Save or Share this Report

Heidi   Shey

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi serves security and risk professionals with solutions for data security and privacy as well as security architecture and operations. Her research focuses on sensitive data discovery and classification; data loss prevention; cybersecurity and privacy policy and regulatory concerns; customer-facing breach notification and response; consumer security; cyberinsurance; and eDiscovery. She also focuses on data-driven topics such as security spending and the costs of a data breach.

Previous Work Experience

Heidi has been with Forrester since 2006. Her previous focus was on tech sector economics, conducting quantitative analysis as well as forecasting B2B technology adoption and IT spending and budgeting trends for technology vendors. She also supported Forrester Data's Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi serves security and risk professionals with solutions for data security and privacy as well as security architecture and operations. Her research focuses on sensitive data discovery and classification; data loss prevention; cybersecurity and privacy policy and regulatory concerns; customer-facing breach notification and response; consumer security; cyberinsurance; and eDiscovery. She also focuses on data-driven topics such as security spending and the costs of a data breach.

Previous Work Experience

Heidi has been with Forrester since 2006. Her previous focus was on tech sector economics, conducting quantitative analysis as well as forecasting B2B technology adoption and IT spending and budgeting trends for technology vendors. She also supported Forrester Data's Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Research

Most RecentMost Popular
  • For Security & Risk Professionals

    REPORT: Defend Your Digital Business From Cyberattacks Using Forrester's Zero Trust Model

    Executive Overview: The Security Architecture And Operations Playbook

    September 19, 2017 Stephanie Balaouras, Heidi Shey

    In today's threat landscape, skilled, well-funded, organized cybercriminals are working to steal your data — the lifeblood of your digital business — in pursuit of economic, political, or military gain. To combat this, security leaders need Forrester's Zero Trust Model of information security. With Zero Trust, you can develop robust detection and incident response capabilities to protect your company's vital digital business ecosystem. In our security architecture and operations playbook, we show you how to defend your customers with the Zero Trust Model. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

  • For Security & Risk Professionals

    REPORT: Forrester's 2017 Interactive Data Privacy Heat Map

    Landscape: The Data Security And Privacy Playbook

    September 14, 2017 Enza Iannopollo, Chris Sherman, Heidi Shey, Alexander Spiliotes

    To help S&R professionals navigate the complex landscape of privacy laws around the world, Forrester created the Data Privacy Heat Map, which explains the data protection guidelines and practices for 54 countries. It also covers government surveillance, cross-border data transfers, regulatory enforcement, and data center locations around the globe. Due to the dynamic nature of data protection legislation, we update the interactive tool whenever there are significant changes to relevant legislation. We also conduct an annual comprehensive review and update.

  • For Security & Risk Professionals

    REPORT: Calculate The Business Impact And Cost Of A Breach

    Business Case: The Data Security And Privacy Playbook

    August 31, 2017Heidi Shey

    The business impact and cost of a breach are notoriously difficult to measure. A data breach initiates a tangle of direct and indirect costs, with some accruing in the immediate aftermath and others occurring years after the actual breach event. This report will help security and risk (S&R) leaders educate business executives about the variety of potential costs of a breach and build the business case for investments in data security and security operations necessary to defend their sensitive data.

  • For Security & Risk Professionals

    REPORT: Maintain Your Security Edge

    Continuous Improvement: The Security Architecture And Operations Playbook

    August 25, 2017Heidi Shey, Jeff Pollard

    New security objectives and approaches call for shifts in architecture and operations — but more importantly, for security leaders to reassess their investments in their most valuable asset: employees. Complacency, a widening gap between skills and talent, and a focus on technologies over people are a threat to the business. In an environment of competitive hiring and fast evolving threats, security and risk (S&R) leaders must invest in professional development and growth for themselves and their staffs. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

  • For Security & Risk Professionals

    REPORT: Rethinking Data Discovery And Classification Strategies

    Strategic Plan: The Data Security And Privacy Playbook

    June 9, 2017Heidi Shey

    Security and risk (S&R) pros can't expect to adequately protect customer, employee, and sensitive corporate data and IP if they don't know what data exists, where it resides, how valuable it is to the firm, and who can use it. In this report, we examine common pitfalls and help S&R pros rethink overly complex and haphazard legacy approaches to data discovery and classification. This is an update of a previously published report. Forrester reviews and revises it periodically for continued relevance and accuracy, and most recently did so to factor in new ideas, tools, and data.

View all of Heidi Shey's Research

Clients Who Work With Heidi Shey Also Work With:

View all related analysts