Sandy Carielli,

Sandy Carielli

VP, Principal Analyst

Sandy advises security and risk professionals on application and product security, with a particular emphasis on the collaboration among security and risk, product management, application development, operations, and business teams. Her research covers topics such as application threat modeling, quantum security, protecting modern and emerging application architectures, protecting applications in production environments, and embedding security throughout the product lifecycle.

Budget Planning Guide 2027: Security And Risk Leaders Must Confront The AI Cost Explosion
Outside your subscription
Planning Guide Report
July 8th, 2026
14 min read

Forrester’s guide to what to invest, divest, experiment with, and avoid in security and risk to contend with technology disruptions as agentic AI and post-quantum migration converge in 2027.

Research Coverage

Planned Research

What research can you expect from Forrester in the next 12 months? Updated biweekly, our publishing plan will keep you current with market and technology trends. Use the link below to download a list of our upcoming research.

Download Planned Research
September 30th, 2026 3:30 PM - 4:30 PM Peer Discussions

Security & Risk Leaders Peer Discussion

Security and risk leaders are responsible for protecting the business while enabling it to move forward with confidence. Whether strengthening cyber defenses, managing enterprise risk and compliance, developing organizational capabilities, protecting data and privacy, securing products, or preparing for emerging technologies and AI, leaders in this role face a common set of priorities, decisions, and trade-offs. These challenges may look different across organizations, but they often require navigating many of the same questions.This quarterly peer discussion brings together security and risk leaders to exchange perspectives, compare approaches, and learn from one another’s experiences. Facilitated by a Forrester expert, each session focuses on a timely area of interest while creating space for candid discussion, practical problem-solving, and the sharing of lessons learned among peers facing similar responsibilities.This peer discussion will explore how enterprises are tackling post-quantum cryptography (PQC).This conversation will be hosted by Amy DeMartine and Sandy Carielli and will include open discussion with participants, so please bring your questions, experiences, and perspectives to share with the group.Questions For Discussion: Do you have any urgency to implement PQC? Why or why not?Who in the organization is (or would be assigned as) the lead for PQC? Is there any budget allocated for it?What else is urgent on your roadmap for the next year?