Jess Burn

Principal Analyst

Forrester Bio

Author Insights

Blog

Don’t Wait For A Crisis To Act

Ian Bruce 3 days ago
CrowdStrike's recent global incident underscores businesses' need to have robust crisis communication plans in place before a crisis occurs.
Blog

CrowdStrike Global Outage: Critical Next Steps For Tech And Security Leaders

Andras Cser July 19, 2024
Technology leaders woke up this morning to find that a software update by cybersecurity vendor CrowdStrike had gone badly wrong. Get updates on the steps that your organization should take now and in the long term as a result of the CrowdStrike outage.
Blog

Never “Too Small For Cybercriminals”: One Town’s Cautionary Tale

Jess Burn June 25, 2024
In a world of Scattered Spiders and Midnight Blizzards and UNC2452s, why is Arlington’s BEC important? Because it’s happening all the time to towns, municipalities, regional health systems, and small businesses lacking the resources to prepare for such an event.
Blog

Announcing The Forrester Wave™: Cybersecurity Incident Response Services, Q2 2024

Jess Burn June 11, 2024
Choosing the right cybersecurity incident response services provider comes down to three things. Learn what they are and get a preview of our new Wave report in this blog.
Blog

What We Can Learn From 2023’s Most Notable Breaches

Madelein van der Hout June 3, 2024
Cybersecurity breaches continued to rise in 2023. Learn the eight most common incident types and get four key takeaways from our new report.
Blog

The State Of Cybersecurity Innovation: RSA Conference 2024

Heidi Shey May 20, 2024
RSAC gives security startups two structured opportunities to distinguish themselves, and Forrester always finds it revealing to see which startups make the cut.
Blog

Forrester’s RSAC 2024 Themes, Takeaways, And Observations

Jeff Pollard May 15, 2024
More than 41,000 attendees, 600 exhibitors, and 425 sessions. Get some of the key themes and takeaways from the Forrester security & risk analysts who attended RSA Conference (RSAC) 2024.
Blog

Get Ready For Takeoff: Microsoft Copilot For Security

Jeff Pollard March 13, 2024
Microsoft announced the launch date of Copilot for Security. Find out what this means for security professionals and how you can prepare.
Blog

You Got Your Carbon Black In My Symantec! No, You Got Your Symantec In My Carbon Black!

Paddy Harrington March 13, 2024
What is Broadcom planning to do with VMware’s Carbon Black unit? Find out in this blog covering the plan to integrate Carbon Black with Broadcom's existing product lineup.
Blog

2024 Security Recommendations: Tackle Change Head On

Jess Burn March 6, 2024
Changing tech, changing threats, and changing consequences. 2024 will be a busy year for security professionals. Get a preview of our top security recommendations for 2024 in this blog and then read our full report.
Blog

Prescription For Change: Cybersecurity Outage Highlights Critical Vulnerabilities In Healthcare

Jeff Pollard February 23, 2024
A recent cybersecurity incident at Change Healthcare cause the pharmacy claims processors to take its systems offline. Learn the implication of this event and five things firms can do to prepare.
Blog

Higher Ed Rethinks The Three R’s To Close The Cybersecurity Skills Gap

Jess Burn February 8, 2024
Thanks to the widely publicized cybersecurity talent shortage, degree requirements are fading from job postings – even for US Federal contractors – and being replaced by demonstrable skills challenges, making expensive four-year programs less appealing to high school grads and those in the workforce looking for a career change. To keep up, colleges and universities are doing some rethinking of their own as many attempt to carve out a slice of the cybersecurity skills and training pie. In the process, these institutions are renaming the traditional “three Rs” of education.
Blog

Announcing The First-Ever Evaluative Research On Cybersecurity Skills And Training Platforms!

Jess Burn December 12, 2023
The emergence of CS&T platforms ushers in a new era of upskilling and training focused not on point-in-time test prep but on continual learning, where practitioners go up against the latest attacker techniques individually or as a team to test technical skills, refine documented processes, and improve communication. They’re also using these platforms to acquire emerging skills, like prompt engineering, which are offered by many of the platforms in this evaluation.
Blog

Forget Ghost Stories: CISOs Should Be Scared Of The SEC

Jeff Pollard October 31, 2023
The SEC plans to haunt CISOs with cybersecurity enforcement, but there might be a silver lining for CISOs in the SEC complaint.
Blog

Torch The Test: Closing The Cybersecurity Skills Gap Requires Continuous Learning

Jess Burn October 5, 2023
Learn how investing in cybersecurity skills and training (CS&T) platforms can help overcome the cybersecurity skills gap in this preview of the upcoming Forrester Security & Risk Forum.
Blog

The CISO And CIO Microsoft Security Dilemma: Fend Off Or Learn To Love?

Jeff Pollard September 28, 2023
Should CISOs fend off Microsoft to keep their preferred products or embrace consolidation? Find out in this blog.
Blog

2003 Called, And It Doesn’t Want Its Email Security Appliances Back

Joseph Blankenship August 24, 2023
Email security appliances have come a long way in the past 20 years. Learn the benefits of cloud-delivered email security.
Blog

Black Hat USA 2023: Insights From Our Short Vegas Residency

Jeff Pollard August 21, 2023
Black Hat USA 2023: Insights From Our Short Vegas Residency Black Hat has gone from being RSAC’s smaller tech and practitioner-focused cousin to being a commercial showcase for cybersecurity vendors. A tightly packed, noisy Business Hall included over 300 vendors and 400 organizations with booths, which was great for swag but bad for anyone with […]
Blog

Announcing The Forrester Wave™: Enterprise Email Security, Q2 2023

Jess Burn June 13, 2023
The Forrester Wave™: Enterprise Email Security, Q2 2023, is live! Practically dormant for a decade, the enterprise email security market has sprung to life, with mass customer migration to cloud email, rapid adoption of machine learning, and the widespread use of APIs to connect systems, bolster platforms, and share data. These aligning market forces are […]
Blog

The Pay Gap Isn’t The Only Problem For Women In CISO Roles

Jeff Pollard March 8, 2023
Last week, we published Forrester’s third CISO Career Paths report. This research involved an analysis of the career paths of Fortune 500 CISOs, looking into their education, tenures, and prior experiences of security leaders at some of the world’s largest companies. This data showcases existing trends and helps forecast what CISO roles will look like […]
More posts