About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Andy is a member of Forrester's Business Technology Futures team, which serves CIOs and their business partners by predicting the long-term business impact of information technology. His research focus is on smart computing and analytics and tech-driven business transformation, analyzing the shifting economics of the industry, including spending, budgeting, and the influence of macroeconomic trends.
He also researches the growing customization of IT systems for industry-specific applications, especially in the utilities, energy, and professional services sectors. He is also a thought leader in the sourcing and procurement technology markets.
Andy has extensive experience in the technology market and in strategic planning, both as an analyst and a practitioner in the business world. He came to Forrester through its acquisition of Giga Information Group in 2003, where he had worked as a vice president and research leader since 1998. Prior to joining Giga, Andy held a variety of vice president positions at American Express in the chairman's office, technologies, strategic planning, and re-engineering. Before joining American Express, Andy worked as an economist, writer, and editor for various organizations, including Shearson Lehman Brothers; the US House of Representatives' Committee on Banking, Finance, and Urban Affairs; and the Council on Wage and Price Stability in the Executive Office of the President.
Andy has been a regular participant in Forrester's IT Forum conferences, delivering keynote addresses in 2006 and 2007 with colleagues on the future of software. He has also been a recurring presenter at Conference Board conferences on eProcurement and eSourcing. He has been quoted in leading business and technology publications, including BusinessWeek, The Economist, The New York Times, and The Wall Street Journal.
Andy earned a B.A. in philosophy from Haverford College and a Ph.D. in history from Johns Hopkins University.
Among risk professionals who have successfully navigated their organization through a crisis, almost all will say that they had grossly underestimated the difficulty of communicating effectively...
Vision: The Business Technology Resiliency Playbook
This report outlines the vision of Forrester's solution for infrastructure and operations (I&O) executives planning their organization's business technology (BT) resiliency strategy — the...

From frantic security operations problems to the changing threat landscape, CISOs, senior security leaders, and other IT risk management leaders consistently have trouble keeping up with key trends...

What changes in emergency notification tactics do you foresee? More specifically, it seems as if SMS messaging and email will replace telephone voice-to-voice communications. Will SMS messaging and...
Executive Overview: The Business Technology Resiliency Playbook
In today's world of 24x7x365 global operations and competition, downtime results not only in immediate lost revenue and productivity, but also in lasting damage to corporate reputation that erodes...

We would like to know, in the event of a disaster: 1) Whom should we call; 2) what format is best; 3) what kind of information/instructions should we provide on the call; and 4) what kind of...
Executive Overview: The Mobile Security And Operations Playbook
This report outlines the executive overview of Forrester's solution for security and risk professionals working on managing mobile and consumer devices. Smartphones and tablets are quickly becoming...
Executive Overview: The Security Architecture And Operations Playbook
We've all heard about the "evolving threat landscape." In biology, evolution is a process that takes millions of years to occur as a result of small changes in successive generations. Mutations, on...
I had the chance to sit down with Credit Suisse’s CISO and Head of IT Risk, Daniel Barriuso, to ask him a few questions about his role at Credit Suisse and his approach to security. Daniel will...
Although a business impact analysis (BIA) is a key part of putting together a disaster recovery plan, many companies neglect to conduct one. Forrester believes it's worthwhile to take a step back and...
Strategic Plan: The Mobile Security And Operations Playbook
This report outlines the strategic vision of Forrester's solution for security and risk (S&R) and infrastructure and operations (I&O) executives leading the development of their firm's mobile...

Benchmark: The Business Technology Resiliency Playbook
This report outlines Forrester's solution for infrastructure and operations (I&O) leaders to benchmark the performance of their business continuity (BC) programs as part of their broader business...

There is truth to the meme, “data is the new oil.” Data is the lifeblood of today's digital businesses, and for economic and even political gain, highly skilled...
During the last 12 to 18 months, there have been a number of notable natural catastrophes and weather related events. Devastating earthquakes hit Haiti, Chile, China, New Zealand, and Japan. Monsoon...
Ten Recommendations For Maturing Your Business Continuity Exercise Program
Everyone knows you must exercise your business continuity (BC) plans. However, in dozens of inquiries and consulting engagements with enterprise clients each quarter, Forrester finds that BC managers...
In Fortune 500 companies, where does the head of business continuity management (BCM) report and what standards do they use as a framework for their BCM programs?
We are considering a contract with a third-party disaster recovery service provider in the event that employees are displaced from the office. What are the critical requirements that we should...
At the recent Disaster Recovery Journal Fall World conference, I gave a presentation of the state of BC readiness. I had some great discussions with the audience (especially about where BC should...
Upgrade Continuity And Recovery With Replication
Tape is not dead, and in fact, a large number of companies still rely heavily on tape for disaster recovery (DR). Tape is affordable and removable, but as the requirement to recover IT services after...
What are the major government and industry regulations that affect data leak prevention requirements?
Tools And Technology: The Business Technology Resiliency Playbook
When anxious executives ask you to improve or maintain business resiliency across the enterprise, it's likely that you'll need help. The skills and expertise required to stay on top of key trends,...
For the second year in a row, I have the honor of hosting our Security Forum EMEA in London, March 17th - 18th. This is Forrester's 5th annual Security Forum in Europe, and each year brings a...
Benchmarks: The Identity And Access Management Playbook
This report provides a spending and technology adoption benchmark for security and risk (S&R) executives looking to develop their organization's identity and access management (IAM) strategy....

Business Case: The Business Technology Resiliency Playbook
This report outlines Forrester's guidance for a business technology resiliency (BTR) business case. This is a critical step when securing funding because management is often reluctant to fund...

Security Forum 2010 is upon us, and the stage has been set. After my welcome remarks this morning, Forrester’s own VP & Principal Analyst Khalid Kark kicked us off with a fantastic...