About Forrester
Forrester Research, Inc. is an independent research company that provides pragmatic and forward-thinking advice to global leaders in business and technology.

Ted serves CIOs. He has 24 years of experience in the technology industry, focusing on the effects of disruptive technologies on the workforce and workforce productivity. His research focuses on workforce technologies and the programs that support them, including smartphones, tablets, and their impact on productivity; social business and collaboration tools; cloud email and collaboration tools; and the consumerization of IT.
Ted is the co-author of Empowered: Unleash Your Employees, Energize Your Customers, and Transform Your Business (Harvard Business Review Press, September 2010). Social, mobile, video, and cloud Internet services give consumers and business customers more information power than ever before. To win customer trust and business, companies must empower their employees to directly engage with and solve the problems of empowered customers using these same technologies.
It is through this empowered lens that the consumerization of IT makes sense: employees solving customer and business problems using readily available technology that they master first at home — social, mobile, video, and cloud. This management book helps CIOs and IT organizations engage directly with business managers and employees to build an empowered strategy: understanding which employees are workforce "HEROes" — highly empowered and resourceful operatives — implementing empowering collaboration and innovation programs, creating a new empowered security architecture, and supporting HEROes with the right technology platforms.
In 2009, Ted launched Forrester's Workforce Technology Assessment, the industry's first benchmark survey of workforce technology adoption. This quantitative approach helps professionals and the teams they work with have a fact-based conversation about employees' technology adoption and requirements.
Prior to joining Forrester in April 1997, Ted was a cofounder of Phios, an MIT spinoff. Before that, Ted worked for eight years as CTO and director of engineering for a software company serving the healthcare industry. Early in his career, Ted was a singer and bass player for Crash Davenport, a successful Maryland-based rock-and-roll band.
Ted has a master's degree in management from the MIT Sloan School of Management. He also holds an M.S. in computer science from the University of Maryland and a B.A. with honors in physics from Swarthmore College.
Be Ready To Comply With Dynamic Regulatory Changes
Understanding the laws and regulations that govern data privacy across your organization is critical for any company, but it can be challenging. As a result, too many security and risk (S&R)...
Policy And Procedures: The S&R Practice Playbook
Over recent years, the information security industry has matured nicely; experts and associations have documented many best practice models, and their adoption has been widespread. It's disconcerting...
It’s interesting how many threads there are on the Internet that still debate the difference between these two words: “responsible” and “accountable.” Oddly enough,...

The cyberinsurance market today represents only a tiny segment of the overall insurance industry, and a recent Forrester paper on the topic identified that only a very small percentage of...
It’s common knowledge that the security landscape has shifted over the past few years and the once-strong perimeters that CISOs relied upon have become stretched, fragmented, and overrun by...
I was reading an article recently which outlined the different agencies employed within the United Kingdom to protect against cyber-threats. Not including the armed forces, who would have...
Last night I attended a vendor presentation about cloud-based risk and the threat from nation state attacks. Unfortunately, due to a busy schedule and a difficult journey, I arrived just as the final...
Security threats develop and evolve with startling rapidity, with the attackers always seeking to stay one step ahead of the S&R professional. The agility of our aggressors is understandable; they do...
Road Map: The S&R Practice Playbook
This report outlines the future state of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...
As 2012 came to a close, we studied the financial position of many CISOs and asked about their expectations for 2013. Unsurprisingly, it was apparent that 2012 was another difficult year and...
Benchmarks: The S&R Practice Playbook
The global downturn has constrained security budgets for several years now, and chief information security officers (CISOs) have become accustomed to taking on more responsibilities without...
The role of the chief information security officer (CISO) is increasingly central to many organizations; however, it has many guises. No two CISOs have exactly the same roles and responsibilities,...
Change Management: The S&R Practice Playbook
For too long, creating security awareness has been an afterthought, something CISOs did in their spare time after putting out the operational fires that sprang up around them with alarming...
Since cyberinsurance first emerged in the late '90s, the number of available policies, the scope of those policies, and the number of insurers offering them have all significantly increased. Due to...
A little while ago I bumped into a journalist friend at a trade conference. We chatted about the event to try and identify hot topics and trends from our discussions and supplier meetings, and both...
I recently went for coffee with a very interesting gentleman who had previously been responsible for threat and vulnerability management in a global bank – our conversation roamed far and wide...
The new revolution in apps and social media continues at a stunning rate. Nearly every day a colleague tells me of another app or site that is bubbling up and about to hit the big time. Many will not...
Stakeholder Needs: The S&R Practice Playbook
This report maps out the key stakeholders for Forrester's solution for security & risk (S&R) professionals looking to build a high-performance security program and organization. This report is...

A few months ago I shared a flight with a very pleasant lady from a European regulatory body. After shoulder surfing her papers and seeing we were both interested in information security...
For many years, security professionals have lived by the three pillars of risk management – AVOID, TREAT, ACCEPT. These great tenets have served the profession well, enabling CISOs to...
Last night I stumbled across a documentary on BBC2 (content only available to UK residents – sorry!) about the human brain. One section talked about how the brain perceived risk issues...
Assessment Framework: The S&R Practice Playbook
This report outlines the assessment framework associated with Forrester's solution for security and risk (S&R) executives. The report is designed to help CISOs as they continue working their way...

Future Look: The S&R Practice Playbook
This report outlines the future look of Forrester's solution for security and risk (S&R) executives working on building a high-performance security program and organization. This report is designed...
Strategic Plan: The S&R Practice Playbook
This report outlines the strategic vision of Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. This report is...
As much as the cloud computing model makes sense to me, my security sensibilities cry out about information risk every time I start to consider actual implementation for data of value across an...