About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.
Clients Should Use Forrester's Vendor Viability Index To Optimize The Alternative Geography Supplier Selection Process
As more companies expand their use of global delivery models, assessing the risk of potential countries and cities is crucial. Traditional approaches to location analysis have typically comprised...
What Enterprise Architects Need To Know About The Shift From Records Management To Information Governance
Despite two decades of electronic records management (RM) evolution, fewer than 10% of enterprises admit to high levels of confidence in their approach to the governance of digital information. The...
From frantic security operations problems to the changing threat landscape, CISOs, senior security leaders, and other IT risk management leaders consistently have trouble keeping up with key trends...

The challenges of consumer-facing identity management, access management, and authentication differ in ways subtle and dramatic from those of the employee-facing variety. In fact, several vendors in...
Organization: The Personal Identity Management Playbook
In anticipation of the increasing adoption of personal identity management (PIDM) tools and services, customer intelligence (CI) leaders will be held increasingly accountable for their organizations'...

The Eight Providers That Matter Most And How They Stack Up
In Forrester's 15-criteria evaluation of enterprise fraud management vendors, we identified the eight most significant vendors in the category — 41st Parameter, ACI Worldwide, CA Technologies,...
Executive Overview: The Governance, Risk, And Compliance Playbook
Unexpected events are at best distracting and at worst catastrophic for an organization as it strives to meet its objectives. Risk and compliance professionals must help their colleagues anticipate...
Business Case: The Governance, Risk, And Compliance Playbook
As the governance, risk, and compliance (GRC) platform market matures, product vendors struggle to point to credible return on investment figures, and potential buyers similarly struggle when asked...
Processes: The Governance, Risk, And Compliance Playbook
As a risk professional, you are currently in a position to exert more influence on your organization and increase the value you and your team can offer. Many of you will feel pressure to develop...

Continuous Improvement: The Governance, Risk, And Compliance Playbook
When you're challenged by a constantly changing regulatory landscape, business environment, and risk profile, it's easy to overlook the critical role corporate culture plays in keeping compliance and...
Developing And Managing Efforts To Control Unacceptable Levels Of Risk
From understanding comes action. Your risk management efforts up to this point will have yielded a list of concerns; a measure of how much these concerns could affect objectives; and a decision of...

Vision: The Content Management Playbook
Successful management of content throughout its life cycle has never been more challenging. Customers and employees, operating in a social, mobile world, expect easy mechanisms to create and consume...
Insurers Must Catch Up To The Sophistication Of Today's Fraudsters
Fraud costs the US insurance industry upward of $40 billion, which the industry then passes on to policyholders in the form of higher premiums. Financial crime is on the rise as fraudsters become...
Road Map: The Governance, Risk, And Compliance Playbook
The governance, risk management, and compliance (GRC) technology market is one of fluctuation, confusion, and contention. Many technologies relevant for governance, risk management, and compliance...

Strategy Deep Dive: The Mobile Security And Operations Playbook
Mobile devices are everywhere: at work, in the hands of your customers, and with employees. Security and risk (S&R) professionals need to provide users with secure and seamless mobile access to...

Social media is a security and risk nightmare — it's used everywhere, all the time, by everyone both outside and inside your organization. Although social media offers potentially great...

Vision: The Security Architecture And Operations Playbook
There's an old saying in information security: "We want our network to be like an M&M, with a hard crunchy outside and a soft chewy center." For a generation of information security...
Sourcing and vendor management (SVM) professionals should read this report to understand the current visa discourse relative to IT outsourcing and thus limit their exposure to visa risk. In our...

Benchmarks: The Data Security And Privacy Playbook
This report outlines the benchmarks for Forrester's solution for security and risk (S&R) professionals looking to develop their organization's data security and privacy strategy. Throughout the year,...

Tools And Technology: The Business Technology Resiliency Playbook
When anxious executives ask you to improve or maintain business resiliency across the enterprise, it's likely that you'll need help. The skills and expertise required to stay on top of key trends,...
Stakeholder Needs: The Data Security And Privacy Playbook
This report outlines Forrester's solution for security and risk executives seeking to develop a data privacy and protection program and gain stakeholder support. As a security and risk (S&R)...
Policy And Procedures: The Social Business And Collaboration Playbook
A clear social business policy is an essential guide for employees using social and collaboration tools for customer engagement and for internal or partner collaboration. While it takes a...
Forrester's Data Security And Control Framework
Forrester segments the problem of securing and controlling data into three areas: 1) defining the data; 2) dissecting and analyzing the data; and 3) defending and protecting the data. We refer to...

Predictive And Behavioral Analysis Finds Its Way Into Identity And Access Management
Identity and access management (IAM) professionals need to protect information and prevent unauthorized users from accessing business-critical systems in an increasingly complex IT environment. They...

Since cyberinsurance first emerged in the late '90s, the number of available policies, the scope of those policies, and the number of insurers offering them have all significantly increased. Due to...