security risk management
With the proliferation of data and the ubiquity of connected devices, organizations can move with unmatched efficiency, but simultaneously incur increased risks. Read our insights on how security & risk professionals can succeed in this environment.
Discover how Forrester supports IT and security and risk leaders.
Insights
Blog
HRM Grows Up: Introducing Forrester’s 2026 Human Risk Management Landscape
Forrester announced the shift of the legacy security awareness and training (SA&T) market in 2024 to human risk management (HRM), introducing a profound change of mindset, strategy, process, and technology for managing human-related breaches. These risks posed by and to humans continue to be expansive and include established and emerging attacks, such as deepfakes, misuse […]
Blog
Predictions 2027: The Pursuit And Peril Of Control
More control won’t always mean better outcomes. Leaders who know where to set guardrails and how to deftly blend AI with human judgment will have a clear advantage in the year ahead.
Blog
Announcing Forrester’s 2026 Security & Risk Enterprise Leadership Award Winner: CITGO
CITGO is the winner of Forrester’s 2026 Security & Risk Enterprise Leadership Award. See how the company embeds security, risk management, and trust into business decisions, operations, and emerging technology planning.
Blog
The Endpoint Has Changed, And Security Must Adapt
The environments where employees work have evolved faster than the security models designed to protect them. From browsers to AI-enabled workflows, security teams must adapt to a workplace that extends well beyond the traditional desktop and laptop.
Blog
Your Software Supply Chain Risk Doesn’t Stop At Your Suppliers
Software supply chain security is no longer just about knowing which open-source libraries are in your applications. Attackers are compromising developer environments, build systems, trusted distribution channels, and even security tools such as container security and infrastructure-as-code scanning tools. AI now adds another layer of dependencies to evaluate and protect. The result is an interconnected […]
Blog
Embrace Responsible AI To Forge The Trusted Future
As AI systems become more autonomous, security alone isn’t enough to build trust. Learn how responsible AI helps organizations govern AI agents, manage emerging risks, and keep systems aligned with business goals and values.
Blog
My Take On Open Source And Sovereignty From Open Source Summit Europe 2026
At Open Source Summit Europe 2026, one message surfaced repeatedly: Organizations and governments that merely consume open source remain dependent on others to shape their future. Those that govern, maintain, secure, and sustain open-source ecosystems gain influence, resilience, sovereignty, and strategic leverage. The conversation around sovereignty is evolving within and outside the open-source community: The […]
Who Controls AI In 2027?
As AI transforms B2B go-to-market strategy, technology, security, and customer experience leaders must balance control with adaptation. Forrester’s Predictions 2027 guides, blogs, and webinars reveal what that requires.
Blog
AI Is Hiding Concentration Risk In Plain Sight
Concentration risk used to be easy to picture: one supplier, one system, or one floppy disk seller. But in the era of AI, the single point of failure has learned to hide. Different AI providers can quietly converge on the same testing firm, infrastructure, data source, or control (i.e., a shared assurance mechanism). The danger […]
Blog
The AI Doomsday Circus: Don’t “Step Right Up!”
Don’t let AI doomsday headlines dictate your strategy. Stay grounded in what’s real, manage the risks you can control, and focus on the investments most likely to create new value.
Blog
Announcing The Forrester Wave™: Proactive Security Platforms, Q3 2026
Last week, we released The Forrester Wave™: Proactive Security Platforms, Q3 2026. This is the first evaluation of this market under this title, which has evolved from attack surface management and unified vulnerability management. Security teams have increasingly turned to vulnerability risk management, attack surface management, and exposure management to decide which weaknesses matter most. […]
Blog
Predictions 2027: It’s Going To Be Another “Hold My Beer” Kind Of Year For Security And Risk
AI failures, global outages, and physical disruptions will put security and risk leaders to the test in 2027. Explore three Forrester predictions and the steps organizations can take to strengthen governance, resilience, and readiness.
Blog
Manage Insider Risk To Protect Your Potential
National Insider Threat Awareness Month is drawing to a close. This year’s theme, “Protect Our Potential,” speaks directly to the impact that insider incidents can have. According to Forrester data, insider incidents account for 25% of data breaches, and a third of those incidents are due to malicious intent. Yet many organizations still don’t have […]
Government's 2027 AI Challenge Isn't Adoption. It's Control.
Join Forrester analysts on January 20, 2027, to learn which predictions could reshape government technology investments, AI governance, and customer trust.
Blog
Context Is King: How Identity Context Will Drive Agentic AI Success
AI agents are putting traditional identity and access management approaches to the test. Discover why identity context will be essential to securing autonomous agents and scaling agentic AI with confidence.
Blog
Cars Have Joined The Android Malware Economy
The first malware designed specifically for Android-powered vehicle systems signals that attackers now view cars as another endpoint in the broader technology ecosystem. Security leaders should assess how connected vehicles, mobile devices, and enterprise systems intersect as automotive platforms become part of the expanding attack surface.
Blog
The Information Security Leader’s Guide To Security & Risk Forum 2026
From securing AI and modernizing identity to strengthening governance and resilience, security leaders face a rapidly expanding mandate. See how Security & Risk Forum 2026 can help you stay ahead of emerging challenges.
Blog
OT Security’s Next Chapter Starts When Asset Discovery Stops Being The Goal
OT security has moved beyond simply identifying connected devices. Learn why leading organizations are shifting their focus toward reducing operational risk, strengthening resilience, and enabling safer IT and OT security collaboration.
Blog
Turn AEGIS Controls Into An Agentic AI Security Stack
Agentic AI creates control, technology, and purchasing problems. Security leaders need to know the controls that they must satisfy, the technologies that can satisfy them, where existing tools already provide coverage, and where a new investment actually fills a gap. Far too often, we see clients conducting that process in reverse order … trying to […]
2027 Predictions: Can You Control AI Without Slowing It Down?
Join Forrester analysts on December 10 to explore the 2027 predictions reshaping technology and security strategy, AI investments, risk, and governance.
Blog
The Capital Connection: Exploring Washington, DC During Security & Risk Forum 2026
Security & Risk Forum 2026 brings security, risk, and resilience leaders to Washington, DC, a city where technology, governance, security, and public trust intersect every day. From iconic landmarks and Smithsonian museums to neighborhood cafes and networking-worthy restaurants, explore what to see and do while you’re in the nation’s capital.
Blog
Introducing AEGIS — The Guardrails That CISOs Need For The Agentic Enterprise
AI agents aren’t coming — they’re already here, and they’re not waiting for your security architecture to catch up. Learn how Forrester’s new AEGIS framework can help CISOs secure, govern, and manage AI agents and agentic infrastructure.
Blog
Rules Of The Road: What Flock’s 71% Misread Rate Teaches Us About Third-Party AI Risk
Roseville, California just provided a case study in what happens when organizations confuse “AI-powered” with “AI-verified.” A Business Insider investigation found that Flock Safety’s AI license plate readers misread plates in 71% of the alerts sent to Roseville police over two years, incorrectly flagging vehicles as stolen or linked to a felony. That number isn’t […]
More posts