Essential Functionality For The Zero Trust Model Of Information Security

In today's threat environment, the network perimeter has disappeared. Insiders are as insidious a threat as outsiders. In the past, the "trust but verify" model did not facilitate insight into...

• Downloads: 891

For Security & Risk Professionals

Blog:Avoid The Information Security Squirrel

"My master made me this collar. He is a good and smart master and he made me this collar so that I may speak. Squirrel!"   In the Pixar film Up, squirrels frequently distract Dug the talking...

For Security & Risk Professionals

Client Inquiry:How Do Companies Manage Internet Security?

We have several questions: 1) How do companies manage employee Internet access? 2) How do they authenticate employees? 3) How do they block access to unwanted applications? 4) How can we block...

For Security & Risk Professionals

Tool:Forrester Wave™: Information Security And Risk Consulting, Q3 '10

For Security & Risk Professionals

Report:What You Must Know About Data Privacy Regulations In Asia Pacific

Be Ready To Comply With Dynamic Regulatory Changes

Understanding the laws and regulations that govern data privacy across your organization is critical for any company, but it can be challenging. As a result, too many security and risk (S&R)...

• Downloads: 90

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Report:It's Time To Include Social Technology In Your Crisis Communication Strategy

Among risk professionals who have successfully navigated their organization through a crisis, almost all will say that they had grossly underestimated the difficulty of communicating effectively...

• Downloads: 520

For Security & Risk Professionals

Blog:Fast Cloud Identity Provisioning

Back in July, I wrote about a new RESTful API that cloud providers and provisioning vendors are working on for doing identity provisioning and synching: Simple Cloud Identity Management, or SCIM...

For Security & Risk Professionals

Report:The Pains, Pitfalls, And Potential For Records Management In 2011

Forrester Research And ARMA International Records Management Online Survey, Q3 2010

Successful records management helps your organization comply with regulatory requirements, ease eDiscovery burdens, and meet information governance objectives. In pursuit of these goals, nearly...

• Downloads: 699

For Security & Risk Professionals

Report:The Forrester Wave™: Endpoint Security, Q1 2013

Endpoint Security Suites Take Center Stage In The Enterprise

In Forrester's 50 criteria evaluation of endpoint security vendors, we identified nine top providers in the category — F-Secure, IBM, Kaspersky, LANDesk, Lumension, McAfee, Sophos, Symantec,...

• Downloads: 517
• Rating:

For Security & Risk Professionals

Tool:Forrester Wave™: Managed Security Services, Q3 2010

For Security & Risk Professionals

Report:PCI X-Ray: Application Security

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...

• Downloads: 398

For Security & Risk Professionals

Report:Build An Information Security Management System

Policy And Procedures: The S&R Practice Playbook

Over recent years, the information security industry has matured nicely; experts and associations have documented many best practice models, and their adoption has been widespread. It's disconcerting...

• Downloads: 743

For Security & Risk Professionals

Blog:Bit9’s Operational Oversight Is Probably Your Operational Reality

You are now no doubt aware that Boston-based security firm Bit9 suffered an alarming compromise, which resulted in attackers gaining access to code-signing certificates that were then used to sign...

For Security & Risk Professionals

Blog:Enterprise “Overextended”? You Need To Evolve Your Identity Strategy

The rapid adoption of mobile devices and cloud services together with a multitude of new partnerships and customer-facing applications has extended the identity boundary of today’s enterprise....

For Security & Risk Professionals

Report:CISO Handbook: Ten Tips For Building A Successful Security Steering Committee

As information security matures into a formal discipline, it needs formal governance mechanisms. Over the past 12 months, Forrester has seen increased interest and activity in establishing security...

• Downloads: 658

For Security & Risk Professionals

Report:Build A Governance, Risk, And Compliance Strategy Worthy Of Business Consideration

Strategic Plan: The Governance, Risk, And Compliance Playbook

Governance, risk management, and compliance (GRC) are far too often positions of emergency response. What's worse, as you constantly rush to respond to new mandates, enforce policies, or pull...

• Downloads: 548
• Rating: