Stephanie Balaouras

1 month ago | forrester.com | Allie Mellen |Stephanie Balaouras

2025 started with a bang! Technology and geopolitics are changing faster than many can keep track. There’s an announcement of a new, benchmark-shattering generative AI seemingly every week. Planned job cuts across US employers are at their highest levels since 2020. We are on the brink of a global trade war, and geopolitical tensions are high. On the plus side, there was a reported 35% year-over-year decrease in ransomware payments from 2024.

1 month ago | forrester.com | Indranil Bandyopadhyay |Linda Ivy-Rosser |Stephanie Balaouras

Data strategy is no longer a nice-to-have. In 2025, regulations like HIPAA, GDPR, and CCPA are tighter than ever, AI keeps making quantum leaps, and customers want hyper-personalization on demand. The winners won’t just be those with the largest data sets, but those who know how to wield them –  across the organization, at scale, and with trust to predict shifts, tailor offers, and outmaneuver the competition.

1 month ago | forrester.com | Stephanie Balaouras |Meng Liu

Forrester is delighted to announce the opening call for our annual Security & Risk Enterprise Leadership Award. This award recognizes organizations that have transformed their security, privacy, and risk management functions into capabilities that fuel the organization’s reputation for trust and its long-term success. In this era of volatility, a reputation for trust is essential. Our award is unique because it:Celebrates the organization, not a single individual.

Nov 25, 2024 | forrester.com | Janet Farrar Worthington |Christopher Condo |Andrew Cornwall |Stephanie Balaouras

In Forrester’s Security Survey, 2024, 56% of security decision-makers at firms that experienced an external attack indicated that the breach was the result of an application-related exploit. Why do we continue to be so bad at this!? Part of the problem is that the journey to DevSecOps is bumpy and long.

Nov 14, 2024 | forrester.com | Cody Scott |Andras Cser |Stephanie Balaouras

3LOD Is Risk Management’s Single Biggest BottleneckIt’s not you, it’s the model! The three lines of defense (3LOD) concept was initially developed as a corporate governance framework to implement separation of duties requirements under the 2002 Sarbanes-Oxley Act. And in 2013, the Institute of Internal Auditors (IIA) promoted it as a solution to enhance risk management.