Heidi   Shey

Heidi Shey

Principal Analyst Serving Security & Risk Professionals

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey

Principal Analyst Serving Security & Risk Professionals

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Research

Most RecentMost Popular
  • For Security & Risk Professionals

    REPORT: Gauge Your Data Security And Privacy Maturity

    Assessment: The Data Security And Privacy Playbook

    October 5, 2018 Enza Iannopollo, Heidi Shey

    To transition from an organization that treats privacy and data security as compliance requirements to achieve the lowest possible cost, to one that champions privacy and uses its technology prowess to differentiate the brand, you need to know where to start. This report guides security, privacy, and other risk pros through Forrester's Data Security And Privacy Maturity Assessment so you can gauge where your firm is on its journey and discover which core competencies you need to strengthen or develop.

  • For CIO Professionals

    REPORT: Optimize Your Cybersecurity And Privacy, People, And Culture Practices To Differentiate

    Advanced Level: People Practices For Cybersecurity And Privacy

    September 25, 2018Heidi Shey

    Firms at an advanced stage of the journey to cybersecurity and privacy maturity have probably built a positive reputation for responsible data use and enjoy strong employee morale. This report — the last of three in the people competency of the cybersecurity and privacy playbook — helps CIOs avoid the complacency that advanced firms sometimes fall into and extend their lead over the competition.

  • For Security & Risk Professionals

    REPORT: Defend Your Digital Business From Cyberattacks Using Forrester's Zero Trust Model

    Executive Overview: The Security Architecture And Operations Playbook

    September 12, 2018 Stephanie Balaouras, Heidi Shey

    In today's threat landscape, skilled, organized, well-funded cybercriminals are working to steal your data — the lifeblood of your digital business — in pursuit of economic, political, or military gain. To combat this, security leaders need Forrester's Zero Trust Model of information security. With Zero Trust, you can develop robust detection and incident response capabilities to protect your company's vital digital business ecosystem. Our security architecture and operations playbook shows you how to use the Zero Trust Model to defend your customers.

  • For Security & Risk Professionals

    REPORT: The Future Of Data Security And Privacy: Growth And Competitive Differentiation

    Vision: The Data Security And Privacy Playbook

    August 15, 2018Heidi Shey, Enza Iannopollo

    Data is the lifeblood of digital businesses; protecting it from theft, misuse, and abuse is the top responsibility of every security and privacy leader. Hacked customer data can erase millions in profits, stolen IP can destroy competitive advantage, and privacy abuses can bring unwanted scrutiny, regulatory fines, and damaged reputations. Security and privacy pros must ensure that security travels with the data across the business ecosystem, position data security and privacy as competitive differentiators, and build a new kind of customer relationship. This is an update of a previously published report; Forrester reviews and updates it periodically for continued relevance and accuracy.

  • For Security & Risk Professionals

    REPORT: Now Tech: eDiscovery Technologies, Q3 2018

    Forrester's Overview Of 30 eDiscovery Technology Providers

    August 6, 2018Heidi Shey

    You can use eDiscovery technologies to improve the speed and efficiency of eDiscovery activities and reduce the associated costs and risks. But to access these benefits, you'll first have to select from a diverse set of vendors — vendors that vary by size, functionality, geography, and vertical market focus. Security and risk (S&R) professionals should use Forrester's Now Tech report to understand the value they can expect from an eDiscovery technology provider and select vendors based on size and functionality.

View all of Heidi Shey's Research

Clients Who Work With Heidi Shey Also Work With:

View all related analysts