About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Phil serves Application Development & Delivery Professionals seeking strategies that will help them streamline and manage their application portfolios. Phil's coverage includes application modernization (monitoring, renewing, replacing, or retiring existing applications/platforms); portfolio management (APM) (driving business-aligned modernization via metrics/assessments); rationalization (streamlining the portfolio to reduce lights-on IT costs and increase agility); and strategic planning (aligning business and IT vision and aligning the application/infrastructure to fulfill the joint business/IT vision).
Phil focuses his research on application professionals, but his research also draws the interest of enterprise architects, CIOs, and other IT professionals.
Phil's IT experience dates back to 1982, when he held positions with: the Commonwealth of Massachusetts (consultant); Boston University (application developer); and Cullinet Software, where he held positions as a software developer and consultant before he was promoted to IT director. When CA bought Cullinet in 1989, Phil joined insurance company startup Arbella Mutual Insurance as director of applications, working with a management team to literally create an IT department and implement its initial applications/operating environment. In 1992, Phil accepted a director-level position with the National Council on (workers') Compensation Insurance (NCCI), where he directed a team that developed and distributed a commercial software package, implemented a financial applications package, and rolled out the nation's first Internet-based information service to the worker's compensation industry. Phil held the top management position in NCCI's $26 million Y2K program office — leveraging offshore programming resources to remediate its applications and onsite staff to execute Y2K testing, effectively creating a round-the-clock remediation process.
Phil joined Giga Information Group in 1997 as an industry analyst, covering the Y2K phenomenon, and he was promoted to the position of managing director of research for its e-practices group. Since Forrester bought Giga in 2003, Phil has been bringing his broad technical and managerial experience to bear on application and IT management topics that concern Forrester's diverse client base.
Assessment Framework: The S&R Practice Playbook
This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

Governance, Maturity, And Analytics Are The Major Themes For 2011
Every winter Forrester outlines 12 important recommendations for your security strategy for the coming year. We base these recommendations on hundreds of client inquiries, numerous consulting...

The Forrester Information Security Maturity Model is a framework that consists of four main security domains (oversight, technology, process, and people) with 25 functions and 123 low-level...

Today, with technology embedded in virtually every business process and market dynamics changing at a mind-boggling pace, the role of CIO is rapidly changing from a technology manager to a business...
The Forrester BT Leadership Maturity Model consists of four domains (leadership, strategy and planning, BT service design, and BT service delivery). This model is designed to provide a brief...

As information security matures into a formal discipline, it needs formal governance mechanisms. Over the past 12 months, Forrester has seen increased interest and activity in establishing security...
In Forrester's 78-criteria evaluation of managed security services providers (MSSP), we found that IBM and SecureWorks led the pack because of flexibility, competency, and breadth of coverage. While...
Last week, Forrester launched its CIO Role Community, a place for CIOs (and other IT leaders) exclusively to engage in conversations and discussions with their peers. This community will also...
A Self-Assessment Framework To Focus And Accelerate Your Transformation
Many CIOs struggle to answer two deceptively simple questions: 1) How are we doing, and 2) what should I prioritize? These questions invite a host of complexities, raising questions about the role of...
The cyberinsurance market has existed for longer than most would guess. In fact, insurance companies wrote the first cyberinsurance policies more than a decade ago. Since cyberinsurance first emerged...
Firms Must Improve The Maturity Of Their Services To Remain Relevant
While it hasn't always been seen in the past as the earliest adopter of information security technologies or the largest market for information security services, the US federal government is...
The Future IT Organization And Its Implications For CIOs
The empowered era has brought about a paradigm shift for IT organizations. Employees and customers are no longer relying on IT to provision and manage technology. They are using social, mobile,...

In the past few days, almost every conversation I have had with a CISO has somehow stumbled onto the topic of the data breach at the US Department of Defense (DoD) and subsequent release of that...
Deloitte Leads The Pack, With PricewaterhouseCoopers, Ernst & Young, And Accenture Close Behind
In Forrester's 75-criteria evaluation of information security and risk consulting service providers, we found that Deloitte led the pack because of its maniacal customer focus and deep technical...
A Road Map For CIOs To Succeed In An Empowered World
Many pundits are writing the CIO's obituary. Your employees and the business are no longer relying on IT to provision and deliver technology. They are using technologies like social, mobile, cloud,...

The Renaissance was possible because of dissemination of ideas from the later 15th century. The availability of paper and the subsequent invention of the printing press in 1445 forever changed the...
As you may know, I recently was named the Research Director for our CIO team — a team of highly accomplished and experienced analysts at Forrester. One of our first tasks as a team was to...
Today, 22% of employees say that they have used a non-IT-provisioned service over the Web to perform their job function —not to update their Facebook accounts, but to do real work.[i]...
Understand The New Threat Paradigm To Make Your Responses More Effective
The information security threat landscape is changing rapidly, and many security organizations are struggling to keep up with the changing nature, complexity, and scale of attacks. Not only is it...