For Security & Risk Professionals

Case Study: Baker Tilly Virchow Krause Builds Trust With Strong Authentication

Customer Data Is Accessible Yet Safe Whether Users Are Connected Or Not

by Bill Nagel, November 16, 2009

Matt Jennings at Baker Tilly Virchow Krause needed to overhaul the accounting and advisory firm's security processes and technologies to ensure ongoing regulatory compliance and customer confidence. Replacing the company's use of a single password as . . .

For Security & Risk Professionals

The Forrester Wave™: Identity And Access Management, Q4 2009

Oracle, CA, And IBM Lead, With Novell And Sun Microsystems Close Behind

by Andras Cser, November 3, 2009

In Forrester's 79-criteria evaluation of identity and access management (IAM) vendors, we found that Oracle, CA, and IBM lead the pack because of a rich IAM portfolio (both organically developed and acquired), an understanding of a rapidly changing market, . . .

For Security & Risk Professionals

Shift In Architecture: Building A Flexible, Compliant Foundation  (1.9 MB PPT)

by Robert Whiteley, October 27, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in architecture . . .

For Security & Risk Professionals

Oracle Buys Sun Microsystems — And Its Identity Management Portfolio

What To Look For From Oracle, And How To Respond

by Andras Cser, October 13, 2009

Oracle's acquisition of Sun Microsystems' identity management (IAM) portfolio was largely unintended — the assets that lured Oracle to buy Sun were Java and its hardware business. Once the acquisition closes, Forrester expects that Oracle will migrate . . .

For Vendor Strategy Professionals

Market Momentum: IT Security Market, H1 2009

by Jonathan Penn, September 16, 2009

Forrester's market momentum overview assists vendor strategy professionals in tracking the evolution of the IT security market and in gathering intelligence about the major activities in that industry. In H1 2009, we tracked 178 different activities across . . .

For Enterprise Architecture Professionals

SOA Security 2009: Products And Specifications

Selecting Standards, Specifications, And Products For SOA Security

by Randy Heffner, August 20, 2009

As enterprise architects set their organization's strategy for service-oriented architecture (SOA) security, they will have to filter through a variety of standards, emerging specifications, and products that can contribute features and functions for . . .

For Security & Risk Professionals

Case Study: Ingres Takes Advantage Of Identity Management In The Cloud

by Andras Cser, August 14, 2009

Ingres, an open source database software and support services provider, knew that it needed to reform its online community by improving its ease of use, particularly in the area of identity management. After deciding to explore the use of a cloud-based . . .

For Security & Risk Professionals

Best Practices: Identity Management In The Cloud

by Andras Cser, August 14, 2009

Many companies are struggling to adopt cloud-based identity and access management (hosted IAM) because they typically end up overscoping this initiative or have a difficult time getting funding for it in the current economic climate. Organizations that . . .

For Security & Risk Professionals

Active Directory Q&A: Demand Rises

Directory Consolidation Saves On Administrative Costs, Eases Provisioning

by Andras Cser, August 11, 2009

For the past 10 years, Active Directory (AD) has remained the backbone of identity infrastructures. Organizations continue to struggle with consolidating AD domains across the enterprise and centralizing ownership for them. Business partners' information . . .

For Infrastructure & Operations Professionals

IT Compliance: From Painful To Pleasant

by Khalid Kark, July 31, 2009

With increasing workforce mobility and the extension of the business supply chain globally, organizations are struggling to keep up with increasing corporate and regulatory compliance requirements. Regulations such as the Health Insurance Portability . . .

For Security & Risk Professionals

Best Practices: Implementing Strong Authentication In Your Enterprise

Kill Two Birds With One Token

by Bill Nagel, July 23, 2009

The adoption of strong multifactor authentication (MFA) is on the rise. It's often the first port of call on the journey to a fuller identity and access management implementation; MFA directly addresses the password problem, which is a well-known and . . .

For Security & Risk Professionals

Case Study: For Avaya, Customers Are Not A Token Consideration

A Plug-And-Go Smart Token Combines With PKI For Security And Auditability

by Bill Nagel, July 23, 2009

Rick Robinson at Avaya had a vision for a multifunctional second-factor authentication credential that would satisfy customer compliance requirements without significant adverse effects on his engineering and technical support staff. By testing how well . . .

