Security & Privacy Research Center
A holistic approach to building an agile, robust security program.
Talk to an Analyst
View the IT Management & Governance Framework
Great Security Starts With a Great Strategy
Security threats continuously adapt in a battle to circumvent our defenses. When security teams find themselves trapped in a cycle of reacting to every new threat, it is only a matter of time before those defenses are breached. With security and privacy strategies to guide you, it becomes much easier to take a proactive approach to building the capabilities you need to defend your organization. Our security and privacy research center can get you started and put you on the path to proactive cybersecurity.
Security & Privacy Strategy
Start with Strategy. Define what security and privacy capabilities are required by the organization and outline their corresponding priorities.
Start HereSecurity Management
Build effective programs and procedures to manage governance, risk, and compliance within your organization.
Start HerePrivacy Program Management
Build an effective privacy program, secure your data assets and manage privacy compliance.
Start HereSecurity Operations
Improve processes and procedures to identify, protect, detect, and respond to security incidents.
Start HereIdentity & Access Management
Protect your organization and employees through effective identity and access management.
Start HereAPO13
Security and Privacy Strategy
Start with strategy. Define what security and privacy capabilities are required by the organization and outline their corresponding priorities.
Security Strategy & Program Design
Focus first on business value.
Design and Implement a Business-Aligned Security ProgramAlign the information security strategy to organizational goals and risks to create value.
Build an Information Security StrategyLeverage an iterative and repeatable process to apply zero trust to your organization.
Build a Zero Trust RoadmapPRIORITIES: Prepare your organization to respond to an evolving threat landscape.
Security Priorities 2025Build the Security Organization
Every security program is unique; resourcing allocations should reflect this.
Build a Service-Based Security Resourcing PlanDevelop business-aligned security competencies for your IT team.
Build a Plan to Close Your Cybersecurity Competency GapsFind a strategic and security-focused champion for your business.
Hire or Develop a World-Class CISOTRAINING: Upskill your IT team by going beyond certifying knowledge to assuring competence
Cybersecurity Workforce DevelopmentFoster a Security Culture
Drive employee engagement with privacy and security via governance and process integration.
Embed Privacy and Security Culture Within Your OrganizationTurn end users into your organization’s secret security weapon.
Develop a Security Awareness and Training Program That Empowers End UsersFind the right tools to power your security awareness and training program.
Security Awareness & Training ToolsMeasure & Monitor, and Report on Security
Good metrics come from good goals.
Build a Security Metrics Program to Drive MaturityLearn how to communicate security effectively to obtain support from decision-makers.
Present Security to Executive StakeholdersDSS05
Security Management
Build effective programs and procedures to manage governance, risk, and compliance within your organization.
Establish Security Management
You can’t defend against today’s automated attacks with slow and manual processes.
Build an Automation Roadmap to Streamline Security ProcessesGet the budget you deserve.
Build, Optimize, and Present a Risk-Based Security BudgetSecuring information security, physical security, or personnel security in silos may secure nothing.
Integrate Physical Security and Information SecurityEstablish Security Governance
Enhance your overall security posture with a defensible and prescriptive policy suite.
Develop and Deploy Security PoliciesManage Security Risk
Drive employee engagement with privacy and security via governance and process integration.
Embed Privacy and Security Culture Within Your OrganizationTurn end users into your organization’s secret security weapon.
Develop a Security Awareness and Training Program That Empowers End UsersFind the right GRC software providing an overview of your organization’s governance, risk, and compliance.
Governance, Risk, and Compliance (GRC) SoftwareManage Security Compliance
Cost-effective compliance is possible.
Build a Security Compliance ProgramAdd business value with SOC 2 or ISO 27001 certification.
Satisfy Customer Requirements for Information SecurityStart early with a collaborative effort for a successful transition to the new version the PCI DSS.
Prepare for PCI DSS v4.0ITRG06
Privacy Program Management
Build an effective privacy program, secure your data assets, and manage privacy compliance.
Build a Privacy Program
Take out data privacy’s gray areas with a quantitative approach to your program.
Build a Data Privacy ProgramYou’ve mastered the basics, but there are additional risk, data, and measurement tasks to complete.
Mature Your Privacy OperationsNavigate AI privacy and data concerns with a comprehensive privacy impact assessment.
Conduct an AI Privacy Risk AssessmentFind the right privacy program management tools to achieve and maintain data protection compliance.
Privacy Program Management SoftwareManage Privacy Compliance
Quickly address regulatory requirements, even after the deadline.
Fast Track Your GDPR Compliance EffortsGo beyond “checkbox compliance” to stay ahead of the latest regulations.
Comply With the California Privacy Rights ActEstablish an integrated and holistic program to streamline your compliance efforts.
Comply With 2023 US Privacy Laws (Virginia, Connecticut, Utah, Colorado)PRIVACY REGULATION ROUND-UP: This Privacy Regulation Roundup summarizes the latest major global privacy regulatory developments, announcements, and changes.
Privacy Regulation RoundupManage Data Protection
Provide your data with the protection it deserves.
Discover and Classify Your DataDevelop a comprehensive data security plan.
Secure Your High-Risk DataTreat the data risks that will derail your retention schedule.
Build an Effective Data Retention ProgramDSS05
Security Operations
Improve processes and procedures to identify, protect, detect, and respond to security incidents.
Manage Networks & Endpoint Security
Establish security operations with a threat collaboration environment.
Build Your Security Operations Program From the Ground UpOutsource the right functions to secure your business.
Select a Security Outsourcing PartnerPrevent ransomware incursions and defend against ransomware attacks.
Build Resilience Against Ransomware AttacksEndpoint detection & response (EDR) software mitigates malicious software.
Endpoint Detection and Response ToolsManage Cloud Security
Security in the cloud requires solutions, not speculation.
Identify the Components of Your Cloud Security ArchitectureLeverage existing tools and focus on the data that matters the most to your organization.
Prevent Data Loss Across Cloud and Hybrid EnvironmentsFind the right cloud access security broker (CASB) software to enforce security policies in the cloud.
Cloud Access Security Broker (CASB) SoftwareManage Vulnerabilities
Manage the security of your network and applications with the best vulnerability management software.
Vulnerability Management Tools:Get off the patching merry-go-round and start mitigating risk!
Implement Risk-Based Vulnerability ManagementBecause it's likely tomorrow’s law.
Design a Coordinated Vulnerability Disclosure ProgramShift security left to get into DevSecOps.
Embed Security Into the DevOps PipelineManage Security Incidents
Create a scalable incident response program without breaking the bank.
Develop and Implement a Security Incident Management ProgramTrust but verify that you are prepared for the next threat.
Improve Organizational Resilience With a Tabletop ProgramDSS05, DSS06
Identity and Access Management
Protect your organization and employees through effective identity and access management.
Manage Identities & Access
Leverage risk- and role-based access control to quantify and simplify the IAM process.
Simplify Identity and Access ManagementStrong identity security and governance are the keys to the zero-trust future.
Assess and Govern Identity SecurityIdentity Access
Develop a Comprehensive IAM Improvement Strategy
Develop a Comprehensive IAM Improvement Strategy
