For Security & Risk Professionals

Selecting Data Protection Technologies

Answer Four Key Questions Before Spending Time And Treasure

by Andrew Jaquith, October 28, 2009

Forrester enterprise customers have increasing needs to protect their enterprise data. Not every data protection challenge requires technology to address it. But when effective protection cannot be guaranteed by process compliance alone, technology can . . .

For Application Development & Program Management Professionals

Your Enterprise Database Security Strategy 2010

Stronger Measures Have Become Essential To Defend Against Growing Attacks

by Noel Yuhanna, September 28, 2009

With increasingly sophisticated attacks and rising internal data theft, database security merits a stronger focus that goes beyond traditional authentication, authorization, and access control (AAA). A single intrusion that compromises private data such . . .

For Security & Risk Professionals

TechRadar™ For Security & Risk Professionals: Network Threat Mitigation, Q3 2009

by John Kindervag, July 22, 2009

The news is filled with reports of networks attacks and stolen data. Consumers routinely undergo the stress of fraudulent charges or compromised credit cards. Terms such as "botnet" have become part of our vocabulary. As a result, security and risk professionals . . .

For Application Development & Program Management Professionals

Why Data Masking Should Be Part Of Your Enterprise Data Security Practice  (1.5 MB PPT)

by Noel Yuhanna, July 9, 2009

This presentation discusses data security trends and drivers; current data security challenges; why data masking is critical; data masking approaches; selection criteria for data masking implementation; and recommendations.

For Vendor Strategy Professionals

TechRadar™ For Vendor Strategy Professionals: Database And Server Data Security, Q2 2009

How Vendor Strategists Should View A Critical But Complex Segment Of Security

by Jonathan Penn, Andrew Jaquith, June 9, 2009

The risks of theft, corruption, and abuse have made securing data stored on servers and in databases not only more important and relevant to businesses than ever — but also much harder. To help vendor strategy professionals properly time their investments . . .

For Security & Risk Professionals

TechRadar™ For SRM Professionals: Database And Server Data Security, Q2 2009

Database Monitoring Tools Thrive; Classification Tools Try To Survive

by Andrew Jaquith, June 9, 2009

The risks of theft, corruption, and abuse have made securing data stored on servers and in databases much harder. To help security and risk professionals plan their next decade of investments in server data security, Forrester investigated the current . . .

For Infrastructure & Operations Professionals

Q&A: PC Encryption

by Natalie Lambert, April 20, 2009

The slew of privacy regulations and publicly disclosed data breaches moves PC encryption to a must-have enterprise IT solution. Why? Because organizations are looking for ways to avoid being the next CNN headline and forking over hundreds of thousands . . .

For Security & Risk Professionals

Building The Proactive Case For Full Disk Encryption

Case Study: A Leading Hospitality And Gambling Firm Proactively Implements Full Disk Encryption

by Natalie Lambert, April 8, 2009

In today's economy of tighter budgets and increased scrutiny over requests for investment, security professionals are struggling to make the business case for full disk encryption (FDE). Unfortunately, despite highly publicized data leaks, the business . . .

For Infrastructure & Operations Professionals

Case Study: A Leading Hospitality And Gambling Firm Proactively Implements Full Disk Encryption

by Natalie Lambert, April 7, 2009

Full disk encryption (FDE) is necessary in today's IT organization, and security professionals know this. However, problems arise when IT tries to convey this necessity to the business. Even with highly publicized data leaks, many decision-makers still . . .

For Security & Risk Professionals

Inquiry Spotlight: Data Leak Prevention, Q1 2009

by Natalie Lambert, Andrew Jaquith, February 10, 2009

Data security in general and data leak prevention (DLP) in particular are growing concerns among security professionals. Forrester's data indicates that while firms are interested in DLP's future, they are taking a "wait and see" approach to adoption. . . .

For Security & Risk Professionals

Twelve Recommendations For Your 2009 Information Security Strategy

by Khalid Kark, January 20, 2009

Many security predictions paint a doomsday scenario where a crippling cyberattack will leave us all reeling from its effects or Supervisory Control and Data Acquisition (SCADA) systems vulnerabilities will be exploited to play havoc with our national . . .

