Forrester

For Security & Risk Professionals

Tool:Forrester Wave™: Enterprise GRC Platforms, Q4 '11

For Security & Risk Professionals

Report:It's Time To Include Social Technology In Your Crisis Communication Strategy

Among risk professionals who have successfully navigated their organization through a crisis, almost all will say that they had grossly underestimated the difficulty of communicating effectively...

• Downloads: 520

For Security & Risk Professionals

Report:Build A Governance, Risk, And Compliance Strategy Worthy Of Business Consideration

Strategic Plan: The Governance, Risk, And Compliance Playbook

Governance, risk management, and compliance (GRC) are far too often positions of emergency response. What's worse, as you constantly rush to respond to new mandates, enforce policies, or pull...

• Downloads: 548
• Rating:

For Security & Risk Professionals

Tool:IT GRC Adoption

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Plan And Execute Appropriate Risk Treatment

Developing And Managing Efforts To Control Unacceptable Levels Of Risk

From understanding comes action. Your risk management efforts up to this point will have yielded a list of concerns; a measure of how much these concerns could affect objectives; and a decision of...

• Downloads: 194
• Rating:

For Security & Risk Professionals

Client Inquiry:What Is The Pricing For Governance, Risk, And Compliance Platforms?

How are governance, risk, and compliance (GRC) platforms priced? What can I expect for implementation costs?

For Security & Risk Professionals

Blog:Think You Know About All The Big US Government Regulations Coming Up? All 191 Of Them?

There has been an interesting PR battle in Washington over the last few weeks about the number of massive regulations still on the administration's agenda. House Minority Leader John Boehner...

For Security & Risk Professionals

Blog:The Supreme Court Ruling Will Have Little Impact On SOX . . . Sorry

Despite some speculation that today's Supreme Court ruling might overturn large portions of the Sarbanes-Oxley Act (if not all of it), the final opinion will likely have no significant impact on...

For Security & Risk Professionals

Client Inquiry:What Are The Governance, Risk, And Compliance Characteristics Of Firms Of Varying Adoption Levels?

What would you see as the governance, risk, and compliance characteristics of each of the following groups: 1) laggards; 2) middle of the pack; and 3) early adopters? Are there any special...

For Security & Risk Professionals

Report:Optimize Your GRC Program For 2012 And Beyond

This report outlines Forrester's solution for security and risk (S&R) professionals looking to establish a formal risk and compliance management program. We designed this report to help S&R...

• Downloads: 605

For Security & Risk Professionals

Client Inquiry:The Role Of IT Security Management Versus IT Audit

We (IT security management) are currently discussing our tasks in relation to those of the auditing department. We would like to get advice about a typical or legally defined separation between the...

For Security & Risk Professionals

Tool:GRC Revenue Distribution

For Security & Risk Professionals

Blog:Don’t Forbid Employees From Using The Escalator, Give Them Reasons To Use The Stairs

Guest post from Researcher Nick Hayes. If you had to go up one level in a train station, would you take the stairs or use the escalator? Most people would choose the escalator. But what if the...

For Security & Risk Professionals

Tool:Forrester Wave™: IT GRC Platforms, Q4 '11

For Security & Risk Professionals

Blog:Nasdaq Hack Brings Security Issues Into The Boardroom

 Have you been having trouble getting your board of directors to care about information security? This weekend’s news that Nasdaq’s Directors Desk web application was...

For Security & Risk Professionals

Blog:Announcing Two New Forrester Waves: Enterprise GRC And IT GRC

After months of diligent product and vendor evaluations, today we published The Forrester Wave: Enterprise GRC Platforms, Q4 2011. In the next few days, we will also publish The Forrester Wave: IT...

For Security & Risk Professionals

Report:Maximize Business Performance With A World-Class GRC Program

Executive Overview: The Governance, Risk, And Compliance Playbook

Unexpected events are at best distracting and at worst catastrophic for an organization as it strives to meet its objectives. Risk and compliance professionals must help their colleagues anticipate...

• Downloads: 202

For Security & Risk Professionals

Client Inquiry:How Long Does It Take A Company To Move Up In Forrester's Information Security Maturity Model?

How long does it take a company to move up a level of maturity in Forrester's Information Security Maturity Model?

For Security & Risk Professionals

Blog:IBM To Acquire Algorithmics... GRC And Financial Risk Management Get A Little Closer

Today IBM announced plans to acquire the Fitch Group’s Algorithmics, a heavy-hitter in financial risk management software and services market, for $387 million.  Here are my initial...

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Evaluate Risks To Plan An Effective Response

Determining Whether, When, And How To Treat Risks

The goal of a risk management program is to drive effective decisions and actions based on an understanding of how uncertainty may affect objectives. However, even mature programs that have...

• Downloads: 495

For Security & Risk Professionals

Client Inquiry:What Is The State Of Governance, Risk, And Compliance In The Indian Market?

What is the size of the governance, risk, and compliance (GRC) market, and what is the market growth rate in India? Who are the major GRC vendors in India, and what are the areas of opportunity?

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Measure And Understand Risks

Estimating Levels Of Risk Exposure To Help Guide Informed Decisions

Opposition to adopting formal risk management tends to use the process of risk measurement as its attack target — it's too subjective, it's too complicated, or it's too much investment just to...

• Downloads: 1001

For Security & Risk Professionals

Tool:GRC Vendor Focus Areas

For Security & Risk Professionals

Blog:Crisis Communication, Business Continuity, And Risk Management

I recently recorded a podcast with Stephanie Balaouras, discussing the potential for increased collaboration between crisis communication, business continuity, and risk management functions....

For Security & Risk Professionals

Blog:The Forrester Information Security Maturity Model

After an in-depth survey of IT security and risk professionals, as well as our ongoing work with leaders in this field, Forrester recognized the need for a detailed, practical way to measure the...