Privacy, Security & Risk

Insights

PODCAST

Brand Security In The Post-Truth Era (Live)

What It Means September 6, 2018

The bad guys win in this one. Principal Analyst Jeff Pollard tells an attack story that will keep your PR team up at night and explains how to defend your brand against fake content.   Featuring: Jeff Pollard, VP, Principal Analyst Show Notes: Attackers impersonate users and steal information — we know this. But when their objective is to distort our source of truth, what is at stake?  In his keynote […]

Listen Now
PODCAST

Risky Business: Startups And Security

What It Means August 16, 2018

What do seat belts and security policies have in common? They’re life-saving, simple to implement, and people frequently opt to not use them. Principal Analyst Chase Cunningham discusses the risky business of working with unsecure startups.  Featuring: Chase Cunningham, Principal Analyst Show notes: It’s easy to create an app — and thereby create a company — with today’s technology. It’s also easy to build in security from […]

Listen Now
PODCAST

Climate Change As A Business Risk

What It Means July 26, 2018

Climate change poses a serious threat to business operations. Vice President Stephanie Balaouras and Researcher Sal Schiano discuss how firms are preparing for climate uncertainty and why they must do so.    Featuring: Stephanie Balaouras, Vice President, Research Director, and Sal Schiano, Researcher.   Show Notes: Rising sea levels, droughts, severe weather, threats to supply chains: Climate change is here, and businesses must contend with a […]

Listen Now
PODCAST

The Zen Of Zero Trust

What It Means April 26, 2018

Forrester Principal Analyst Chase Cunningham explains Zero Trust: the concept behind the framework and how companies should implement it to protect their business. Featuring: Chase Cunningham, Principal Analyst Show notes: Traditional perimeter-based security is a moat-and-castle strategy: Build high walls around the network to keep the bad guys out, and trust that no one inside is […]

Listen Now
PODCAST

The Dark Side Of Data Commercialization

What It Means April 19, 2018

Forrester Principal Analyst Jeff Pollard discusses the surveillance economy: the way that companies use personal data to influence and manipulate consumers’ attitudes, behaviors, and decisions. Featuring: Jeff Pollard, Principal Analyst Show notes: The surveillance economy sounds like an Orwellian nightmare: Consumers are watched, listened to, and then manipulated as their devices monitor both online and offline […]

Listen Now
PODCAST

Russia's Latest Cyberattack Sheds Light On Infrastructure Vulnerabilities

What It Means March 29, 2018

Forrester Principal Analyst Chase Cunningham describes how Russia’s cyberattack on US infrastructure sends a critical message to firms: Prioritize security or expect risk around business continuity, brand trust, and more. Featuring: Chase Cunningham, Principal Analyst Show notes: With exponential digital opportunity comes exponential risk; as long as governments and companies are innovating and digitizing their devices, […]

Listen Now
BLOG

Next-Generation Access and Zero Trust

Chase Cunningham March 27, 2018

A few years ago, the concepts of microsegmentation and microperimeters for Zero Trust were championed by former Forrester analyst John Kindervag. He showed us how those concepts and their technologies could enable a more secure enterprise. Once those concepts and their associated best practices hit the street, organizations from VMware to Cisco Systems to Palo […]

Read More
BLOG

Let's Address Cybersecurity's Gender Disparity

Stephanie Balaouras February 27, 2018

The most infuriating advice I’ve received about succeeding in cybersecurity is to, “Have a thick skin,” usually followed by, “Don’t take him seriously, he doesn’t even realize what he’s saying.” These are not words of wisdom—they’re a defense of predatory behavior that belittles the issues women face every day and normalizes sexual harassment. For my […]

Read More
PODCAST

The Future Under The GDPR

What It Means February 1, 2018

With the deadline for GDPR compliance looming in May 2018, Analyst Enza Iannopollo discusses the future under the GDPR — what choices companies can make and which firms should be truly concerned. Featuring: Enza Iannopollo, Analyst Show notes: On May 25, we move from fretting about the General Data Protection Regulation (GDPR) — and the pending […]

Listen Now
BLOG

Celebrate Data Privacy Day By Learning More About Your Consumers’ Privacy Attitude And Behaviors

Enza Iannopollo January 30, 2018

When growing demand for more transparent information and control over personal data meets new rights and safeguards that enable consumers and employees just to do that, it’s an event to celebrate — especially on Data Privacy Day. Many firms around the world are working hard to make the May deadline, when supervisory authorities will start […]

