Forrester

For Security & Risk Professionals

Report:Strategy Deep Dive: Define Your Data

Rethinking Data Discovery And Classification For Data Security

Defining data via data discovery and classification is an often overlooked, yet critical, component of data security and control. Security and risk (S&R) pros can't expect to adequately protect data...

• Downloads: 170
• Rating:

For Security & Risk Professionals

Report:Build A Governance, Risk, And Compliance Strategy Worthy Of Business Consideration

Strategic Plan: The Governance, Risk, And Compliance Playbook

Governance, risk management, and compliance (GRC) are far too often positions of emergency response. What's worse, as you constantly rush to respond to new mandates, enforce policies, or pull...

• Downloads: 546
• Rating:

For Security & Risk Professionals

Blog:Twitter Settles With FTC For Privacy Breach

Organizations continue to face risk for security breaches. Normally, we talk about the risk of security breaches being fines and other costs around loss of PII, per California Senate Bill 1386 and...

For Security & Risk Professionals

Blog:Avoid The Social Media Binary

Many organizations today get caught up in what I call the “social media binary,” where there are only two options to social media control: 1) Allow unrestricted access to social networks,...

For Security & Risk Professionals

Client Inquiry:How Retailers Handle Login Expiration Time

How do retailer websites handle login expiration? Is it session-based, login-persisted, 30-day cookie, and so on? What is the norm or best practice?

For Security & Risk Professionals

Report:The Risk Manager's Handbook: How To Measure And Understand Risks

Estimating Levels Of Risk Exposure To Help Guide Informed Decisions

Opposition to adopting formal risk management tends to use the process of risk measurement as its attack target — it's too subjective, it's too complicated, or it's too much investment just to...

• Downloads: 999

For Security & Risk Professionals

Report:Market Overview: Content Security, Q3 2011

SaaS Values Are Established, And Vendors Move Quickly To Capture Market Share

Content security products enable organizations to protect against email- and web-borne threats, enforce acceptable use policies, and guard against data leak risks. SaaS delivery has been a game...

• Downloads: 744

For Security & Risk Professionals

Blog:From Customer To Channel Partner

 Even though it is not specific to security, this idea came to me while attending Dell’s Annual Analyst Conference (DAAC) in Austin, Texas two weeks ago. One of the hot topics discussed at...

For Security & Risk Professionals

Client Inquiry:Active Directory Password Policy

We're looking for current best practices and recommendations for Active Directory (AD) password policies.

For Security & Risk Professionals

Report:Build The Business Case For A GRC Platform

Business Case: The Governance, Risk, And Compliance Playbook

As the governance, risk, and compliance (GRC) platform market matures, product vendors struggle to point to credible return on investment figures, and potential buyers similarly struggle when asked...

• Downloads: 963

For Security & Risk Professionals

Report:Develop A Two-Phased DDoS Mitigation Strategy

Protect Yourself From Hacktivists And Other Cybercriminals

Until recently, distributed denial of service (DDoS) attacks had been part of infosec lore: something you heard about but rarely experienced. With the rise of hacktivist groups and other...

• Downloads: 7

For Security & Risk Professionals

Blog:Your Vertical Is . . .

Companies often demand to know what their peers in a particular vertical market are doing within the realm of information security before making new decisions. “We’re in retail” or...

For Security & Risk Professionals

Tool:Data Protection And Compliance Are Top Of Mind Concerns

For Security & Risk Professionals

Blog:Active Directory Moving To The Cloud?

We hear a lot about cloud IAM vendors offering metadirectories or user repositories in the cloud. We predict that in 1-2 years we'll see AD being moved from on-premises installations into cloud...

For Security & Risk Professionals

Blog:Communication And Coordination Should Be The Cornerstone Of Your BC Plan

In a recent Forrester/DRJ joint survey on BC preparedness, of organizations that have invoked a BC plan in the last five years, 37% said that their BC plans had not adequately addressed...

For Security & Risk Professionals

Report:Protect Your Competitive Advantage By Protecting Your Intellectual Property From Cybercriminals

Business Impact: The Data Security And Privacy Playbook

Protecting customer data such as credit card information, log-in credentials, and personally identifiable information is an important part of enterprise IT security. Such data fuels a large and...

• Downloads: 395
• Rating:

For Security & Risk Professionals

Client Inquiry:Definition Of Advanced Persistent Threat

How does Forrester define Advanced Persistent Threat?

For Security & Risk Professionals

Report:Build An Information Security Management System

Policy And Procedures: The S&R Practice Playbook

Over recent years, the information security industry has matured nicely; experts and associations have documented many best practice models, and their adoption has been widespread. It's disconcerting...

• Downloads: 732

For Security & Risk Professionals

Report:Securing Smart City Infrastructure

What Security Professionals Need To Know Today About Smart City Initiatives

With the promise of improved citizen services and more efficient use of scarce resources, the smart city trend is picking up momentum across the globe. A "smart city" integrates technology with...

• Downloads: 780

For Security & Risk Professionals

Tool:GRC Revenue Distribution

For Security & Risk Professionals

Report:Benchmarking Your Enterprise Mobile Device Operations Initiatives And Plans

This report provides insight into corporate mobility adoption trends based on results from Forrester's Forrsights surveys of IT mobility decision-makers and end user workers in North American and...

• Downloads: 451

For Security & Risk Professionals

Client Inquiry:What Is The State Of Governance, Risk, And Compliance In The Indian Market?

What is the size of the governance, risk, and compliance (GRC) market, and what is the market growth rate in India? Who are the major GRC vendors in India, and what are the areas of opportunity?

For Security & Risk Professionals

Report:Your Data Protection Strategy Will Fail Without Strong Identity Context

Protecting Information Consistently With Identity Context (PICWIC) Is A Must

According to Forrester survey data, "trusted" insiders and business partners, intentionally or unintentionally, are responsible for 43% of security breaches. The recent WikiLeaks breach illustrates...

• Downloads: 728
• Rating:

For Security & Risk Professionals

Client Inquiry:Use These Communication Strategies In The Event Of A Disaster

We would like to know, in the event of a disaster: 1) Whom should we call; 2) what format is best; 3) what kind of information/instructions should we provide on the call; and 4) what kind of...

For Security & Risk Professionals

Blog:iPad And iPhone: Secure Enough For Most Businesses

Greetings everyone. My name is Andrew Jaquith, and I serve security and risk professionals. Normally I blog over on the S&R analyst team blog. But because Forrester has been receiving so many...