risk management

“No risk, no reward,” may be true, but unnecessary risk is . . . well, unnecessary. Read our insights on risk management and mitigation.

Discover how Forrester supports IT leaders.

Insights

Blog

Top Recommendations For CISOs In 2025: Deal With Uncertainty … Again

Jeff Pollard 2 days ago
The security landscape continues to evolve, as does global uncertainty, leaving CISOs preparing for turbulence ahead.
Blog

The Insurance Industry’s Data Posture Is An Existential Risk

Rohit Makhijani March 5, 2025
Insurers collect a wealth of data, but only a few have found ways to harness its true potential. Most insurance business and technology leaders have very low confidence in their data assets’ ability to meet customer and competitive demands. Almost all incumbent insurance companies support disparate lines of business and individual parts of the value […]

Missed Our Tech & Security Predictions Webinar?

Watch the replay to catch up! Dive into the top 2025 predictions and discover their impact on your tech and security strategies — with exclusive insights from the analysts who conducted the research.

Blog

Quantum Security Isn’t Hype — Every Security Leader Needs It

Merritt Maxim March 3, 2025
The commercial availability of quantum computers that can compromise traditional asymmetric cryptography is still five to 10 years away. But security and risk (S&R) professionals must assess and prepare for the impact of quantum security now.
Blog

Contract Lifecycle Management Is The Bridge Between Strategy And Reality — Choose Wisely To Thrive In Uncertainty

Alla Valente February 20, 2025
In under two months of 2025, organizations face a battery of changing regulations, new tariffs, and economic uncertainty … all while trying to stay competitive, remain resilient, and execute on their AI strategy. Here’s the good news: How well your organization deals with risk, crisis, and operations opportunity will largely depend on … you guessed […]
Blog

Accessibility Is Still Vital For Businesses

Gina Bhawalkar February 3, 2025
Accessibility is still vital for businesses despite recent federal actions.
Blog

Technological And Environmental Risks Take The Top Two Spots In 2025 WEF Risk Report

Paul McKay January 24, 2025
Get the highlights from the World Economic Forum’s 2025 Global Risks Report and find out what it means for global risk leaders.
Blog

A Run On The Bank: Lack Of Headline Failures Hasn’t Changed Consumer Attitudes

David Hoffman December 12, 2024
When Silicon Valley, Signature and First Republic failed last year four out of five US online consumers knew about it. This year, bank failures have been less visible. Find out why and what to expect in the future.
Blog

Stop Defending The Three Lines Of Defense

Cody Scott November 14, 2024
Learn how the Forrester Continuous Risk Management Model can replace outdated risk management methods in this preview of a session at the upcoming Security & Risk Summit.
Blog

Retailers: Adopt Three Application Security Technologies Now

Sandy Carielli October 29, 2024
Three application security technologies are key for retailers to adopt before the holiday season.
Blog

Deconstruct Human-Element Breaches To Protect Your Workforce

Jinan Budge September 30, 2024
Risks posed by and to humans such as deepfakes, data exfiltration by insiders, and misuse of generative AI are expected to accelerate and become more complex. Learn how to discern and manage these human-element risks in this preview of an upcoming report.
Blog

The PBM Paradox: Catalysts Of Concentration Risk In The Healthcare Ecosystem

Arielle Trzcinski September 20, 2024
A recent study by the American Medical Association (AMA) noted that just four firms dominate 70% of the pharmacy benefit manager (PBM) industry, a textbook definition of an oligopoly. Learn more about what's driving this trend and what the impact could be.
Blog

The Benefits Generative AI Brings To Fraud Management

Andras Cser September 16, 2024
Looking for ways to improve your fraud management capabilities? Learn six key ways generative AI can help in this preview of a session at our upcoming Security & Risk Summit in Baltimore December 9-11.

2025 Tech Predictions: Your Must-Have Guide

From AI’s impact to cloud evolution and smarter workflows for the SDLC and AIOps, 2025 is set to be a big year for tech. Download our Predictions guide to see if you’re on track to make the most of these changes.

Blog

The State Of Third-Party Risk Management, 2024: Dire, Hopeful, But Mostly Noseblind

Alla Valente September 11, 2024
As a former hockey mom, I assure you that there is nothing quite as pungent as a travel-team hockey bag. Adolescent sweat, steamy equipment, and skates with remnants of ice all shoved into a giant bag with no ventilation makes for a breeding ground for fungus and bacteria. But ask any player, coach, or hockey […]
Blog

AI Agents: The Good, The Bad, And The Ugly

Stephanie Liu September 6, 2024
As AI becomes more agentic, making decisions on behalf of businesses and eventually consumers, the risks will grow more complex. Learn more about the use cases and risks of AI agents in this preview of our upcoming Security & Risk Summit.
Blog

Fraud Management In APAC: What’s New In 2024?

Meng Liu August 29, 2024
The fraud attack rate in APAC is above the global average. Find out why in this preview of a new report on the latest trends in fraud management, including evolving fraud patterns and technology adoption trends in APAC.
Blog

Don’t Wait For A Crisis To Act

Ian Bruce July 23, 2024
CrowdStrike's recent global incident underscores businesses' need to have robust crisis communication plans in place before a crisis occurs.
Blog

Build The Business Case For Cyber Risk Quantification To Reset Risk Management

Cody Scott June 5, 2024
An organization’s single biggest risk is not knowing how much risk it has. That's why cyber risk quantification is on the rise. Learn the basics of how to build a CRQ business case in this post.

See What’s Next For Generative AI In Security Tools

The potential for AI in security tools is just beginning! Watch our webinar replay to learn how generative AI is transforming security tools and impacting security practitioners, along with the exciting innovations that lie ahead.

Blog

A Five-Step Guide To Conducting A Successful Sustainability Materiality Assessment

Aurelie L'Hostis May 9, 2024
Read this blog post to understand the actions that organizations need to take throughout the sustainability materiality assessment process.
Blog

Introducing The Sustainability Management Software Landscape Report And Forrester Wave™ Evaluation

Abhijit Sunil April 17, 2024
Environmental sustainability is a compliance, accounting, and data management challenge for companies. So it's not surprising that the sustainability management software market is expanding rapidly. Learn more about these trends in this preview of our new Wave and Landscape reports on sustainability management software.
Blog

The European Cybersecurity Consulting Services Market Is Ready For Disruption

Madelein van der Hout March 12, 2024
As digital threats grow more sophisticated and European and international regulatory landscapes more intricate, the role of cybersecurity consulting services is critical. Hence, I’m excited to announce The Forrester Wave™: Cybersecurity Consulting Services In Europe, Q1 2024 (available for Forrester clients). In this report, my colleagues and I scrutinize the offerings of major players in […]
More posts