Heidi   Shey

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi is a senior analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi is a senior analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Research

Most RecentMost Popular
  • For Security & Risk Professionals

    REPORT: Your Guide To Cyberinsurance

    Examining The Market And Your Options For Covering Cyber Risk

    June 6, 2018Heidi Shey, Nick Hayes

    Security pros now have access to a robust, necessary, but still nebulous cyberinsurance market. Before you select a policy, you'll have to determine your company's cybervalue at risk and what kind of coverage you'll need. At that point, you may choose from a variety of brokers, captives, carriers, and reinsurers. This report helps you sift through the noise to obtain the right cyberinsurance for your needs.

  • For Security & Risk Professionals

    REPORT: Secure Government Networks With Forrester's Zero Trust eXtended Framework

    Build Customer Trust With Robust Security And Privacy Practices

    May 31, 2018 Chase Cunningham, Heidi Shey, Alexander Spiliotes

    Government networks are under attack from all manner of threats: enemy nations, hackers, rogue assets, malicious insiders, and more. Although governments have done well combatting threats and hardening systems, perimeter-focused security paradigms create avenues of compromise and don't take full advantage of next-generation security technologies. This report helps S&R pros apply Zero Trust concepts and the Zero Trust eXtended (ZTX) framework to significantly increase insight, operational control, and security for government networks.

  • For Security & Risk Professionals

    REPORT: Enable Secure Communications To Protect Data And Privacy

    Use Cases For Enterprise Secure Messaging

    May 9, 2018Heidi Shey

    Employee use of consumer-oriented messaging-and-communications apps like WeChat and WhatsApp, in addition to personal devices for making voice calls, is a source of vulnerability and risk for the enterprise. Simply having end-to-end encryption with a consumer-encrypted chat app is insufficient, particularly when it comes to compliance requirements. This report examines security controls available in enterprise offerings for secure messaging and communications, and highlights industry-specific and general-purpose use cases, to help S&R pros protect their data.

  • For CIO Professionals

    REPORT: The Future Of Cybersecurity And Privacy: Defeat The Data Economy's Demons

    The Vision Report In The Cybersecurity And Privacy Playbook

    April 12, 2018 Jeff Pollard, Heidi Shey, Fatemeh Khatibloo

    The combination of data and machines could fuel either techno-optimistic utopia (happier, healthier lives for all) or totalitarian dystopia (corporations and governments using personal data to extract oligopolistic rents and control people). In this report, we reveal the key tools technology leaders and companies need to strive for the former.

  • For Security & Risk Professionals

    REPORT: Develop Effective Security And Privacy Policies

    Policy: The Data Security And Privacy Playbook

    March 29, 2018Heidi Shey

    Data security and privacy policies are ineffective and can even hinder business processes without a clear understanding of the data — from what it is to where it exists. Data identity is the missing link that S&R leaders must define to create actionable policy. We designed this report to help S&R leaders develop effective security, privacy, and data handling policies using our Data Security And Control Framework as a guideline. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

View all of Heidi Shey's Research

Clients Who Work With Heidi Shey Also Work With:

View all related analysts

Connect

Brief Our Analysts

Upcoming Events

Webinar: Make The Most Of Your Cyberinsurance For 2018 And Beyond

Date: June 20, 2018
Time: 11:00 AM-11:40 AM Eastern Standard Time
Register
View all upcoming events