Paul is a VP and principal analyst supporting Forrester’s global security and risk research service. Paul leads coverage in risk management, focused on governance, risk, and compliance (GRC) service providers, managed service providers, and cyber risk ratings providers. Paul also supports other risk topics including security risk management/policy development and GRC vendors. He is also developing new research streams focused on regulatory technology and covering sustainability regulations. Paul previously held the role of European technology research director in Forrester’s Europe research group; prior to that, he was a security analyst focused on European security services providers and cyber risk management topics.

Paul is frequently asked to comment on technology issues by press and trade publications. He has recently been quoted in publications such as the Wall Street Journal, Financial Times, Fortune, CIO Magazine, CSO Magazine, ZDNet, SC Magazine, Handelsblatt, City A.M., and Infosecurity Magazine.