For Security & Risk Professionals

Cloud Computing Checklist: How Secure Is Your Cloud?  (43 KB XLS)

by Chenxi Wang, Ph.D., October 30, 2009

If your organization is interested in cloud computing, there are some key security and privacy, compliance, and legal issues that you need to broach with the service provider. To help with this process, we've put together a checklist of key issues and . . .

For Security & Risk Professionals

Selecting Data Protection Technologies

Answer Four Key Questions Before Spending Time And Treasure

by Andrew Jaquith, October 28, 2009

Forrester enterprise customers have increasing needs to protect their enterprise data. Not every data protection challenge requires technology to address it. But when effective protection cannot be guaranteed by process compliance alone, technology can . . .

For Security & Risk Professionals

CISO Handbook: How To Plan For A Security Breach

by Khalid Kark, October 22, 2009

Many chief information security officers (CISOs) are forced to respond to security breaches with little knowledge or planning. Not only is it important to have the tools for responding to security breaches, but it's essential to build a detailed response . . .

For Enterprise Architecture Professionals

Taking The Fog Out Of Cloud Computing: Planning For Security And Risk Management

by Randy Heffner, September 22, 2009

Architectural planning for an organization's use of cloud computing products and services should focus first on the biggest differences between cloud computing and traditional computing options, and security and risk management (SRM) concerns are among . . .

For Security & Risk Professionals

IT Security's Critical Role During Layoffs

How To Safeguard Company Data In Difficult Times

by Andrew Jaquith, July 2, 2009

The Gateway Recession of 2009 has brought the prospect of slowing sales and profits — and job losses. Although layoffs are never desirable, they are often necessary. Much of the responsibility for keeping company data safe during layoffs falls to security . . .

For Security & Risk Professionals

Heavy Consolidation Among The Content Security Vendors Signals Market Maturity

Users Now Have Broader Functionality Suites To Choose From

by Chenxi Wang, Ph.D., June 17, 2009

In late 2008, the content security market saw a number of mergers and acquisitions. McAfee acquired Secure Computing, Symantec acquired MessageLabs, Marshal merged with 8e6, and Sophos acquired encryption vendor Utimaco. These activities, along with Webroot's . . .

For Security & Risk Professionals

How Secure Is Your Cloud?

A Close Look At Cloud Computing Security Issues

by Chenxi Wang, Ph.D., May 8, 2009

Amid a downturn economy, organizations increasingly look to cloud computing to improve operational efficiency, reduce headcounts, and help with the bottom line. But security and privacy concerns present a strong barrier-to-entry. In an age when the consequences . . .

For Security & Risk Professionals

Topic Overview: Governance, Risk, And Compliance

by Chris McClean, April 29, 2009

Successful businesses universally strive to achieve better corporate governance, more effective measurement and management of risk, and greater assurance that compliance requirements are met. Whether or not these efforts bear the governance, risk, and . . .

For Security & Risk Professionals

Data Security Challenges And Technology Adoption In 2008  (214 KB PPT)

by Andrew Jaquith, April 7, 2009

Data security is the number one priority for today's CISO. The current economic downturn - and the need to protect data from abuse, theft, and corruption - has only heightened the emphasis. But protecting data is a broad challenge and requires that organizations . . .

For Vendor Strategy Professionals

VC Trends In IT Security

An Analysis Of 2008 Investment Activity

by Jonathan Penn, March 10, 2009

VCs generally started the year with optimism. As the economy worsened, however, VCs reacted first by curtailing activities and then by adapting their strategies to the new reality. Fortunately, the recession is affecting IT security less than other IT . . .

For Security & Risk Professionals

Inquiry Spotlight: Data Leak Prevention, Q1 2009

by Natalie Lambert, Andrew Jaquith, February 10, 2009

Data security in general and data leak prevention (DLP) in particular are growing concerns among security professionals. Forrester's data indicates that while firms are interested in DLP's future, they are taking a "wait and see" approach to adoption. . . .

For Security & Risk Professionals

Inquiry Spotlight: Content Security, Q1 2009

by Chenxi Wang, Ph.D., January 29, 2009

Content security is an issue that is consistently on the minds of IT security professionals. As organizations increasingly move toward collaboration, Web 2.0, and open architectures, content security takes on a renewed importance. Between October 2007 . . .

For Security & Risk Professionals

Top Data Security Predictions For 2009

Economic Turmoil Will Increase Need For Surveillance, Data Protection Tools

by Andrew Jaquith, Natalie Lambert, January 9, 2009

The economic turmoil in the United States will have resounding consequences for security and risk professionals in 2009. The prospect of laying off an additional 1.4 million workers means that CISOs will clamor for data protection tools to keep their . . .

