Heidi   Shey

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi serves security and risk professionals with solutions for data security and privacy as well as security architecture and operations. Her research focuses on sensitive data discovery and classification; data loss prevention; cybersecurity and privacy policy and regulatory concerns; customer-facing breach notification and response; consumer security; cyberinsurance; and eDiscovery. She also focuses on data-driven topics such as security spending and the costs of a data breach.

Previous Work Experience

Heidi has been with Forrester since 2006. Her previous focus was on tech sector economics, conducting quantitative analysis as well as forecasting B2B technology adoption and IT spending and budgeting trends for technology vendors. She also supported Forrester Data's Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey

Senior Analyst Serving Security & Risk Professionals

Heidi serves security and risk professionals with solutions for data security and privacy as well as security architecture and operations. Her research focuses on sensitive data discovery and classification; data loss prevention; cybersecurity and privacy policy and regulatory concerns; customer-facing breach notification and response; consumer security; cyberinsurance; and eDiscovery. She also focuses on data-driven topics such as security spending and the costs of a data breach.

Previous Work Experience

Heidi has been with Forrester since 2006. Her previous focus was on tech sector economics, conducting quantitative analysis as well as forecasting B2B technology adoption and IT spending and budgeting trends for technology vendors. She also supported Forrester Data's Business Technographics team on survey development and data quality initiatives.

Education

Heidi holds a B.A. in economics and studio art with honors from Wellesley College and an M.S. in cybersecurity policy from the University of Maryland. She is also a Certified Information Systems Security Professional (CISSP).

Heidi Shey's Research

Most RecentMost Popular
  • For Security & Risk Professionals

    REPORT: Protect Your Executives From Cybercriminals, Fraudsters, And Themselves

    Key Steps To Shield Business Leaders From Cyberattacks, Social Engineering, And Virtual Imposters

    February 6, 2018 Stephanie Balaouras, Claire O'Malley, Heidi Shey

    Business executives are frequent, easy, and attractive targets for cybercriminals. In this report, we explain how cybercriminals and fraudsters target business leaders and how those executives' own activities can magnify the risk and the damage. Next, we outline best practices that security and risk (S&R) teams can use to educate and protect executives against these attacks and scams.

  • For Security & Risk Professionals

    REPORT: Lessons Learned From The World's Most Notable Privacy Abuses And Security Incidents, 2017

    Continuous Improvement: The Data Security And Privacy Playbook

    January 23, 2018Heidi Shey, Josh Zelonis

    Breaking news of a massive customer breach or blatant privacy abuse dominates the headlines for days. However, months and even years later, affected customers still struggle with the aftermath and firms are still absorbing the costs. By reflecting on these incidents, we glean long-term lessons that help security and risk (S&R) pros improve their firm's overall security posture, its breach response, and its appreciation of privacy law and customer trust. To do this, each year we select and analyze notable incidents from the past 12 months to provide these critical lessons.

  • For Security & Risk Professionals

    REPORT: Equifax Exposed Two Massive Systemic Risks

    Flaws In The Data Economy Will Make Future Breaches Even More Frequent And Damaging

    December 19, 2017 Amy DeMartine, Jeff Pollard, Heidi Shey

    In September 2017, Equifax announced a breach of sensitive personal information of 143 million US consumers, as well as consumers in the UK and Canada. The scale and scope of the breach foretell far-ranging fallout, from undermining global identity verification services to widespread fraud and economic stumbling blocks. In this report, we examine the two systemic issues that led to this disaster, provide S&R leaders with practical lessons to prevent a similar breach, examine fundamental changes in conducting business, and frame legal obligations to end these risks.

  • For Security & Risk Professionals

    REPORT: The State Of Network Security: 2017 To 2018

    Benchmarks: The Security Architecture And Operations Playbook

    November 30, 2017Heidi Shey, Alexander Spiliotes

    This data-driven report outlines budgeting and spending, security group responsibilities, network security technology, and services adoption in North American and European organizations for 2017 to 2018. Understanding these trends and their implications will help security and risk (S&R) executives examine and adjust their resources for their enterprises' security architecture and operations strategies.

  • For Security & Risk Professionals

    REPORT: Predictions 2018: Cybersecurity

    Landscape: The S&R Practice Playbook

    November 7, 2017 Andras Cser, Jeff Pollard, Merritt Maxim, Josh Zelonis, Joseph Blankenship, Heidi Shey

    In 2018, consumers and businesses will face challenges brought on by four primary forces: 1) rising tensions in international relations; 2) ubiquitous connectivity; 3) digital transformation initiatives; and 4) the increasing importance of the data economy. This report guides security and risk professionals through six predictions for 2018 that forecast what will happen as these forces collide. It also shows how S&R pros can mitigate the risks from the resulting economic, political, and societal changes to everything from our identities to our privacy and even our physical safety.

View all of Heidi Shey's Research

Clients Who Work With Heidi Shey Also Work With:

View all related analysts