Speaker Biography

Heidi Shey

Principal Analyst

Sessions Featuring This Speaker

Forrester's Forum For Technology Management Leaders


  • 04:15 PM - 04:55 PM

    Protecting Your Customer's Data: A Critical Corporate Social Responsibility

    Customer data — from personally identifiable data (PII) like contact information and account login credentials to customer preferences — forms a critical and growing set of digital assets for today’s businesses. As the collection and use of this data increase, so do concerns relative to data protection. We will describe the why, what, and how surrounding the protection of your customers’ data. This session covers:

    • Why data protection in the digital world is even more important than ever.
    • What should be part of your data protection strategy.
    • How to govern and continually ensure protection.

Research Focus

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.


Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).