Essentials Report

Topic Overview: IT Security

December 5th, 2007
With contributors:
Jonathan Penn , Paul Stamp , Allison Viglianti


The practice of IT security is undergoing a significant transformation as demands and priorities change. Certainly, IT security still addresses IT threats, yet we now face more sophisticated threats perpetrated for profit rather than notoriety. And in addition, the weight of regulatory compliance and the building of a sustainable IT controls framework also falls heavily on the IT security professional's shoulders. Amidst all this, the very nature of business itself is changing and becoming increasingly externalized, with systems access and the transfer of information no longer confined within well-defined corporate networks. With the direct risks to business and brand posed by all these challenges, IT security is no longer just about IT, nor is it just about security; it's about information risk management. A successful IT security program both educates and works with executives and business managers both to prioritize and respond to these risks and also to communicate the value it delivers.

Want to read the full report?

This report is not available for purchase at this time.

Forrester helps business and technology leaders use customer obsession to accelerate growth. That means empowering you to put the customer at the center of everything you do: your leadership strategy, and operations. Becoming a customer-obsessed organization requires change — it requires being bold. We give business and technology leaders the confidence to put bold into action, shaping and guiding how to navigate today's unprecedented change in order to succeed.