For Vendor Strategy Professionals

What President-Elect Obama's Cybersecurity Agenda Means For Security Vendors

by Khalid Kark, January 8, 2009

President-elect Barack Obama has acknowledged that leaving America's information systems unprotected could lead to a "crippling blow" to our economy. He has promised to make cybersecurity his top priority, declare cyberinfrastructure a strategic asset, . . .

For Security & Risk Professionals

It's Time To Focus On Data Protection

Client Security Purchases Miss The Mark

by Simon Yates, July 31, 2008

Security directors have failed to adapt to the changing security threat landscape. While the prevalence of malicious code has declined, reports of data security breaches have significantly increased. Despite this shift, security directors continue to . . .

For Infrastructure & Operations Professionals

Client Security Purchases Miss The Mark

Enterprise Security Technology Adoption Does Not Protect Against Data Loss

by Natalie Lambert, April 4, 2008

Security operations managers seem to be stuck in the past — in a time when viruses and worms dominated the security threatscape. Think back over 2007 — even 2006 — can you think of any widespread piece of malicious code that truly disrupted business? . . .

For Security & Risk Professionals

You've Got Encrypted Email

Weighing Your Options For Secure Messaging

by Paul Stamp, April 27, 2007

Companies increasingly want to exchange sensitive data with clients and partners over email, and relying on end users and ad hoc tools to do this makes CISOs and auditors very uncomfortable. Consequently, many are looking to adopt centrally managed email . . .

For Security & Risk Professionals

Adopting An Enterprise Approach To Encryption

by Paul Stamp, March 6, 2007

Contractual obligations and fear of breach disclosure laws are leading more organizations to deploy encryption throughout their environments. However, encryption capabilities can be expensive and cumbersome; most deployments are of point encryption solutions, . . .

For Application Development & Program Management Professionals

Protecting Private Data With Data Masking

Technology Can Help Meet Certain Compliance And Outsourcing Requirements

by Noel Yuhanna, March 21, 2006

Although most enterprises secure production data when dealing with private data, only a few secure such data when it's used for application development and testing or when it's sent out to outsourcing or offshore vendors. Enterprises should ensure consistent . . .

Library-Based Tape Encryption Starts In 2006

by Galen Schreck, January 17, 2006

Reports of lost tapes and customer data seem to surface monthly. Marriott International now joins Bank of America, Citigroup, and DSW as one of the latest firms to lose confidential data. But the need to encrypt tape-based data is perplexing. On the one . . .

For B2B Market Research Professionals

Data Security And Encryption Technologies Trends, SMB Versus Enterprise, Q4 2007  (146 KB PPT)

by Jonathan Penn, January 3, 2006

This data chart surfaces 2007 data on data security and encryption technologies trends.

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: Ingrian Networks DataSecure

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

Ingrian Networks was the surprise in our evaluation of database encryption solutions. While Ingrian is strong in application encryption, it did well to finish where it did in the current offering category. Ingrian offers a unique appliance-based data . . .

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: Protegrity Secure.Data

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

Protegrity landed in our leader category, which was no surprise, given the fact that it has the most comprehensive set of encryption features and functionality in the industry, besides offering support for most DBMSes and platforms. Protegrity has strong . . .

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: Sybase Adaptive Server Enterprise

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

Sybase is new to the database encryption space, with its first encryption product rollout in June 2005. Sybase is strong in ease of use and tight integration with DBMS schema and authentication, but lacks custom APIs, pluggable-crypto, and centralized . . .

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: Oracle Database 10g Release 2

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

Oracle has the most comprehensive set of security features among all DBMS vendors. And with the recent Oracle 10g Release 2, it now offers native DBMS encryption. Although Oracle's encryption solution is strong in type of encryption algorithms supported, . . .

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: nCipher SecureDB

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

nCipher did well overall in our evaluation, capturing a spot in our leader category largely because of its good balance of features, functionality, and vision. nCipher is strong in its centralized administration, pluggable-crypto support, and the type . . .

For Application Development & Program Management Professionals

Database Encryption Solutions Scorecard Summary: NetLib Encryptionizer

Key Findings From "The Forrester Wave™: Database Encryption Solutions, Q3 2005"

by Noel Yuhanna, August 8, 2005

NetLib offers an innovative solution that can encrypt the entire database, including all objects that reside in the database. NetLib is strong in ease of use, performance, and programmability options, but lacks centralized key storage, pluggable crypto, . . .