For Application Development & Program Management Professionals

Your Enterprise Database Security Strategy 2010

Stronger Measures Have Become Essential To Defend Against Growing Attacks

by Noel Yuhanna, September 28, 2009

With increasingly sophisticated attacks and rising internal data theft, database security merits a stronger focus that goes beyond traditional authentication, authorization, and access control (AAA). A single intrusion that compromises private data such . . .

For Security & Risk Professionals

Privacy Policies And Drivers 2008  (201 KB PPT)

by Chris McClean, April 9, 2009

Privacy programs in North America and Europe typically include policies for protecting corporate intellectual property and sensitive data. Although government regulation is by far the biggest driver for privacy programs in public sector organizations, . . .

For Security & Risk Professionals

Enterprise IT Security In Europe: 2008

Business Data Services Europe

by Bill Nagel, March 2, 2009

How are European enterprises adopting, using, and managing IT security technologies, including client security, data security, content filtering, and business continuity and disaster recovery? This document highlights an extensive data set collected from . . .

For Security & Risk Professionals

IT Security Remains An Integral Part Of The Enterprise

The State Of Enterprise IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European enterprises shows hope for the current state of IT security. Thankfully, we found that the IT security organization continues to be a strong and important part of the business, as is demonstrated . . .

For Security & Risk Professionals

SMBs Struggle To Keep Pace With IT Security

The State Of SMB IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European SMBs provides some insight into the current state of IT security. We found that the IT security organizations for small and medium-size businesses (SMBs) are becoming more similar to those . . .

For Security & Risk Professionals

Inquiry Spotlight: Content Security, Q1 2009

by Chenxi Wang, Ph.D., January 29, 2009

Content security is an issue that is consistently on the minds of IT security professionals. As organizations increasingly move toward collaboration, Web 2.0, and open architectures, content security takes on a renewed importance. Between October 2007 . . .

For Customer Experience Professionals

Best And Worst Of UK Retailer Privacy Policies

Minor, Low-Cost Changes Can Boost Trust

by Ron Rogowski, January 23, 2009

Consumers worry about the privacy and security of their information when transacting online. But how well do leading companies perform at making their privacy and security policies (PSPs) known to their customers? To find out, Forrester reviewed the top . . .

For B2B Market Research Professionals

The State Of SMB IT Security: 2008 To 2009

Business Data Services North America And Europe

by Jonathan Penn, December 24, 2008

This document gives highlights of an extensive data set collected across North American and European small and medium-size businesses (SMBs) via our Enterprise And SMB IT Security Survey, North America And Europe, Q3 2008. Hot topics include data security, . . .

For B2B Market Research Professionals

The State Of Enterprise IT Security: 2008 To 2009

Business Data Services North America And Europe

by Jonathan Penn, December 24, 2008

This document gives highlights of an extensive data set collected across North American and European enterprises via our Enterprise And SMB IT Security Survey, North America And Europe, Q3 2008. Hot topics include data security, application security, . . .

For Security & Risk Professionals

Threat Alert: Wireless Is The New Internet

by John Kindervag, August 12, 2008

Until the recent indictment of 11 people for hacking into retailers' wireless networks and stealing more than 40 million credit and debit card accounts, the focus of corporate network teams has been to provide wireless connectivity and availability for . . .

For Security & Risk Professionals

Best Practices: Managing Global Privacy Programs

Embed Privacy, Standardize Policies, And Upgrade Processes

by Jennifer Albornoz Mulligan, September 26, 2007

Global organizations are struggling to uniformly and cohesively protect private data as well as comply with international regulations on data privacy and data transfer. Forrester interviewed chief privacy officers (CPOs) of global organizations to understand . . .

For Security & Risk Professionals

What's Top Of Mind For CISOs In 2007

by Khalid Kark, April 17, 2007

Most CISOs today are optimistic about their security controls and feel confident that they are equipped to adequately handle the majority of their organizations' security issues. They also find that executive management is more aware of security threats, . . .

For Security & Risk Professionals

Defining A High-Level Security Framework

Putting Basic Security Principles To Work

by Khalid Kark, Paul Stamp, January 18, 2007

A comprehensive security framework boils down to three familiar basic components: people, technology, and process. When correctly assembled, the people, technology, and process elements of your information security program work together to secure the . . .

Build Your Privacy Program: Policies, Procedures, And Practices

by Michael Rasmussen, October 19, 2006

The third step in implementing a privacy program is to specify a governance structure of privacy policies, procedures, and practices. The specifics? Detail what personal information will be collected and how you will use it in your privacy policy. Communicate . . .

For Security & Risk Professionals

Security Advocacy  (224 KB PPT)

by Laura Koetzle, July 6, 2006

You can transform security from pure obligation into a marketable asset — really. Security advocacy is more than just security awareness. Communication isn't enough; you have to sell the policy to the user to get him to change his behavior. Today, security . . .

For Security & Risk Professionals

Security Awareness: The Missing Link  (780 KB PPT)

by Khalid Kark, July 6, 2006

Today, organizations spend millions of dollars on technical solutions and process improvements but still feel vulnerable. Security is a function of people, process, and technology working in concert, but often the people aspect of security is ignored. . . .

How To Manage Your Information Security Policy Framework

by Khalid Kark, January 19, 2006

Information security policies created a few years or even months ago can be outdated. The majority of organizations today have a set of comprehensive information security policies, but very few are able to confidently say that they enforce these policies . . .

Strategies For Secure, Successful Outsourcing

Lessons From Switzerland

by Laura Koetzle, January 13, 2006

For the past two years, Swiss enterprises have taken a more cautious approach to outsourcing than European and North American firms. At a recent event, 25 Swiss security leaders shared their strategies for achieving outsourcing goals without compromising . . .

Web Users Want Privacy And Security Policies

Present Policies In Context When Users Provide Personal Information

by Moira Dorsey, December 21, 2005

Data from Forrester's Consumer Technographics® Q3 2005 North American Survey reveals that Internet users in roughly half of North American households look for privacy and security policy information on Web sites. And nearly all Web shoppers say a . . .

Make Security Policies Clear And Easy To Find

by Moira Dorsey, Harley Manning, Michelle Amato, September 17, 2003

This is the fourth brief in the "Best Practices For Building Site Trust" series. Trust focuses on elements that give users confidence in a site. To be useful, policies must be available when users need them. They should describe, in language customers . . .

Set Policies for Mobile Devices by Security Zones

February 21, 2003

Mobile devices are productivity tools and as such should not be unilaterally barred from access to the enterprise as a whole, but rather disallowed or limited in security zones as required based on the potential risk to the organization.

Adopted But Not Implemented Security Policies May Be Your Liability

by Michael Rasmussen, April 9, 2002

Only through the clear definition, education and implementation of security policies can organizations expect to build an adequate information protection program that helps them fight liability as opposed to embracing it.

Lawrence Livermore Labs Sets Draconian Wireless Security Policy: Should Giga Clients Follow This Path?

by Stan Schatt, February 5, 2002

While most Giga clients do not require the same level of security as LLNL, the banning of ad hoc wireless LANs even as pilots without the explicit support of centralized IT management is a good practice.

Consultants Are to Be Held Accountable to Security Policies

by Michael Rasmussen, December 28, 2001

It is imperative that consultants and contractors read and sign an organization s security policy. If the organization does nothing to communicate expectations and policies, then it cannot be enforced to this group.

Establishing Collaborative Computing Security Policies Necessary

by Michael Rasmussen, December 28, 2001

Collaborative technologies are beginning to proliferate throughout many organizations. An organization should establish a collaborative computing security policy to protect itself and communicate what is expected of individuals.