For Security & Risk Professionals

Shift In Ownership: Protecting Data Outside Your Four Walls  (1.6 MB PPT)

by Robert Whiteley, October 28, 2009

In September 2009, Forrester hosted a two-day event designed to help security and risk professionals understand the top three shifts impacting their job heading. This document summarizes the key recommendations we made to help master the shift in ownership . . .

For Security & Risk Professionals

Selecting Data Protection Technologies

Answer Four Key Questions Before Spending Time And Treasure

by Andrew Jaquith, October 28, 2009

Forrester enterprise customers have increasing needs to protect their enterprise data. Not every data protection challenge requires technology to address it. But when effective protection cannot be guaranteed by process compliance alone, technology can . . .

For Security & Risk Professionals

Enterprise IT Security In Europe: 2008

Business Data Services Europe

by Bill Nagel, March 2, 2009

How are European enterprises adopting, using, and managing IT security technologies, including client security, data security, content filtering, and business continuity and disaster recovery? This document highlights an extensive data set collected from . . .

For Application Development & Program Management Professionals

Imperva Is A Leader In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Imperva is a Leader with a strong performing and scalable auditing solution that scored high in most areas that we evaluated. Imperva has strong support for audit and compliance reporting, end-to-end audit analysis, fraud detection, response auditing, . . .

For Application Development & Program Management Professionals

Guardium Is A Leader In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Guardium is a Leader across the board in our evaluation of enterprise database auditing and real-time protection, a result of the broad range of features and functionality built into the product and the company's strong product and corporate strategy . . .

For Application Development & Program Management Professionals

Tizor Systems Is A Leader In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Tizor Systems is a Leader in the enterprise database auditing and real-time protection market because it provides strong support for alerting, audit and compliance reporting, performance, policy administration, the discovery of private data, integration . . .

For Application Development & Program Management Professionals

The Forrester Wave™: Enterprise Database Auditing And Real-Time Protection, Q4 2007

Guardium And Imperva Lead; Tizor, Application Security, And Lumigent Follow Closely; Oracle Tops Native Auditing

by Noel Yuhanna, October 26, 2007

Forrester's evaluation of leading enterprise database auditing and real-time protection vendors across 116 criteria found Guardium and Imperva to have established leadership positions thanks to their enterprise database auditing capabilities, breadth . . .

For Application Development & Program Management Professionals

Microsoft Is A Contender In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Microsoft's SQL Server native auditing solution is basic, but it's free. It offers a good level of support for monitoring user and DBA activity, but lags in policy management, reporting, monitoring and alerting, and analytics. Although Microsoft has improved . . .

For Application Development & Program Management Professionals

Oracle Is A Strong Performer In Enterprise Database Auditing; Tops Native DBMS Auditing

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Oracle is a Strong Performer across the board in our evaluation, and tops the native DBMS auditing solutions. Oracle is the technology leader when it comes to databases, and Oracle gives database security and auditing the same level of commitment and . . .

For Application Development & Program Management Professionals

Application Security Is A Leader In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Application Security surprised us by taking a Leader's position in database auditing and real-time protection because it also offers other database security solutions like encryption, vulnerability assessment, and monitoring. The company has enhanced . . .

For Application Development & Program Management Professionals

RippleTech Is A Strong Performer In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

RippleTech's Informant solution is a Strong Performer in the enterprise database auditing market because it offers good features and functionality at an attractive price. It has strong support for compliance reporting, monitoring and notification, role . . .

For Application Development & Program Management Professionals

IBM DB2 Native Auditing Is A Contender In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

IBM DB2 native auditing provides basic-level auditing at no additional product cost. Although DB2 native auditing offers some level of support for auditing users and DBA activity as well as database objects, it provides no support for notification and . . .

For Application Development & Program Management Professionals

Sybase Is A Contender In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Sybase's native database auditing solution is basic, which is why Sybase itself recommends that customers with advanced auditing requirements use third-party vendor solutions. In fact, Sybase resells Lumigent's AuditDB product under the Sybase Data Auditing . . .

For Application Development & Program Management Professionals

Lumigent Technologies Is A Leader In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Lumigent's Leader position was no surprise given that it offers a comprehensive audit solution that meets a broad range of customers' requirements. Lumigent is one of the few vendors we evaluated that offers a flexible architecture capable of reading . . .

For Application Development & Program Management Professionals

IBM AME Is A Contender In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

IBM DB2 Audit Management Expert (AME) currently supports only the mainframe environment, with support for other platforms planned for the future. Overall, AME offers basic support for reporting, policies, and alerting, but lacks advanced features like . . .

For Application Development & Program Management Professionals

IBM Consul InSight Is A Strong Performer In Enterprise Database Auditing

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

IBM acquired the privately-held company Consul Risk Management in December 2006. With this acquisition, IBM got a database auditing tool called Consul InSight, recently rebranded Tivoli Compliance Insight Manager (TCIM). Although Consul InSight does not . . .

For Application Development & Program Management Professionals

Embarcadero Technologies Is A Strong Performer In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

What a difference 24 months make. Prior to October 2005, Embarcadero never had a database auditing solution, but the acquisition of Ambeo put it on the map. Although Embarcadero's DSAuditor does not top the features and functionality race, it offers a . . .

For Application Development & Program Management Professionals

Symantec Is A Strong Performer In Enterprise Database Auditing And Real-Time Protection

The Forrester Wave™ Vendor Summary, Q4 2007

by Noel Yuhanna, October 26, 2007

Although Symantec Database Security (SDS) is a late arrival to the database security game, it has done extremely well to gain a spot in the Strong Performer's category within a year after its general availability. SDS offers a good balance of features . . .

For Security & Risk Professionals

Enterprise Databases Need Greater Focus To Meet Regulatory Compliance Requirements

by Noel Yuhanna, January 24, 2007

Over the past few years, regulatory compliance requirements and increasing security breaches have put significant pressure on enterprises to take stronger data security measures. Today, basic database management system (DBMS)-level security includes authentication, . . .

For Application Development & Program Management Professionals

A Four-Step Program For Compliant Test Data Practices

by Noel Yuhanna, Carey Schwaber, December 12, 2006

As concerns around data privacy mount, IT organizations find themselves revisiting their policies around test data. Indeed, customer data and company confidential data straight from production are inappropriate for use in test environments and should . . .

For Sourcing & Vendor Management Professionals

Disk-Based Data Protection Forecast: 2006 To 2011

Enterprises Shift To Disk As The First Line Of Protection

by Stephanie Balaouras, November 17, 2006

Historically, data was backed up to tape. But with data growing at double-digit rates each year and backup windows shrinking dramatically or altogether, enterprises are increasingly incorporating disk-based data protection into their backup strategies. . . .

For Application Development & Program Management Professionals

Symantec Enters The Database Security Market

A Viable Solution With Good Potential, But Some Challenges Exist

by Noel Yuhanna, October 25, 2006

Recently, Symantec entered the growing database security market with the launch of Symantec Database Security, a database auditing and monitoring solution that protects enterprise databases. Although Symantec's database security product is an easy-to-use, . . .

Secure The Data, Not Just The Underlying Infrastructure

by Paul Stamp, May 11, 2006

New business pressures mean that organizations need to share data across ever-widening organizational and geographical areas. However, at the same time, they are increasingly accountable for ensuring that data is properly protected, even when it resides . . .

Aligning Data Protection Priorities With Risks

by Jonathan Penn, April 13, 2006

In December 2005, Forrester surveyed 83 technology decision-makers about their approaches to securing personal data. Eighty-six percent of companies consider network and system vulnerabilities a high priority in their data protection efforts, and security . . .

Security Liability And Outsourcing

What To Expect From A Third-Party Data Outsourcer

by Michael Rasmussen, Julie Giera, March 21, 2006

As more firms enter into outsourcing agreements, liability coverage — especially for data security and protection — becomes more critical. While outsourcers are unlikely to accept unlimited liability, customer organizations can insert limits of liability . . .