Forrester

For Security & Risk Professionals

Blog:Managed Service Market Is Growing – Come On In, The Water’s Fine!

I reported that the managed security services market is growing in our recent Forrester Wave™ covering North American managed security service providers. Trustwave just issued a press release...

For Security & Risk Professionals

Blog:Security Forum 2010: Day 2 Keynotes-At-A-Glance

Last week, I wrote a blog post summarizing the Day 1 opening keynotes at Forrester’s Security Forum.  This week, I’d like to recap the Day 2 opening keynotes. The second or last...

For Security & Risk Professionals

Client Inquiry:Is The USA Patriot Act A "No Go" For EU Companies That Want To Use US Cloud Services?

We plan to move our mailing and collaborative systems to the cloud where main actors are US companies and subject to the USA Patriot Act. How do European companies deal with this US law? Is the...

For Security & Risk Professionals

Report:Case Study: BlueCross BlueShield Of Tennessee Tackles Strategic Archiving Initiative

BCBST Leverages A Proactive Approach To Support eDiscovery And Cut Costs

In addition to regulatory requirements, health plans often face significant litigation burdens. In seeking to address eDiscovery objectives, many organizations struggle with the intersection of...

• Downloads: 198

For Security & Risk Professionals

Client Inquiry:Records Definition And Retention Rules

What is the definition of a record according to federal guidelines? What are some business rules for record retention? Where are the guidelines located that we should follow?

For Security & Risk Professionals

Blog:Bit9’s Operational Oversight Is Probably Your Operational Reality

You are now no doubt aware that Boston-based security firm Bit9 suffered an alarming compromise, which resulted in attackers gaining access to code-signing certificates that were then used to sign...

For Security & Risk Professionals

Report:Five Steps To Build An Effective Threat Intelligence Capability

Tools And Technology: The Security Architecture And Operations Playbook

Against today's mutating threat landscape and sophisticated cybercriminals, security and risk (S&R) professionals are outgunned and outmatched. The traditional strategy of waiting for an alert and...

• Downloads: 477
• Comments: 2
• Rating:

For Security & Risk Professionals

Blog:A 2012 Security Incident Recap By The Numbers

Before we get too far along into 2013, I’d like to take a moment to reflect back on the events of 2012. Thanks to our friends at CyberFactors*, this is what we saw: Overall 1,468 (publicly...

For Security & Risk Professionals

Client Inquiry:Types Of IT Security Certificates

Can you provide us with definitions on the following types of security certificates: 1) SSL; 2) EFS; 3) device certificates; 4) user certificates; 5) code certificates; 6) signed and unsigned...

For Security & Risk Professionals

Blog:A Few Thoughts On Communicating Risk

In my new report, The Risk Manager's Handbook: How To Measure And Understand Risks, I present industry best practices and guidance on ways to articulate the extent or size of a risk. More than...

For Security & Risk Professionals

Blog:What’s Next For IT Security? Post-PC Devices

Greetings! As I have pointed out previously in these pages, this year, the number of post-PC devices such as tablets, eReaders, and Internet-capable mobile phones, will eclipse PC devices, such...

For Security & Risk Professionals

Blog:Information Security Metrics & The Balanced Scorecard

I just finished a final draft of a presentation on information security executive reporting that I and some colleagues will present at the upcoming Forrester IT Forum in Las Vegas.  For those of...

For Security & Risk Professionals

Report:Message Archiving: Market Trends And Enterprise Expectations

Q1 2011 Global Message Archiving Online Survey

A combination of eDiscovery needs, IT objectives, and regulatory requirements continues to drive strong message archiving adoption. The mature message archiving market, however, is in a clear...

• Downloads: 500

For Security & Risk Professionals

Report:Business Continuity And Disaster Recovery Are Top IT Priorities For 2010 And 2011

Six Percent Of IT Operating And Capital Budgets Goes To BC/DR

According to Forrester's recent survey of 2,803 IT decision-makers, improving their business continuity and disaster recovery (BC/DR) capabilities is the No. 1 priority for SMBs and the second...

• Downloads: 1250

For Security & Risk Professionals

Blog:Collaborate With Your Non-Security Peers To See How Objectives Intersect (Hint: Mobile Context For Mobile Authentication)

“Enterprise rights management? What does that even mean?! You’re using security speak!” exclaimed my colleague TJ Keitt. TJ sits on a research team serving CIOs, and covers...

For Security & Risk Professionals

Report:Market Overview: Smart Grid Security Vendors

Utility CISOs Can Take Immediate Steps To Decrease Their Risk

"Smart grids" are the modernization and digitization of aging, inefficient, and unreliable power grids. Smart grids will bring many tangible benefits to both home and business energy consumers, such...

• Downloads: 765

For Security & Risk Professionals

Blog:Crowdsourcing my RSA panels

The San Francisco RSA conference is now less than two weeks away, and this year I am moderating two great panels. I thought I'd reach out and solicit suggestions for discussion.  ...

For Security & Risk Professionals

Report:Maximize Business Performance With A World-Class GRC Program

Executive Overview: The Governance, Risk, And Compliance Playbook

Unexpected events are at best distracting and at worst catastrophic for an organization as it strives to meet its objectives. Risk and compliance professionals must help their colleagues anticipate...

• Downloads: 202

For Security & Risk Professionals

Blog:Protecting Internal APIs — Is OAuth Ready For Its Closeup?

Two years ago, the OAuth API protection mechanism was a fairly well-kept secret. It actually won an award at the 2009 European Identity Conference for "best new/improved standard," but most people...

For Security & Risk Professionals

Tool:Business Continuity Spending

For Security & Risk Professionals

Blog:Open & Honest - Should Breach Disclosure Be Mandatory?

A few months ago I shared a flight with a very pleasant lady from a European regulatory body.  After shoulder surfing her papers and seeing we were both interested in information security...

For Security & Risk Professionals

Tool:Two-Thirds Of Organizations Rate Regulatory Compliance As A Top Priority

For Security & Risk Professionals

Blog:Planning For Failure, Personal Edition -- Strategies To Protect Yourself In 2012

This week I did a webcast, Planning for Failure, which makes the assumption that if you haven't been breached, it is inevitable, and you must be able to quickly detect and respond to...

For Security & Risk Professionals

Report:Survey Employees To Target Mobility Improvements

Benchmarks: The Mobile Security And Operations Playbook

This report outlines the benchmarks of Forrester's solution for security and risk (S&R) executives working on mobile security and operations initiatives. This report provides a benchmark of budgets,...

• Downloads: 518
• Rating:

For Security & Risk Professionals

Blog:The Rationality Of Re-Using Passwords

Internet security vendor BitDefender recently published the results of a study that found, unsurprisingly, that “75 percent of social networking username and password samples collected online...