For Sourcing & Vendor Management Professionals

Handling IP Protection With Chinese Outsourcing Vendors

While The Concerns Are Real, Judicious Firms Can Minimize Outsourcing Risk

by Chenxi Wang, Ph.D., October 24, 2008

The world's top 10 offshore providers in IT, business process outsourcing (BPO), and product engineering are increasingly going to China, behind India and the Philippines, for offshoring tasks. However, the issue of intellectual property (IP) protection . . .

For Security & Risk Professionals

It's Time To Focus On Data Protection

Client Security Purchases Miss The Mark

by Simon Yates, July 31, 2008

Security directors have failed to adapt to the changing security threat landscape. While the prevalence of malicious code has declined, reports of data security breaches have significantly increased. Despite this shift, security directors continue to . . .

For Security & Risk Professionals

The Forrester Wave™: Data Leak Prevention, Q2 2008

Websense And Reconnex Top The Leaders Stack, Followed By Verdasys, RSA, And Vericept

by Thomas Raschke, June 6, 2008

Forrester evaluated leading data leak prevention (DLP) vendors across approximately 74 criteria and found that Websense and Reconnex came out on top because of their strong go-to-market strategy and automated learning capabilities, respectively. Verdasys . . .

For Infrastructure & Operations Professionals

Client Security Purchases Miss The Mark

Enterprise Security Technology Adoption Does Not Protect Against Data Loss

by Natalie Lambert, April 4, 2008

Security operations managers seem to be stuck in the past — in a time when viruses and worms dominated the security threatscape. Think back over 2007 — even 2006 — can you think of any widespread piece of malicious code that truly disrupted business? . . .

For Security & Risk Professionals

Case Study: TLC Vision Takes A Risk-Based Process Approach To Data Leak Prevention

by Thomas Raschke, March 4, 2008

TLC Vision, a provider of eye-care tools and technologies in North America, faced a dilemma in 2005: how to protect the confidential information of more than 1 million patients and physicians. An erroneous email and regulatory pressures first drove the . . .

For Security & Risk Professionals

Oops! Data Leaks Are Not Just An American Problem

A Large-Scale Breach Highlights The Need For DLP And Broader Data-Centric Security In Europe And Elsewhere

by Thomas Raschke, January 16, 2008

Data breaches are embarrassing, painful, and costly — no matter where your organization resides. The UK tax agency, Her Majesty's Revenue and Customs (HMRC), has recently discovered this firsthand, after losing 25 million UK citizens' personally identifiable . . .

For Security & Risk Professionals

EMC/RSA Drafts Tablus For Deeper Data-Centric Security

The Beginning Of The End Of The Standalone ILP Market

by Thomas Raschke, August 20, 2007

EMC expects Tablus to play a key role in its information-centric security and storage lineup. Tablus' balanced information leak prevention (ILP) offering will benefit both sides of the EMC/RSA house, boosting the latter's run at the title of information . . .

For Security & Risk Professionals

Case Study: E-LOAN Maintains Its Top Privacy Reputation With Information Leak Prevention

by Thomas Raschke, July 23, 2007

The brand image of E-LOAN, a leading US financial services company, depends on its privacy protection as much as its lending and savings services. To protect the personal information of its 1 million customers, the firm's chief privacy officer (CPO) implemented . . .

For Security & Risk Professionals

Case Study: Digital Insight's Approach To Information Leak Prevention

by Thomas Raschke, July 23, 2007

In 2006, Digital Insight, a US-based online banking provider, began fortifying its data protection strategy by deploying data discovery capabilities to monitor compliance with its policies on the storage of sensitive data. The initial success of the data . . .

Vericept Is A Leader With An All-Round Sophisticated ILP Solution

The Forrester Wave™ Vendor Summary, Q4 2006

by Jonathan Penn, Reedwan Iqbal, December 15, 2006

Vericept offers a leading, functionally-rich, and easy-to-deploy information leak prevention (ILP) solution, capable of scaling to the needs of large enterprises. In our Forrester Wave study of eight leading ILP offerings, Vericept excelled in nearly . . .

PortAuthority Is An ILP Leader With Strong Product Functionality And Strategic Vision

The Forrester Wave™ Vendor Summary, Q4 2006

by Jonathan Penn, Reedwan Iqbal, December 15, 2006

PortAuthority Technologies offers a leading, functionally rich, information leak prevention (ILP) solution, with a track record of innovation and strong strategic vision. In our Forrester Wave study of eight leading ILP offerings, PortAuthority scored . . .

For Security & Risk Professionals

The Forrester Wave™: Information Leak Prevention, Q4 2006

Vericept, PortAuthority, Vontu, And Verdasys Are Early Leaders

by Jonathan Penn, Thomas Raschke, December 15, 2006

Forrester evaluated leading information leak prevention (ILP) vendors across 39 criteria and found that Vericept and Vontu have established early ILP leadership because of their rich analysis capabilities, while PortAuthority Technologies stands out for . . .