For Security & Risk Professionals

PCI X-Ray: File Integrity Monitoring

by John Kindervag, October 26, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For eBusiness & Channel Strategy Professionals

European Online Banking Holdouts Want Security Guarantees

Net Users Still Need Security Guarantees And Incentives To Bank Online

by Alexander Hesse, Lauriane Camus, August 21, 2009

More than half of Western Europeans who use the Internet regularly — about 92 million — bank online. Thirty-two percent of European adults could bank online but don't do so — or have stopped doing so. Typically, these online banking holdouts mention security . . .

For eBusiness & Channel Strategy Professionals

The State Of Fraud In eBusiness

eBusiness Panelists Report That 0.6% Of Orders And Transactions Are Fraudulent

by Carrie Johnson, Elizabeth Davis, August 17, 2009

Forrester recently surveyed its eBusiness And Channel Strategy Professional Research Panel to gauge the current landscape of fraud in the online channel. Forty percent of our panelists have seen an increase in fraud incidents in the past 12 months and . . .

For Infrastructure & Operations Professionals

IT Compliance: From Painful To Pleasant

by Khalid Kark, July 31, 2009

With increasing workforce mobility and the extension of the business supply chain globally, organizations are struggling to keep up with increasing corporate and regulatory compliance requirements. Regulations such as the Health Insurance Portability . . .

For Security & Risk Professionals

PCI X-Ray: Network Segmentation

by John Kindervag, July 17, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Technology Sales Enablement Professionals

Hot Banking Tech Companies To Watch In 2009: Q2 Update

by Ellen Carney, June 17, 2009

The banking industry continues to suffer from the global recession and backlash from last fall's financial crisis. While it's tempting to believe that bank-related technology investment is dead, financial services firms are actively looking for specialized . . .

For Security & Risk Professionals

Market Overview: Security Information Management (SIM)

PCI Gives The SIM Market Its Second Wind, But The Field Will Thin Out In The Years Ahead

by John Kindervag, Andrew Jaquith, April 30, 2009

The security information management (SIM) market has undergone a dramatic transformation in the past five years. After growing to a respectable size in a short period in the early 2000s, the SIM market stagnated until the Payment Card Industry Data Security . . .

For Security & Risk Professionals

PCI X-Ray: IDS And IPS

by John Kindervag, April 8, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Vendor Strategy Professionals

VC Trends In IT Security

An Analysis Of 2008 Investment Activity

by Jonathan Penn, March 10, 2009

VCs generally started the year with optimism. As the economy worsened, however, VCs reacted first by curtailing activities and then by adapting their strategies to the new reality. Fortunately, the recession is affecting IT security less than other IT . . .

For Security & Risk Professionals

Inquiry Spotlight: PCI, Q1 2009

by John Kindervag, February 26, 2009

With the increase in identity theft and fraud, credit card companies are making a concentrated effort to improve compliance rates. Merchants now face fines or loss of privileges to use the card brand if an audit shows noncompliance. Forrester's IT security . . .

For Infrastructure & Operations Professionals

Look To Network Access Control (NAC) To Streamline IT Compliance

Maximize Your NAC Deployment To Aid In GLBA, HIPAA, PCI DSS, And SOX Efforts

by Robert Whiteley, February 24, 2009

Did your organization just fail an audit test, and were you, the IT manager, blamed for not keeping your infrastructure or IT operations up to snuff? The Gramm-Leach-Bliley Act (GLBA), the Health Insurance Portability and Accountability Act (HIPAA), the . . .

For Security & Risk Professionals

PCI X-Ray: Firewalls

by John Kindervag, February 13, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Security & Risk Professionals

PCI X-Ray: What's New In 1.2?

by John Kindervag, January 30, 2009

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Technology Product Management & Marketing Professionals

Hot Banking Tech Companies To Watch In 2009

Profiles Of Technology Companies That Address Banking's Changed World

by Ellen Carney, December 22, 2008

The banking industry is going through its most challenging period since the Great Depression. Bank capital structures are stressed because of write-downs and write-offs, formerly high-flying investment banks face the more regulated world of retail banking, . . .

For Security & Risk Professionals

PCI X-Ray: Log Management

by John Kindervag, October 20, 2008

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Security & Risk Professionals

Inquiry Spotlight: Application Security, Q4 2008

by Chenxi Wang, Ph.D., October 17, 2008

The issue of application security is increasingly important for security professionals in today's ever-evolving application vulnerability landscape. But Forrester's data shows a clear disconnect between perceived importance of application security and . . .

For Security & Risk Professionals

PCI X-Ray: Wireless Security

by John Kindervag, October 1, 2008

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI X-Ray series to provide actionable information to help Forrester . . .

For Security & Risk Professionals

Confessions Of A QSA: The Inside Story Of PCI Compliance

by John Kindervag, September 11, 2008

PCI (Payment Card Industry) compliance — a requirement for accepting credit card transactions — can be difficult. About 65% of global enterprises are still working on their PCI compliance initiatives. But PCI compliance is an ongoing effort, not a bounded . . .

For Security & Risk Professionals

Threat Alert: Wireless Is The New Internet

by John Kindervag, August 12, 2008

Until the recent indictment of 11 people for hacking into retailers' wireless networks and stealing more than 40 million credit and debit card accounts, the focus of corporate network teams has been to provide wireless connectivity and availability for . . .

For Security & Risk Professionals

Countering Online Fraud Globally

Strategies For Breaking Free Of The Cat And Mouse Game

by Geoffrey Turner, February 20, 2008

Fraud is an increasing threat to online commerce and thus requires increasing countermeasures. Current and emerging counter-fraud strategies and technologies focus on authentication, monitoring, risk-based controls, and fraud intelligence. Capabilities . . .

For eBusiness & Channel Strategy Professionals

Merchant Data Security

Increasing Compliance and Fostering Trust Among Consumers

by Edward Kountz, January 7, 2008

Concerns about merchant data security standards prompted development of the Payment Card Industry Data Security Standard (PCI DSS). However, a significant gap in compliance between small and midsize businesses (SMBs) and relatively larger firms creates . . .

For Security & Risk Professionals

Mobile Authentication Marries Security With Convenience

A Token-Killing Form Factor For Secure Consumer Online Banking

by Bill Nagel, November 16, 2007

Financial institutions seeking to expand their online and mobile banking offerings to their entire customer base face the age-old challenge of balancing security with usability. Many banks feel trapped: Fail to implement strong authentication and incur . . .

For eBusiness & Channel Strategy Professionals

Information Security

Assessing the Burden of Consumers' Data Security Concerns

by Edward Kountz, October 22, 2007

The impact of online financial fraud has received significant attention, but a review of the data indicates fraud is a multichannel concern. With consumers' education largely in place, relatively stronger attention must be paid to both expanding merchants' . . .

For eBusiness & Channel Strategy Professionals

Online Banking Holdouts Still Want Security Guarantees

European Net Users Want Security Guarantees And Incentives To Bank Online

by Benjamin Ensor, June 21, 2007

Some 84 million European Net users who could bank online don't do so. Only one-third of these online banking holdouts say that nothing would persuade them to adopt online banking. The remainder say that a mix of security guarantees and financial incentives . . .

Are Your Online Customers For Real?

Online Credit Card Fraud Detection Services

by Laura Koetzle, October 3, 2006

The risk of fraud in online transactions increases because you can see neither your customer nor his credit card. Products using either filters or neural networks can help you detect fraudulent transactions. For small to midsize businesses, filters are . . .