Sign in to search Gartner Research

Current Users Sign In New Users Register

topics

Security and Privacy

To prioritize information security and privacy initiatives, organizations must assess their business needs and risks. Gartner research covers the latest threats and countermeasures, technology and market trends, and how to implement security policies and management practices.

Research Fast Finder

Markets Topics Industries

RESEARCH HIGHLIGHT

Security Management Strategy Planning Best Practices

Some of the content presented within this focus area may be premium content.

How to obtain premium research.

Recent Research

Security Management Strategy Planning Best Practices
26 January 2012
The Emergency or Mass Notification Service Market: Now and for the Next Five Years
26 January 2012
Financial Services Firm Deploys Application Control to Thwart Malware and Other Threats
24 January 2012
Quest Software Acquires Externalized Authorization Management Vendor BiTKOO
25 January 2012
How to Write a Security Incident Response Procedure Document
20 January 2012
The Do's and Don'ts of Using Social Media in Business Continuity Management
19 January 2012
Assessing the Impact of the Euro Crisis on Information Security
19 January 2012
Best Practices for Mitigating Advanced Persistent Threats
18 January 2012
Effective Security Monitoring Requires Context
16 January 2012
Use IAM for Combined Physical and Network Access Cost Savings and Threat Correlation
13 January 2012
DevOpsSec: Creating the Agile Triangle
16 January 2012
Seven Steps to Creating an Effective Computer Security Incident Response Team
11 January 2012
Research Roundup for Infrastructure Protection, 3Q11
10 January 2012
An Introduction to Major Incident Handling
6 January 2012
Twelve Steps to Guide You Through a Major Incident to Mitigate Business Impact
6 January 2012
Creating a Red Book Can Ensure Efficient and Effective Handling of Major Incidents and Outages
6 January 2012
Crisis/Incident Management Defined, 2012
4 January 2012
SAS 70 Is Gone, So What Are the Alternatives?
28 December 2011
Two Simple Techniques to Facilitate Business Alignment
27 December 2011
NAC Strategies for Supporting BYOD Environments
22 December 2011

Magic Quadrants and MarketScopes

Magic Quadrant for WAN Optimization Controllers
24 January 2012
Magic Quadrant for User Authentication
17 January 2012
Magic Quadrant for Endpoint Protection Platforms
16 January 2012
Magic Quadrant for Dynamic Application Security Testing
27 December 2011
Magic Quadrant for Identity and Access Governance
15 December 2011
Magic Quadrant for Enterprise Network Firewalls
14 December 2011
Magic Quadrant for SSL VPNs
12 December 2011
Magic Quadrant for Network Access Control
8 December 2011
Magic Quadrant for Enterprise Information Archiving
6 December 2011
Magic Quadrant for MSSPs, North America
28 November 2011
MarketScope for Web Access Management
21 November 2011
MarketScope for Managed Security Services in Europe
24 October 2011
Magic Quadrant for Enterprise Governance, Risk and Compliance Platforms
13 July 2011
Magic Quadrant for Mobile Data Protection
7 September 2011
MarketScope for Wireless LAN Intrusion Prevention Systems
12 July 2011
Magic Quadrant for Secure Web Gateway
25 May 2011
Magic Quadrant for Security Information and Event Management
12 May 2011
Magic Quadrant for Web Fraud Detection
19 April 2011
Magic Quadrant for Mobile Device Management Software
13 April 2011
MarketScope for Vulnerability Assessment
5 April 2011

Identity and Access Program Management

Use a Structured Approach to Communicate Your Security Strategy
23 November 2011
Roundup of Identity and Access Management Research, 3Q11: Core IAM and IAM Program Management
7 October 2011
Reduce Security Risks of Active Directory Integration With Cloud Services
22 September 2011
Evolution of Identity in the Cloud: Take-Aways From the Cloud Identity Summit
26 August 2011
Best Practices for Identity and Access Management Program Management and Governance
25 May 2011
Strategic Planning Assumptions for IAM, 2011 to 2015
29 March 2011
Best Practices for Identity and Access Management Metrics
23 February 2011
Key Issues for Identity and Access Management, 2011
23 February 2011
Options for Coping With New Identity Islands in the Cloud
19 January 2011

Identity and Access Management

Agenda for Identity and Access Management, 2012
30 January 2012
Quest Software Acquires Externalized Authorization Management Vendor BiTKOO
25 January 2012
Use IAM for Combined Physical and Network Access Cost Savings and Threat Correlation
13 January 2012
Gartner Survey: U.S. Banks Are Improving Much Needed Online Security, but Their Phone Channels Need More Attention
29 November 2011
Predicts 2012: A Maturing Competitive Landscape Brings New IAM Opportunities
28 November 2011
Roundup of Identity and Access Management Research, 3Q11: Topics and Technologies
7 October 2011
Embrace Emerging IAM Administration Trends to Improve the Time to Value
16 September 2011
IAM Foundations, Part 5: Building Your IAM Team
31 August 2011
In the North American E-Signature Market, SaaS Offerings Are Increasingly in Demand
18 August 2011
Identity and Access Governance: Definition and Market
29 July 2011

Identity Verification

Maverick* Research: The Death of Authentication
7 October 2011
Defining Authentication Strength Is Not as Easy as 1, 2, 3; Update
19 September 2011
Plan to Supplement RSA SecurID Replacement Tokens With Other Measures
8 June 2011
A Taxonomy of Authentication Methods, Update
25 May 2011
Gartner Authentication Method Evaluation Scorecards, 2011: User Experience
23 May 2011
Choosing a Replacement for Incumbent One-Time Password Tokens
21 April 2011
Good Authentication Choices for Healthcare Delivery Organizations
21 April 2011
How Much Is That Token in the Window? What You Should Expect to Pay for New Authentication Methods
13 April 2011
Enterprise Options for Federated Single Sign-On to the Cloud
9 March 2011
Authentication: Ten Myths and Misconceptions Debunked
4 March 2011

Infrastructure Protection

Seven Steps to Creating an Effective Computer Security Incident Response Team
11 January 2012
Research Roundup for Infrastructure Protection, 3Q11
10 January 2012
IT Market Clock for Infrastructure Protection, 2011
1 December 2011
Crisis/Incident Management Defined, 2012
4 January 2012
Predicts 2012: Sophisticated Attacks, Complex IT Environments and Increased Risks Demand New Approaches to Infrastructure Protection
29 November 2011
ITIL and Security: Reducing Risk and Increasing Effectiveness Through Integration and Collaboration
22 November 2011
Roundup of Email Research, 4Q10-3Q11
8 November 2011
X.509 Certificate Management: Avoiding Downtime and Brand Damage
4 November 2011
How to Determine If Your Organization Practices Due-Care Security
18 August 2011
Backup and Disaster Recovery Modernization Is No Longer a Luxury, but a Business Necessity
11 August 2011

Application Security

DevOpsSec: Creating the Agile Triangle
16 January 2012
Application Security Testing of Cloud Services Providers Is a Must
17 October 2011
Using SOA Gateways for Secure SOA Communications
6 October 2011
Hype Cycle for Application Security, 2011
18 July 2011
The Five Layers of Fraud Prevention and Using Them to Beat Malware
21 April 2011
Securing Production Data With Dynamic Data Masking
14 February 2011
Key Trends in Application Security Testing
26 January 2011
Application Security Technologies Enable Enterprise Security Intelligence
2 December 2010
Enterprise Fraud and Misuse Management Solutions: 2010 Critical Capabilities
29 October 2010
From Secure Virtualization to Secure Private Clouds
13 October 2010

Data Security

How to Control File Synchronization Services and Prevent Corporate Data Leakage
31 January 2012
Securing Board and Executive Communications on iPads
16 December 2011
How to Organize for Fraud Management
13 December 2011
Is OASIS KMIP Yet Another Hollow Key Management Standard?
1 December 2011
Establishing a Strategy for Database Security Is No Longer Optional
29 November 2011
Identifying the Real Information Security Budget
20 October 2011
Operation Swiper Arrests Underscore Need for U.S. EMV Standard Adoption
11 October 2011
Best Practice for Data Management: Understand Requirements to Access Aging Data
5 October 2011
Best Practices for Developing a Hierarchy for Security Metrics and Reporting
19 September 2011
Guidelines for Selecting Content-Aware DLP Deployment Options: Enterprise, Channel or Lite
23 August 2011

