Security and Privacy

News Analysis

• Publication of Tax Details on Web Gives Glimpse Into Future
  7 May 2008
• Microsoft COFEE Brews Concern Over Penetration Tools
  5 May 2008
• Hitachi/M-Tech Deal Creates New Pacific Region IAM Player
  11 April 2008
• Effort to Address Online Reputation Scoring Is Big First Step
  8 April 2008

Featured Research

• Critical Capabilities for Security Information and Event Management Technology, 2008
  7 May 2008
• Q&A on the Value of Quantifying Risk vs. Qualifying Risk When Communicating With the Business
  1 May 2008
• Highlights From the Security and Risk Track at Symposium/ITxpo
  1 May 2008
• SIP: A New Foundation for Enterprise Communications
  30 April 2008
• What Every IT Manager Should Know About Digital Forensics
  30 April 2008
• A Risk Hierarchy for Enterprise and IT Risk Managers
  25 April 2008
• U.K. Attempt to Shift Online Bank Fraud Liability to Customers Is a Mistake
  23 April 2008
• Trusted Portable Personality Devices Promote Secure Access
  22 April 2008
• Key Issues for an Electronic Discovery Project, 2008
  18 April 2008
• The Four Varieties of End-User Experience Monitoring
  17 April 2008
• Assessing Microsoft Exchange/Outlook E-Mail Choices for Remote Access
  16 April 2008
• Tutorial on How to Move Beyond Security Awareness to Create a Risk-Conscious Culture
  11 April 2008
• Disaster Recovery Spending Trends
  11 April 2008
• Ignoring Instant Messaging at Work Won't Make It Go Away
  10 April 2008
• Cool Vendors in Intellectual Property, 2008
  8 April 2008

Wi-Fi Best Practices

• Introduction to Wi-Fi Security Best Practices
  21 November 2006
• Wi-Fi Security Best Practices for Traveling Employees
  21 November 2006
• Wi-Fi Security Best Practices for Employees Working at Home
  21 November 2006

The Basics

Essential concepts and fundamental principles

• Key Issues for Identity and Access Management, 2008
  7 April 2008
• 2008 Update: What Organizations Are Spending on IT Security
  31 March 2008
• Cost Cutting While Improving Security
  20 March 2008
• Key Issues for Infrastructure Protection, 2008
  10 March 2008
• A Taxonomy of Authentication Methods
  29 February 2008
• E-Discovery: Project Planning and Budgeting 2008-2011
  6 February 2008
• Cost Cutting Endpoint Protection Platforms
  5 February 2008
• A Decision Framework for Initial Identity and Access Management Planning
  29 January 2008
• Predicts 2008: Mobility and Outsourcing Are Changing Secure Business Enablement
  27 December 2007
• Predicts 2008: Governance, Risk and Compliance Are Critical Issues for Security Professionals
  17 December 2007
• Predicts 2008: Major Market Shifts Are Coming in Infrastructure Protection
  17 December 2007
• Introducing the Endpoint Protection Platform
  2 January 2008
• Identity and Access Management Technologies Defined, 2008
  19 November 2007
• How to Conduct a Disaster Recovery Management Self-Assessment
  9 July 2007
• Addressing HIPAA Security, Part 1: The Standards
  26 June 2007
• Addressing HIPAA Security, Part 2: 'Rightsizing' Compliance
  26 June 2007
• Best Practices in User ID Formation
  11 June 2007
• Best Practices for Question-and-Answer Identity Verification Methods
  4 June 2007
• Security Considerations and Best Practices for Securing Virtual Machines
  6 March 2007
• Key Selection Criteria for Enterprise Digital Rights Management Products
  28 February 2007
• Mainframe Application Security: Strengths, Weaknesses, Opportunities and Threats
  10 November 2006
• Best Practices for Network Vulnerability Assessment
  18 September 2006
• Articulating the Business Value of Information Security
  21 July 2006
• Security Controls and Policy Management Defined
  7 July 2006
• Choosing a Security Consulting Service Provider
  3 July 2006
• Choosing Risk Management Methods
  30 June 2006
• Best Practices for Conducting a Business Impact Analysis
  30 June 2006
• Best Practices Checklist for Web Services Security
  12 May 2006
• The Do's and Don'ts of Identity and Access Management
  4 April 2006
• Recommendations for Information Security
  16 February 2006
• What to Look for in a Wireless Intrusion Prevention System
  16 February 2006
• Structure and Content of an Enterprise Information Security Architecture
  23 January 2006
• Ten Recommendations to Prevent a Successful Attack
  20 January 2006
• Essential Incident Response Activities During the First 24 Hours
  13 January 2006
• The Top Five Issues of Chief Information Security Officers
  10 January 2006
• Establish an Effective Information Security Program, Part 1: Structure and Content
  12 September 2005
• Establish an Effective Information Security Program, Part 2: Pitfalls and Best Practices
  13 September 2005
• Eight Steps Needed to Define Reasonable Security
  1 June 2005

Spotlights

Research collections focusing on current issues

• Fellows Interview: Gartner's Interview With Identity 2.0 Thought Leader Kim Cameron
  20 November 2007
• Introducing the Hostile Information Ecosystem
  27 July 2007
• Augment Security Processes to Deal With the Changing Internet Threat
  2 March 2006
• Recommendations for Information Security
  16 February 2006
• Hurricane Katrina Highlights Need for Disaster Preparedness
  1 December 2005

Hype Cycles

The wave of the future — or just hype? Gartner Hype Cycles show the difference

• Hype Cycle for Information Security, 2007
  4 September 2007
• Hype Cycle for Legal and Regulatory Information Governance, 2007
  16 July 2007
• Hype Cycle for Compliance Technologies, 2007
  11 July 2007
• Hype Cycle for Regulations and Related Standards, 2007
  15 January 2007
• Hype Cycle for Data and Application Security, 2007
  21 December 2006

Magic Quadrants

Which vendors are leaders, visionaries, challengers or niche players

• Magic Quadrant for Security Information and Event Management
  8 May 2008
• MarketScope for Network Access Control, 2008
  25 March 2008
• Enhanced Vendor Commentary on the 2007 E-Mail Encryption Magic Quadrant
  8 April 2008
• MarketScope for Spreadsheet Control Products, 2008
  11 March 2008
• MarketScope for IT Governance, Risk and Compliance Management, 2008
  11 February 2008
• Magic Quadrant for Endpoint Protection Platforms, 2007
  21 December 2007
• Magic Quadrant for SSL VPN, North America, 3Q07
  6 December 2007
• MarketScope for Public Safety Geographic Information Systems, 2H07
  31 October 2007
• Magic Quadrant for Web Access Management, 2H07
  29 October 2007
• Magic Quadrant for Enterprise Network Firewalls, 2H07
  13 September 2007
• Magic Quadrant for Mobile Data Protection, 2007
  10 September 2007
• Magic Quadrant for Enterprise Single Sign-On, 2007
  30 August 2007
• Magic Quadrant for User Provisioning, 2H07
  23 August 2007
• Magic Quadrant for Secure Web Gateway, 2007
  4 June 2007
• Magic Quadrant for Content Monitoring and Filtering and Data Loss Prevention, 2Q07
  13 April 2007

Vendor Ratings

The products, strategies and viability of specific vendors

• Cool Vendors in Intellectual Property, 2008
  8 April 2008
• Cool Vendors in Security Services, 2008
  4 April 2008
• Cool Vendors in Infrastructure Protection, 2008
  4 April 2008
• Cool Vendors in Identity and Access Management, 2008
  4 April 2008
• Cool Vendors in Data Protection, 2008
  20 March 2008
• Yesterday's Cool Vendors in Governance, Risk Management and Compliance: Where Are They Now?
  19 April 2007
• Yesterday's Cool Vendors in Threat and Vulnerability Management: Where Are They Now?
  19 April 2007
• Yesterday's Cool Vendors in Secure Business Enablement: Where Are They Now?
  19 April 2007

Product Profiles

Comparing the key features of competitive products

• Static Application Security Testing: Vendors and Products, Part 3
  2 August 2007
• Static Application Security Testing: Vendors and Products, Part 2
  2 August 2007
• Static Application Security Testing: Vendors and Products, Part 1
  2 August 2007