Forrester

For Security & Risk Professionals

Report:Protect And Manage Your Critical Information Assets

Executive Overview: The Data Security And Privacy Playbook

Data is the lifeblood of today's digital businesses, and for economic and even political gain, highly skilled cybercriminals are determined to steal it. Meanwhile, customers around the globe have...

• Downloads: 495
• Rating:

For Security & Risk Professionals

Client Inquiry:Is Tokenization The Right Technology To Encrypt Cardholder Data?

Tokenization: Is it the right technology to encrypt cardholder (saving and debit cards) data? What is the usage level of this product and of similar technologies on the market? What is the level of...

For Security & Risk Professionals

Report:Defend Your Data From Mutating Threats With A Zero Trust Network

Executive Overview: The Security Architecture And Operations Playbook

We've all heard about the "evolving threat landscape." In biology, evolution is a process that takes millions of years to occur as a result of small changes in successive generations. Mutations, on...

• Downloads: 304

For Security & Risk Professionals

Report:Know Your Data To Create Actionable Policy

Policy And Procedures: The Data Security And Privacy Playbook

Data defense is the fundamental purpose of information security. To defend your data, there are only four levers you can pull — controlling access, inspecting data usage patterns for abuse,...

• Downloads: 287
• Rating:

For Security & Risk Professionals

Report:Dial "H" For Hack

An Empowered Report: Understanding The Threats To Unified Communication And VoIP Deployments

In many companies, the worlds of data networking and telecommunications have merged, and voice and video traffic travels with other enterprise data on the same corporate network. Often known...

• Downloads: 521

For Security & Risk Professionals

Blog:InfoSec, Structural Engineering, And The Security Architecture Playbook

Last year the country of Japan suffered a devastating disaster of unspeakable proportions. A massive earthquake on the eastern coast of the country triggered a deadly tsunami that caused the flooding...

For Security & Risk Professionals

Tool:TechRadar™: Network Threat Mitigation, Q2 '12

For Security & Risk Professionals

Report:PCI X-Ray: Assessment And Testing Checklist

This checklist is provided as a concise and comprehensive workbook to help organizations deal with the different types of assessments and tests that security and risk professionals must perform to...

• Downloads: 28

For Security & Risk Professionals

Report:Develop Your Road Map For Zero Trust Network Mitigation Technology

Road Map: The Security Architecture And Operations Playbook

This report outlines Forrester's solution to help security and risk (S&R) leaders develop their road map for Zero Trust network threat mitigation technologies using Forrester's TechRadar™...

• Downloads: 1138
• Rating:

For Security & Risk Professionals

Report:PCI X-Ray: Patch Management

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...

• Downloads: 263

For Security & Risk Professionals

Report:Simplify Cybersecurity With PCI

Policy And Procedures US Government Spotlight: The Security Architecture And Operations Playbook

US federal law, specifically the Federal Information Security Management Act (FISMA), requires US federal government agencies to adhere to National Institute of Standards and Technology (NIST)...

• Downloads: 230

For Security & Risk Professionals

Report:Build Security Into Your Network's DNA: The Zero Trust Network Architecture

Strategic Plan: The Security Architecture And Operations Playbook

One of our goals with Zero Trust is to optimize the security architectures and technologies for future flexibility. As we move toward a data-centric world with shifting threats and perimeters, we...

• Downloads: 1535
• Rating:

For Security & Risk Professionals

Report:Market Overview: Intrusion Prevention Systems, Q2 2011

A Mature Space, IPS Is Still The Bulwark Of Network Security

An intrusion prevention system (IPS) complements traditional firewalls by inspecting the entire network packet looking for malicious traffic that is often invisible to Layer 3 firewalls. While...

• Downloads: 963

For Security & Risk Professionals

Client Inquiry:What Are Some Best Practices For Using Jump Servers?

Are there certain vendors/solutions/configurations that are considered best practices for jump servers? Are organizations relying entirely on authentication and authorization controls, without having...

For Security & Risk Professionals

Report:No More Chewy Centers: Introducing The Zero Trust Model Of Information Security

Vision: The Security Architecture And Operations Playbook

There's an old saying in information security: "We want our network to be like an M&M, with a hard crunchy outside and a soft chewy center." For a generation of information security...

• Downloads: 1635

For Security & Risk Professionals

Report:PCI X-Ray: Application Security Checklist

This is a workbook that supplements the PCI X-Ray: Application Security Document

• Downloads: 33

For Security & Risk Professionals

Blog:Exploring The Invisible Internet

At Forrester's Security Forum 2011 in Miami, November 9-10, we will be reprising the wildly successful "Hackers Vs. Executives" track session. There will be two leading security...

Client Inquiry:Standard PCI Report Templates

Are there any standard PCI report templates for providing information to my QSA?

For Security & Risk Professionals

Report:Q&A: Streamlining Your Patch Management Strategy

Forrester continues to receive many customer inquiries related to effective patch management of servers and endpoints. Balancing the urgency of patching with the need to minimize employee downtime...

• Downloads: 394

For Security & Risk Professionals

Blog:WikiLeaks And Stratfor Make The Case For More Data Encryption

Yesterday, WikiLeaks released emails taken in the highly-publicized Stratfor data breach. While many of the emails are innocuous, such as accusations regarding a stolen lunch from the company...

For Security & Risk Professionals

Client Inquiry:Types Of IT Security Certificates

Can you provide us with definitions on the following types of security certificates: 1) SSL; 2) EFS; 3) device certificates; 4) user certificates; 5) code certificates; 6) signed and unsigned...

For Security & Risk Professionals

Client Inquiry:What Are PCI And Patching Best Practices?

A Payment Card Industry (PCI) certified environment requires patching within 30 days of the patch's release, but what is common practice in a PCI shop?

For Security & Risk Professionals

Report:PCI X-Ray: Assessments And Testing

To effectively deal with the broad and complex requirements of Payment Card Industry (PCI) data security, you need to break the elements apart to provide enhanced clarity. We've designed the PCI...

• Downloads: 367

For Security & Risk Professionals

Client Inquiry:How Should We Select Unified Threat Management Vendors?

We are in the process of selecting unified threat management (UTM) vendors. We have completed a decision analysis based on a technical needs assessment, but we need help narrowing down our vendors....

For Security & Risk Professionals

Report:Control And Protect Sensitive Information In The Era Of Big Data

Future Look: The Data Security And Privacy Playbook

This report outlines the future look of Forrester's solution for security and risk (S&R) executives seeking to develop a holistic strategy to protect and manage sensitive data. In the...

• Downloads: 1611
• Rating: