Security, risk, and privacy leaders will face challenges exacerbated by the pandemic. Well-intentioned workforce data collection becomes privacy-violating surveillance overreach; fragile, just-in-time supply chains exponentially increase third-party risks as just-in-case supply chains develop; ransomware pressures cyberinsurance to evolve; the great resignation interrupts cybersecurity’s hiring plans; and the influx of investment capital leads to some bad behavior by at least one security vendor. In this report, we explore Forrester’s predictions for cybersecurity, privacy, and risk in 2022.