For Security & Risk Professionals

Shift In Expectations: Modernizing Your SRM Program  (2 MB PPT)

by Robert Whiteley, October 28, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in expectations . . .

For Infrastructure & Operations Professionals

The Help Desk Is On The Critical Path For Pandemic/Disaster Recovery

Oft-Overlooked Group Is Key To Business Continuity

by Evelyn Hubbert, Chip Gliedman, October 22, 2009

The designation of the H1N1 flu virus as a pandemic by the World Health Organization (WHO) should, once again, prompt organizations to revisit their business continuity planning processes. However, recent conversations with Forrester clients reveal a . . .

For Security & Risk Professionals

Preparing For A Pandemic: What You Need To Know About H1N1

by Stephanie Balaouras, Chris McClean, October 15, 2009

The likelihood and impact of a pandemic are impossible to predict with much accuracy. Regardless, history tells us that there is a potential for widespread and costly disruption — especially for those who aren't adequately prepared. In May 2009, global . . .

For Security & Risk Professionals

Market Overview: Environmental Management Information Systems

by Chris McClean, Onica King, July 31, 2009

Environmental impact is a growing concern when considering corporate performance and corporate risk. While consumers and investors increasingly expect organizations to demonstrate environmental responsibility, there are also very strict regulatory requirements . . .

For Infrastructure & Operations Professionals

Business Continuity Management People And Communications Trends  (502 KB PPT)

by Stephanie Balaouras, June 21, 2009

An overview of the people and communication trends revealed by the Forrester/Disaster Recovery Journal Business Continuity Preparedness Survey, Q4 2008.

For Security & Risk Professionals

Topic Overview: Governance, Risk, And Compliance

by Chris McClean, April 29, 2009

Successful businesses universally strive to achieve better corporate governance, more effective measurement and management of risk, and greater assurance that compliance requirements are met. Whether or not these efforts bear the governance, risk, and . . .

For Security & Risk Professionals

Businesses Take BC Planning More Seriously

But Take The BC Readiness Of Strategic Partners For Granted

by Stephanie Balaouras, February 26, 2009

Business continuity (BC) planning consists of three critical phases: business impact analysis (BIA), risk assessment (RA), and plan documentation. In our Forrester/Disaster Recovery Journal Business Continuity Preparedness Survey, Q4 2008, we found that . . .

For Security & Risk Professionals

The GRC Technology Puzzle: Getting All The Pieces To Fit

Breaking Down The Complex GRC Technology Landscape

by Chris McClean, February 3, 2009

At a time when the global business community struggles to enhance internal controls and maintain long-term viability, improvements in governance, risk, and compliance (GRC) programs can be well worth the investment. Technology plays an integral role in . . .

For Security & Risk Professionals

IT Security Remains An Integral Part Of The Enterprise

The State Of Enterprise IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European enterprises shows hope for the current state of IT security. Thankfully, we found that the IT security organization continues to be a strong and important part of the business, as is demonstrated . . .

For Security & Risk Professionals

SMBs Struggle To Keep Pace With IT Security

The State Of SMB IT Security: 2008 To 2009

by Simon Yates, January 29, 2009

Forrester's recent security survey of North American and European SMBs provides some insight into the current state of IT security. We found that the IT security organizations for small and medium-size businesses (SMBs) are becoming more similar to those . . .

For Security & Risk Professionals

Identity And Access Management Mitigates Risks During Economic Uncertainty

Using Identity And Access Management To Protect Your Business

by Andras Cser, January 26, 2009

Any economic downturn brings new risks to your organization. As it becomes clear that your business is struggling, nervous employees who fear downsizing may be tempted to gain unauthorized access to sensitive information stored across applications. Using . . .

For Security & Risk Professionals

Twelve Recommendations For Your 2009 Information Security Strategy

by Khalid Kark, January 20, 2009

Many security predictions paint a doomsday scenario where a crippling cyberattack will leave us all reeling from its effects or Supervisory Control and Data Acquisition (SCADA) systems vulnerabilities will be exploited to play havoc with our national . . .

For B2B Market Research Professionals

The State Of SMB IT Security: 2008 To 2009

Business Data Services North America And Europe

by Jonathan Penn, December 24, 2008

This document gives highlights of an extensive data set collected across North American and European small and medium-size businesses (SMBs) via our Enterprise And SMB IT Security Survey, North America And Europe, Q3 2008. Hot topics include data security, . . .