For Enterprise Architecture Professionals

EA: Incorporate Enterprise Role Management Into Your Architecture Strategy

by Henry Peyret, July 15, 2009

Adoption of enterprise role management tools is increasing dramatically as a result of compliance and cost pressures. Enterprise role management tools simplify the provisioning and deprovisioning of employee and contractor access to resources, enabling . . .

For Security & Risk Professionals

IT Security's Critical Role During Layoffs

How To Safeguard Company Data In Difficult Times

by Andrew Jaquith, July 2, 2009

The Gateway Recession of 2009 has brought the prospect of slowing sales and profits — and job losses. Although layoffs are never desirable, they are often necessary. Much of the responsibility for keeping company data safe during layoffs falls to security . . .

For Vendor Strategy Professionals

Market Momentum: IT Security Market, H2 2008

by Jonathan Penn, June 11, 2009

Forrester's market momentum overview assists vendor strategy professionals in tracking the evolution of the IT security market and in gathering intelligence about the major activities. In the second half of 2008, we tracked 169 different activities across . . .

For Security & Risk Professionals

Hosted Identity Is Real — Are You Ready For It?

by Andras Cser, April 17, 2009

Identity and access management (IAM) projects have long been plagued with their long implementation times, high services-to-license ratios, integration challenges, labor-intensive build-out and operations, and long wait times to produce compliance and . . .

For Security & Risk Professionals

Identity And Access Management Adoption In Europe: 2008

by Bill Nagel, April 16, 2009

Interest in and adoption of identity and access management (IAM) technologies has been growing steadily over the past few years, fueled both by the desire to streamline processes relating to employee, contractor, partner, and customer access to company . . .

For B2B Market Research Professionals

Healthcare Identity And Access Management  (398 KB PPT)

by Eric G. Brown, March 31, 2009

Earlier in the decade, HIPAA compliance was driving security and identity access management. The current drivers are now coming directly from the business goals to improve operations and enable clinical access.

For Security & Risk Professionals

Vendors Tailor Product Offerings To Security's Needs

Market Momentum: IT Security Product Market, H1 2008

by Robert Whiteley, March 4, 2009

To investigate the IT security software market, Forrester examined a set of 20 representative IT security vendors and tracked more than 200 different activities in the market. These activities included mergers and acquisitions (M&A), partnerships, . . .

For Security & Risk Professionals

Market Overview: Enterprise Role Management

Access Recertification And Role Management Converge, Integrate With Provisioning

by Andras Cser, February 6, 2009

Enterprise role management, role mining, and access recertification help enterprises with maintaining segregation of duties, keeping up with regulatory compliance requirements, and automating role-based provisioning to enterprise applications — even through . . .

For Vendor Strategy Professionals

Market Momentum: IT Security Product Market, H1 2008

by Jonathan Penn, February 2, 2009

The IT security software market is poised for growth and transformation. Despite the economic climate, security is taking a larger slice of the overall IT budget as businesses recognize that the damage to brand reputation and customer issues arising from . . .

For Security & Risk Professionals

IT Security Remains An Integral Part Of The Enterprise

The State Of Enterprise IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European enterprises shows hope for the current state of IT security. Thankfully, we found that the IT security organization continues to be a strong and important part of the business, as is demonstrated . . .

For Security & Risk Professionals

SMBs Struggle To Keep Pace With IT Security

The State Of SMB IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European SMBs provides some insight into the current state of IT security. We found that the IT security organizations for small and medium-size businesses (SMBs) are becoming more similar to those . . .

For Security & Risk Professionals

Identity And Access Management Mitigates Risks During Economic Uncertainty

Using Identity And Access Management To Protect Your Business

by Andras Cser, January 26, 2009

Any economic downturn brings new risks to your organization. As it becomes clear that your business is struggling, nervous employees who fear downsizing may be tempted to gain unauthorized access to sensitive information stored across applications. Using . . .

For Security & Risk Professionals

Top Data Security Predictions For 2009

Economic Turmoil Will Increase Need For Surveillance, Data Protection Tools

by Andrew Jaquith, Natalie Lambert, January 9, 2009

The economic turmoil in the United States will have resounding consequences for security and risk professionals in 2009. The prospect of laying off an additional 1.4 million workers means that CISOs will clamor for data protection tools to keep their . . .