Jess Burn,

Jess Burn

Principal Analyst

Jess is a principal analyst at Forrester serving security and risk (S&R) professionals. She contributes to Forrester’s research on the role of the CISO with a focus on security talent management. Additionally, Jess covers incident response and crisis management, and email security.

Research Coverage

Planned Research

What research can you expect from Forrester in the next 12 months? Updated biweekly, our publishing plan will keep you current with market and technology trends. Use the link below to download a list of our upcoming research.

Download Planned Research
December 9th, 2025 8:00 PM - 9:00 PM Webinar

Deconstructing Human-Element Breaches: Define, Prioritize, And Act

Human-related breaches remain a complex challenge for most organizations, with widely varying definitions causing confusion and ineffective mitigation strategies. This lack of clarity leads CISOs and their teams to focus on common risks such as phishing while overlooking a broader human risk landscape. While security awareness and training (SA&T) is often touted as the silver bullet, it remains ineffective, as does overfocusing on technology. Join us in this webinar to rethink your approach to human-related breaches and to identify, prioritize, and mitigate those risks. Learn to assess the breaches that pose the most risk, to define and describe breaches to stakeholders to receive critical advocacy for your initiatives, and to treat human-related risks holistically. Hear how to take the first steps towards a human risk management (HRM) strategy to bolster your security controls.Key takeaways: Learn how to cut through the noise and define human-related breaches in a way that actually makes sense to your stakeholders.Discover how to spot the human risks your current strategy might be missing and how to manage them.Get practical tools to prioritize breaches based on real impact, not just familiarity or fear.Understand why SA&T alone won’t save you — and what a holistic human risk management strategy looks like.Target audience level: all levels