Skip to main content
Photo of Heidi Shey

Heidi Shey

Principal Analyst

Find Heidi on:

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi is a principal analyst at Forrester serving security and risk professionals. Her research primarily focuses on data security and privacy strategy, skills development, policies, and related technology controls. She guides clients in applying a Zero Trust, data-centric approach to securing data, advising them in areas like sensitive data discovery and classification, data loss prevention, secure communications, and more. Her research coverage includes breach costs, eDiscovery, cyberinsurance, and customer-facing breach notification and response. She also covers consumer security and SMB security market trends.

Previous Work Experience

Heidi has been with Forrester since 2006. She previously focused on tech sector economics and tech vendor strategy, forecasting B2B technology adoption and spending trends as well as conducting quantitative analysis for B2C security market trends. She also supported Forrester Analytics' Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Most Recent Research

Research

The Top Security Technology Trends To Watch, 2021

Ten Security And Risk Technologies Will Disrupt Security And Risk Practices
July 9th, 2021 | Heidi Shey , Andras Cser , Steve Turner

What we do today lays the foundation for improving future security posture in the face of changes to our IT environment, threat landscape, and business...

19 min read
Research

The Forrester Wave™: Dynamic Data Masking Solutions, Q3 2021

The Eight Providers That Matter Most And How They Stack Up
July 8th, 2021 | Heidi Shey , Noel Yuhanna

In our 25-criterion evaluation of dynamic data masking providers, we identified the eight most significant ones — DataSunrise, IBM, Informatica, Mentis...

12 min read
Research

Defend Your Digital Business From Cyberattacks

Executive Overview: The Zero Trust Security Playbook
June 25th, 2021 | Joseph Blankenship , Heidi Shey

In today's threat landscape, skilled, well-funded cybercriminals are working to steal your data for economic, political, or military gain. Traditional...

8 min read
Research

The Forrester Wave™: Unstructured Data Security Platforms, Q2 2021

The 11 Providers That Matter Most And How They Stack Up
May 17th, 2021 | Heidi Shey

In our 26-criterion evaluation of unstructured data security platform providers, we identified the 11 most significant ones — Broadcom, Digital Guardian...

17 min read
Research

Embed Cybersecurity And Privacy Everywhere To Secure Your Brand And Business

May 10th, 2021 | Heidi Shey , Amy DeMartine

Meeting compliance requirements is the floor and not equivalent to creating robust cybersecurity and privacy practices that create the culture and conditions...

5 min read