Heidi   Shey

Heidi Shey

Principal Analyst Serving Security & Risk Professionals

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey

Principal Analyst Serving Security & Risk Professionals

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Research

Most RecentMost Popular
  • For eBusiness & Channel Strategy Professionals

    REPORT: Notifications In Regulated Industries: Healthcare

    This Infographic Outlines The Current Environment, Challenges, And Solutions For Secure Messaging

    May 17, 2019 Arielle Trzcinski, Julie A. Ask, Heidi Shey, Fatemeh Khatibloo

    Three-quarters of healthcare, financial services, and insurance firms are using SMS or push notifications. Their primary objectives? Improving the customer experience and reducing operational costs, such as inbound calls to the contact center, fraud, and appointment no-shows. But messaging remains aspirational for most firms, as the combination of risk-averse compliance teams and restrictive regulations prevents them from sending content in mobile messages that would achieve these goals.

  • For eBusiness & Channel Strategy Professionals

    REPORT: Notifications In Regulated Industries: Financial Services

    This Infographic Outlines The Current Environment, Challenges, And Solutions For Secure Messaging

    May 17, 2019 Fatemeh Khatibloo, Julie A. Ask, Heidi Shey, Arielle Trzcinski

    Three-quarters of financial services, insurance, and healthcare firms are using SMS or push notifications. Their primary objectives? Improving the customer experience and reducing operational costs, such as inbound calls to the contact center, fraud, and appointment no-shows. But messaging remains aspirational for most firms, as the combination of risk-averse compliance teams and restrictive regulations prevents them from sending content in mobile messages that would achieve these goals.

  • For Security & Risk Professionals

    REPORT: The Security Of Cryptocurrencies

    Security Must Help Business Leaders Make Risk-Based Decisions On Cryptocurrency Adoption And Implementation

    February 13, 2019 Andras Cser, Heidi Shey, Jeff Pollard, Merritt Maxim

    Many enterprises are considering the adoption of cryptocurrencies for payment. As a security and risk (S&R) professional, you're responsible for helping business leaders understand the legal and regulatory risks and, importantly, how to secure the cryptocurrency. In this report, we help S&R pros: 1) understand the current adoption of cryptocurrency payments; 2) examine the threat surface; 3) investigate the regulatory landscape; and 4) identify best practices for secure implementation.

  • For Security & Risk Professionals

    REPORT: Now Tech: Data Loss Prevention, Q1 2019

    Forrester's Overview Of 37 Data Loss Prevention (DLP) Providers

    January 18, 2019Heidi Shey

    You can use data loss prevention (DLP) capabilities to support compliance, protect intellectual property, and augment employee security awareness. But to access these benefits, you'll first have to select from a diverse set of vendors — vendors that vary by size, functionality, geography, and vertical market focus. Security and risk professionals should use Forrester's Now Tech report to understand the value they can expect from a data loss prevention provider and select vendors based on size and functionality.

  • For Security & Risk Professionals

    REPORT: New Tech: Secure Communications, Q4 2018

    Forrester's Landscape Overview Of 27 Providers

    December 11, 2018Heidi Shey

    This report presents an overview of the emerging vendors in the secure communications market. These are vendors whose offerings include a mix of encrypted messaging/text and additional communications capabilities like voice calling, videoconferencing, file sharing, screen sharing, and more. Security pros should use it to understand the capabilities within major market segments and to inform their technology strategies for specific use cases requiring secure communications.

View all of Heidi Shey's Research

Clients Who Work With Heidi Shey Also Work With:

View all related analysts

Connect

Brief Our Analysts

Upcoming Events

Forum: Privacy & Security 2019

Date: September 12, 2019
Register
View all upcoming events