CISO Trends
The chief information security officer (CISO) role is growing in importance and remit. Discover the latest trends and analysis for CISOs and information security leaders.
Insights
Blog
Zero Trust On A Beer Budget, Redux: Minimum Viable Zero Trust
If you’ve studied the reference architectures, read the BeyondCorp whitepapers, poured over strategies and fan charts, or tried to plot your position in any of the (many) Zero Trust maturity models and found yourself inspired by the concepts but puzzled by the process, you’re not alone. If the sheer number of Zero Trust something-or-others available […]
Blog
Proofpoint + Varonis: The Platform Promise Meets The Integration Test
Cybersecurity platform vendor Proofpoint announced an agreement to acquire Varonis in an all-cash transaction valued at approximately $6.3 billion. More people, applications, and AI systems need access to enterprise data, making understanding the data, controlling access to it, and monitoring how it’s used increasingly interconnected problems. Proofpoint describes an intended combined platform to protect against […]
Who Controls AI In 2027?
As AI transforms B2B go-to-market strategy, technology, security, and customer experience leaders must balance control with adaptation. Forrester’s Predictions 2027 guides, blogs, and webinars reveal what that requires.
Blog
The Endpoint Has Changed, And Security Must Adapt
The environments where employees work have evolved faster than the security models designed to protect them. From browsers to AI-enabled workflows, security teams must adapt to a workplace that extends well beyond the traditional desktop and laptop.
Blog
Your Software Supply Chain Risk Doesn’t Stop At Your Suppliers
Software supply chain security is no longer just about knowing which open-source libraries are in your applications. Attackers are compromising developer environments, build systems, trusted distribution channels, and even security tools such as container security and infrastructure-as-code scanning tools. AI now adds another layer of dependencies to evaluate and protect. The result is an interconnected […]
Blog
Embrace Responsible AI To Forge The Trusted Future
As AI systems become more autonomous, security alone isn’t enough to build trust. Learn how responsible AI helps organizations govern AI agents, manage emerging risks, and keep systems aligned with business goals and values.
Blog
The AI Doomsday Circus: Don’t “Step Right Up!”
Don’t let AI doomsday headlines dictate your strategy. Stay grounded in what’s real, manage the risks you can control, and focus on the investments most likely to create new value.
Blog
Announcing The Forrester Wave™: Proactive Security Platforms, Q3 2026
Last week, we released The Forrester Wave™: Proactive Security Platforms, Q3 2026. This is the first evaluation of this market under this title, which has evolved from attack surface management and unified vulnerability management. Security teams have increasingly turned to vulnerability risk management, attack surface management, and exposure management to decide which weaknesses matter most. […]
AI Wants 20% Of Your Budget. Now What?
Get Forrester’s 2027 Predictions guide for technology and security leaders to explore five shifts shaping investment, risk, and innovation.
Blog
Manage Insider Risk To Protect Your Potential
National Insider Threat Awareness Month is drawing to a close. This year’s theme, “Protect Our Potential,” speaks directly to the impact that insider incidents can have. According to Forrester data, insider incidents account for 25% of data breaches, and a third of those incidents are due to malicious intent. Yet many organizations still don’t have […]
Blog
Cars Have Joined The Android Malware Economy
The first malware designed specifically for Android-powered vehicle systems signals that attackers now view cars as another endpoint in the broader technology ecosystem. Security leaders should assess how connected vehicles, mobile devices, and enterprise systems intersect as automotive platforms become part of the expanding attack surface.
Blog
CISOs: Stop Arguing That AI Doesn’t Work — Start Arguing About What It Costs
Last year, we took the stage at Forrester’s Security & Risk Forum to challenge the stories leadership teams were beginning to tell themselves about AI. That keynote became our new report, Resetting Security’s AI Narrative With Boards And Executives. We wrote it because CISO clients keep coming to us with the same concern: The AI […]
Blog
OT Security’s Next Chapter Starts When Asset Discovery Stops Being The Goal
OT security has moved beyond simply identifying connected devices. Learn why leading organizations are shifting their focus toward reducing operational risk, strengthening resilience, and enabling safer IT and OT security collaboration.
Blog
Intent Is The New Epicenter Of Agentic Security
Cybersecurity spent decades trying to stop things from happening, identifying them, and then investigating what happened. Agentic AI challenges us with a much more difficult question: What was the system trying to do? Agents don’t just execute instructions. They interpret objectives, select tools, access data, cross systems, and change tactics. In most cases, a user […]
Live Analyst Insights: Who Will Control AI In APAC?
Join Forrester analysts on Dec. 1 to explore how AI, sovereignty, trust, and geopolitical pressures will redefine technology and security decisions in 2027.
Blog
Turn AEGIS Controls Into An Agentic AI Security Stack
Agentic AI creates control, technology, and purchasing problems. Security leaders need to know the controls that they must satisfy, the technologies that can satisfy them, where existing tools already provide coverage, and where a new investment actually fills a gap. Far too often, we see clients conducting that process in reverse order … trying to […]
Blog
Chasing AI Won’t Save You From Ignoring Endpoint Security
The rush to adopt AI and agentic technologies is capturing security leaders’ attention, but it risks overshadowing the controls that stop attacks before they start. Learn why strong endpoint protections remain essential for reducing risk, limiting exploitation paths, and enabling secure AI adoption.
Blog
The Capital Connection: Exploring Washington, DC During Security & Risk Forum 2026
Security & Risk Forum 2026 brings security, risk, and resilience leaders to Washington, DC, a city where technology, governance, security, and public trust intersect every day. From iconic landmarks and Smithsonian museums to neighborhood cafes and networking-worthy restaurants, explore what to see and do while you’re in the nation’s capital.
Blog
The First Principles Of Cybersecurity Still Apply
As cyberthreats evolve and AI accelerates attacker capabilities, the most effective defenses remain the foundational practices many organizations overlook. Learn why recent attacks on critical infrastructure reinforce the need to focus on basic security principles before investing in new technologies.
Blog
Bringing Crypto Agility And PQC Visibility To The Network With NAV
The Q4 2025 Forrester Wave™ evaluation for network analysis and visibility (NAV) solutions was the first iteration of the research to evaluate vendors on their post-quantum cryptography (PQC) capabilities, a decision that has become more pronounced in 2026. The rationale was compelling then; it is unavoidable now. Most notably, the US federal government has moved […]
2027 Predictions: Can You Control AI Without Slowing It Down?
Join Forrester analysts on December 10 to explore the 2027 predictions reshaping technology and security strategy, AI investments, risk, and governance.
Blog
Anthropic’s Pricing Shift Puts AI Consumption Risk Back On Customers
Back in May of this year, Anthropic announced changes to its pricing model. Its original fixed-fee, per-seat subscription model was replaced with one that separates platform access from AI consumption. Customers still pay for access, but usage is now metered and billed separately based on token consumption. Under the previous model, customers were split into […]
Blog
Introducing AEGIS — The Guardrails That CISOs Need For The Agentic Enterprise
AI agents aren’t coming — they’re already here, and they’re not waiting for your security architecture to catch up. Learn how Forrester’s new AEGIS framework can help CISOs secure, govern, and manage AI agents and agentic infrastructure.
Blog
Harness Up For Our Black Hat 2026 Recap
Black Hat 2026 generated more questions than it answered. Are we headed for a vulnerability apocalypse (aka vulnpocalypse), or are we clearing a backlog of flaws that AI can now find with ease? Can organizations patch fast enough? What should buyers expect from vendors when software can reason? Will AI be our undoing or our […]
More posts