For Security & Risk Professionals

Shift In Ownership: Protecting Data Outside Your Four Walls  (1.6 MB PPT)

by Robert Whiteley, October 28, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in ownership . . .

For Security & Risk Professionals

Shift In Expectations: Modernizing Your SRM Program  (2 MB PPT)

by Robert Whiteley, October 28, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in expectations . . .

For Security & Risk Professionals

Shift In Architecture: Building A Flexible, Compliant Foundation  (1.9 MB PPT)

by Robert Whiteley, October 27, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in architecture . . .

For Security & Risk Professionals

CISO Handbook: How To Plan For A Security Breach

by Khalid Kark, October 22, 2009

Many chief information security officers (CISOs) are forced to respond to security breaches with little knowledge or planning. Not only is it important to have the tools for responding to security breaches, but it's essential to build a detailed response . . .

For Application Development & Program Management Professionals

Your Enterprise Database Security Strategy 2010

Stronger Measures Have Become Essential To Defend Against Growing Attacks

by Noel Yuhanna, September 28, 2009

With increasingly sophisticated attacks and rising internal data theft, database security merits a stronger focus that goes beyond traditional authentication, authorization, and access control (AAA). A single intrusion that compromises private data such . . .

For Vendor Strategy Professionals

Market Momentum: IT Security Market, H1 2009

by Jonathan Penn, September 16, 2009

Forrester's market momentum overview assists vendor strategy professionals in tracking the evolution of the IT security market and in gathering intelligence about the major activities in that industry. In H1 2009, we tracked 178 different activities across . . .

For Security & Risk Professionals

Articulating The Business Value Of Information Security

by Khalid Kark, July 24, 2009

Many CISOs struggle to articulate the value of their security programs and justify the security budget to business and executive management. This problem was acutely evident in the current economic downturn: Many security managers saw their budgets slashed, . . .

For Security & Risk Professionals

PCI X-Ray: Network Segmentation

by John Kindervag, July 17, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Infrastructure & Operations Professionals

European Telecom Operator Managed Services Deals Survey: H2 2008

by Phil Sayer, July 10, 2009

Forrester's sixth survey of managed services deals signed in Europe by telecom service providers reviews 476 contract wins recorded in the second half of 2008. The number of deals increased from the 407 that we tracked in H1 2008; however, the total contract . . .

For Security & Risk Professionals

TechRadar™ For SRM Professionals: Application Security, Q3 2009

Application Security Comes Of Age Despite A Slowdown In Security Spend

by Chenxi Wang, Ph.D., July 8, 2009

As application-level exploits continue to generate headline news, security professionals increasingly look to application security measures to protect their organizations. To succeed, security professionals must understand the maturity of the various . . .

For Security & Risk Professionals

Application Security Technology Adoption Trends in 2009   (434 KB PPT)

by Chenxi Wang, Ph.D., June 25, 2009

Application security issues continue to garner headline attention. However, the current economic downturn has put some of the new application security initiatives to test; we are seeing a slight slowdown in new technology adoption this year. These data . . .

For Security & Risk Professionals

Case Study: DTCC Implements A Process-Based Approach To Security Metrics

by Khalid Kark, April 29, 2009

Jim Routh at DTCC took a unique approach in developing his security metrics program. He identified all of the processes that the security team was responsible for and then defined a process owner for each of them. Some of these owners were part of the . . .

For Security & Risk Professionals

Case Study: Harland Clarke Turns To Corporate Objectives For Defining Security Metrics

by Khalid Kark, April 29, 2009

John Petrie at Harland Clarke was lucky to report directly to executive management, and he reported on a routine basis to the executive management team on information security issues. This gave him a unique perspective into the business planning and prioritization . . .

For Vendor Strategy Professionals

Market Overview: IT Security In 2009

by Jonathan Penn, April 22, 2009

The big news for the IT security market in 2009 is that it will fare relatively well. Cost and justification pressures are exerting themselves, but through increasing business-level visibility led by data-breach headlines, security spend continues to . . .

For Security & Risk Professionals

Real World Example: Eastman Kodak Security Metrics Dashboard  (1.4 MB XLS)

by Khalid Kark, April 22, 2009

Includes a real world example of a security metrics dashboard courtesy of Eastman Kodak Company.

For Security & Risk Professionals

Case Study: Eastman Kodak Company Takes A Tiered-Risk Approach To Security Metrics

by Khalid Kark, April 20, 2009

Eastman Kodak's matrixed organizational structure enables its business units to act quickly in response to changing business conditions, but it also creates a decentralized security function. Security information resides in different parts of the organization, . . .

For Security & Risk Professionals

Hosted Identity Is Real — Are You Ready For It?

by Andras Cser, April 17, 2009

Identity and access management (IAM) projects have long been plagued with their long implementation times, high services-to-license ratios, integration challenges, labor-intensive build-out and operations, and long wait times to produce compliance and . . .

For Technology Sales Enablement Professionals

Role Profile: The Chief Information Security Officer

Understanding And Marketing To Security And Risk Professionals

by Emily Van Metre, Eric G. Brown, April 15, 2009

The chief information security officer (CISO) drives technology and services decisions that ensure compliance and protect the company's IT assets and brand. Knowing these stakeholders will help your sales force start the right conversation with a prospect, . . .

For Sourcing & Vendor Management Professionals

IT Infrastructure Market And Services Data  (222 KB PPT)

by Paul Roehrig, Ph.D., April 13, 2009

IT Infrastructure Market And Services Data.

For Security & Risk Professionals

Privacy Policies And Drivers 2008  (201 KB PPT)

by Chris McClean, April 9, 2009

Privacy programs in North America and Europe typically include policies for protecting corporate intellectual property and sensitive data. Although government regulation is by far the biggest driver for privacy programs in public sector organizations, . . .

For Security & Risk Professionals

PCI X-Ray: IDS And IPS

by John Kindervag, April 8, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Security & Risk Professionals

Incident Response Policies And Processes 2008  (400 KB PPT)

by Robert Whiteley, April 7, 2009

The current economic environment requires that today’s security and risk executives ensure their incident response policies are in place and accurate. The business cannot tolerate significant downtime or unnecessary cost associated with an outdated incident . . .

For Security & Risk Professionals

The Forrester Wave™: Information Security And IT Risk Consulting, Q1 2009

Deloitte And PricewaterhouseCoopers Lead, With Accenture Close Behind

by Khalid Kark, March 18, 2009

In Forrester's 72-criteria evaluation of information security and IT risk consulting service providers, we found that Deloitte and PricewaterhouseCoopers (PwC) lead the pack because of their superior understanding of business requirements coupled with . . .

For Vendor Strategy Professionals

VC Trends In IT Security

An Analysis Of 2008 Investment Activity

by Jonathan Penn, March 10, 2009

VCs generally started the year with optimism. As the economy worsened, however, VCs reacted first by curtailing activities and then by adapting their strategies to the new reality. Fortunately, the recession is affecting IT security less than other IT . . .

For Security & Risk Professionals

Enterprise IT Security In Europe: 2008

Business Data Services Europe

by Bill Nagel, March 2, 2009

How are European enterprises adopting, using, and managing IT security technologies, including client security, data security, content filtering, and business continuity and disaster recovery? This document highlights an extensive data set collected from . . .