For B2B Market Research Professionals

The State Of Enterprise IT Security: 2008 To 2009

Business Data Services North America And Europe

by Jonathan Penn, December 24, 2008

This document gives highlights of an extensive data set collected across North American and European enterprises via our Enterprise And SMB IT Security Survey, North America And Europe, Q3 2008. Hot topics include data security, application security, . . .

For Security & Risk Professionals

Trends 2009: Governance, Risk, And Compliance Hit The Big Time

The Economic Crisis Of 2008 Makes GRC A Business Priority

by Chris McClean, December 23, 2008

Another bubble burst. The chain reaction stemming from the credit crisis caused an implosion of the global economy. Political, corporate, and economic leaders have argued ferociously about how we can reverse the damage, questioning business ethics, the . . .

For Business Process & Applications Professionals

Controls To Mitigate Spreadsheet Risk

by Scott Tiazkun, December 22, 2008

Financial business processes run on spreadsheets. The widespread usage of spreadsheets should cause concern for all enterprises. The ability to discover, assess, and control spreadsheets, however, greatly mitigates their risk and drives enterprises to . . .

For Sourcing & Vendor Management Professionals

Reducing Risk In Global Telecom Services Sourcing

Ask The Right Questions And Follow A Disciplined Process

by Brownlee Thomas, Ph.D., December 12, 2008

Buyers need to address four categories of risk when sourcing global telecommunication services: (1) physical risks to the network and local business operations; (2) geographic risks including local regulations and business practices; (3) commercial risks . . .

For Security & Risk Professionals

Inquiry Spotlight: Governance, Risk, And Compliance, Q4 2008

by Chris McClean, November 3, 2008

Governance, risk, and compliance (GRC) continues to be a hot topic of interest for security and risk professionals. Between July 2007 and July 2008, Forrester's security and risk management team received 1,798 inquiries on a variety of topics — 198 of . . .

For Security & Risk Professionals

Case Study: Vodafone UK Uses Business Continuity As A Competitive Advantage

by Stephanie Balaouras, October 8, 2008

In the highly competitive and regulated industry of mobile communications, business continuity preparedness is critical to ensuring the continuous availability of the wireless services and to bringing new services to market as quickly as possible. Vodafone . . .

For Sourcing & Vendor Management Professionals

Sourcing Professionals Must Analyze And Manage Risk Across The Global Supply Chain

Forrester's Best Practices For Risk Mitigation

by Christine Ferrusi Ross, August 27, 2008

The issue of vendor risk has become an increasingly critical topic among sourcing professionals. With that in mind, we wanted to highlight this great report on mitigating supply chain risk — much of which is within sourcing's purview. While it was written . . .

For Business Process & Applications Professionals

Tax Risk Management: An Inconvenient Truth

Making The Connection Between Tax Processes And Risk Management

by Scott Tiazkun, July 16, 2008

Most enterprises face a growing tax burden and audit risk, yet many are not stepping up efforts to automate tax processes and reduce tax risk factors. Finance and risk professionals must pursue risk management and enterprise tax automation concurrently . . .

For Security & Risk Professionals

Security And Privacy Essentials For IT Outsourcing Deals

Managing Risk While Ceding Operational Control

by Jennifer Albornoz Mulligan, Khalid Kark, May 16, 2008

Global spending on IT services and outsourcing was estimated at $488 billion in 2007 and is predicted to rise an additional 9% in 2008. At $120 billion, IT outsourcing constitutes roughly 25% of this spending. Organizations engaged in outsourcing will . . .

For Security & Risk Professionals

Adopting A Simple, Business-Oriented Information Risk Assessment Methodology  (524 KB PPT)

by Paul Stamp, Marc Othersen, April 24, 2008

Security and risk management professionals need to create a structured way of involving the business in the information risk management process. This presentation provides some basic tools for the business to provide input into the risk assessment process . . .

For Infrastructure & Operations Professionals

Checklist For Data Center Site Selection

by Stephanie Balaouras, Galen Schreck, April 17, 2008

We receive numerous client inquiries from infrastructure and operations professionals who are considering building new data centers or leasing space from collocation providers. There are many architectural considerations when designing a new data center, . . .

For Security & Risk Professionals

Case Study: TLC Vision Takes A Risk-Based Process Approach To Data Leak Prevention

by Thomas Raschke, March 4, 2008

TLC Vision, a provider of eye-care tools and technologies in North America, faced a dilemma in 2005: how to protect the confidential information of more than 1 million patients and physicians. An erroneous email and regulatory pressures first drove the . . .