Forrester's Security & Risk Council is comprised of some of the senior-most security and risk (S&R) executives at companies with $1 billion or more in revenue. Each year, we ask our members about their top priorities and use the results to fine-tune our research agenda and activities. For 2019, the top five priorities are establishing metrics, creating business-aligned strategies, ensuring cloud workload security, moving from DevOps to DevSecOps, and managing third-party risk. This report explains the business value S&R pros can gain by tackling these priorities and how to do it.