Read More
BLOG

The Equifax Breach Will Haunt Us In Years To Come

Amy DeMartine December 19, 2017

Data breaches are now so common – and so large – that we measure them in percentage of worldwide internet users. Although Equifax doesn’t even make it into the top 5 at 4.08% of the approximately 3.5 billion internet users, news of it rocked citizens of the US when announced. The Equifax breach has unique […]

Read More
BLOG

Uber's Uber Breach: A Stunning Failure In Corporate Governance And Culture

Heidi Shey November 29, 2017

When a breach is announced most security & risk pros are not too surprised. Yet Uber found a way to make the industry raise our collective eyebrows when it was discovered that Uber not only suffered a breach in late 2016 and failed to notify affected parties, but leadership appeared to take things a step further by engaging in a conspiracy to conceal the event by paying hush money to the hackers/extortionists and hiding it from the General Counsel […]

Read More
BLOG

McAfee acquires CSG / CASB vendor SkyHigh Networks – two years too late?

Andras Cser November 27, 2017

In the light of large network security vendors (Cisco, Palo Alto, Symantec, Zscaler, etc.) acquiring or building Cloud Security Gateway (CSG, also known CASB) vendors, it comes as little to no surprise that McAfee also invested in this area. In Forrester’s estimates, SkyHigh annual revenues were around USD $40-45 million/year. Looking at similar deals, Forrester […]

Read More
PODCAST

Identity For Profit

What It Means November 16, 2017

Forrester Vice President and Principal Analyst Andras Cser discusses how identity management can enhance customer experiences and drive growth. Featuring: Andras Cser, Vice President, Principal Analyst Show notes: In a digital world, identity — who an individual is — is not a simple question. “I” can be a name, email address, phone number, biometric pattern, social […]

Listen Now
PODCAST

Data As Currency: The Risk Of Insider Threats

What It Means October 26, 2017

Senior Analyst Joseph Blankenship discusses insider threats — how accidental and malicious misuse of company data threatens business performance and customer trust. Featuring: Joseph Blankenship, Senior Analyst Show notes: When we think corporate risk, we mostly think about cybersecurity and the growing risk from external threats — individual hackers, professional hacking organizations, and even nation-states. These […]

Listen Now
BLOG

Victim Blaming Won't Stop Global Ransomware Attacks

Jeff Pollard June 27, 2017

The security industry has an accountability crisis. It’s time to talk about it, then fix it. Whenever a massive cyber attack occurs inevitably a chorus of voices rises to blame the victims. WannaCry on 5/12 and Petya on 6/27 yet again kicked off the familiar refrains of: “If users didn’t click on stuff they shouldn’t….” […]

Read More
BLOG

Countdown To The GDPR

Fatemeh Khatibloo May 25, 2017

It’s May 25th, and if you’ve been following along with our published research, you know that today marks a very important milestone: you have 365 calendar* days to bring your organization into compliance with the EU’s General Data Protection Regulation and the as-yet-unfinalized (!!!) ePrivacy Regulation. I spoke with Victor Milligan and Jennifer Isabella, the hosts of […]

Read More
PODCAST

Countdown To GDPR

What It Means May 25, 2017

Forrester Principal Analyst Fatemeh Khatibloo examines the impact of the new General Data Protection Regulation (GDPR), which rewrites privacy rules and converts privacy as a human right to a force of market disruption. Featuring: Fatemeh Khatibloo, Principal Analyst Show notes: One year. That is how much time companies have to internalize and act on the far-reaching […]

Listen Now
PODCAST

Prioritizing Cybersecurity: Learnings From WannaCry

What It Means May 18, 2017

Forrester Principal Analyst Jeff Pollard explains the WannaCry ransomware attack and what it means to business and technology leaders as companies and institutions become increasingly under siege from cyberthreats. Featuring: Jeff Pollard, Principal Analyst Show notes: The threat spectrum has changed. Severe cyberthreats were the exception, and most institutions and companies could manage against the threat […]

Listen Now
PODCAST

The CIA Breach And The IoT Security Wake-Up Call

What It Means March 23, 2017

Forrester Principal Analyst Jeff Pollard discusses the implications of the CIA breach — exposing the immediate and far-reaching security threats driven by the internet of things (IoT) at a time when many companies are prioritizing time-to-market over minimizing risk. Featuring: Jeff Pollard, Principal Analyst Show notes: The CIA breach caught our collective attention. It triggered old […]

Listen Now