Endpoint and Mobile Security

NAC Strategies for Supporting BYOD Environments
22 December 2011
Evaluating Privacy Risks and Business Benefits in Four Context-Aware Technologies
16 December 2011
Managing Apple Macs in an Active Directory Environment
12 December 2011
Predicts 2012: Enterprises Must Balance Opportunity and Risk in Cloud and Mobile Security
28 November 2011
McAfee Leverages Intel for Deeper Security
14 November 2011
Predicts 2012: Mobile and Cloud Computing Set to Transform Enterprise and Consumer Security Markets
14 November 2011
Despite Apple Flaw, Mature Mobile Platforms Remain Fundamentally Secure
11 November 2011
Seven Steps to Planning and Developing a Superior Mobile Device Policy
5 October 2011
MarketScope for Enterprise Single Sign-On
30 September 2011
Visa's Long-Overdue U.S. EMV Move Will Improve Security, but Do Little to Alleviate PCI Compliance Work
13 September 2011

Message Security

Magic Quadrant for Secure Email Gateways
10 August 2011
Spam Filters Could Cripple Your Emergency Notification System
11 April 2011
Moving E-Mail and Web Security to the Cloud
6 April 2011
Choosing Trusted Portals for Secure External Collaboration
17 March 2011

Network Security

Remote Forensic Software Can Make Digital Investigations More Effective and Less Expensive
21 December 2011
Certificate Authority Breaches Impact Web Servers, Highlighting the Need for Better Controls
18 October 2011
Strategic Road Map for Network Access Control
11 October 2011
Evaluating SSL Certificates for E-Business
30 August 2011
Enterprise Strategies for Mitigating Denial-of-Service Attacks
4 August 2011
IPv6 Migrations Present Challenges for Securing the DMZ
25 July 2011
Security and Risk Management Lessons, Courtesy of WikiLeaks
23 May 2011
Q&A: Determining the Staff Ratio of Administrators to Firewalls
7 April 2011
Next-Generation Firewalls and Secure Web Gateways Will Not Converge Before 2015
5 April 2011

Security Services

Financial Services Firm Deploys Application Control to Thwart Malware and Other Threats
24 January 2012
SAS 70 Is Gone, So What Are the Alternatives?
28 December 2011
Two Simple Techniques to Facilitate Business Alignment
27 December 2011
Toolkit: Creating Data Classification Schemes
15 December 2011
Vendor Focus for Symantec: Security and Compliance Offerings
14 December 2011
Vendor Rating: Symantec
14 December 2011
Vendor Focus for Symantec: Storage and Server Management Offerings
14 December 2011
Seven Keys to Successful and Cost-Effective Risk Oversight
13 December 2011
How to Make the Most of ISO/IEC 27001
9 December 2011
How to Devise a Server Protection Strategy
6 December 2011

Vulnerability Management

Agenda for Security and Risk Management, 2012
31 January 2012
Security Management Strategy Planning Best Practices
26 January 2012
How to Write a Security Incident Response Procedure Document
20 January 2012
The Do's and Don'ts of Using Social Media in Business Continuity Management
19 January 2012
Assessing the Impact of the Euro Crisis on Information Security
19 January 2012
Best Practices for Mitigating Advanced Persistent Threats
18 January 2012
Effective Security Monitoring Requires Context
16 January 2012
NAC Strategies for Supporting BYOD Environments
22 December 2011
How to Deploy SIEM Technology
16 December 2011
Planning for an SIEM Technology Deployment
16 December 2011

RELATED EVENTS

The industry's most strategic conferences for business and IT professionals.

Gartner Security & Risk Management Summit
National Harbor, MD

Gartner Security & Risk Management Summit
Sydney, Australia

Catalyst Conference
San Diego, CA

Contact Gartner

General
+ 1 203 964 0096
Worldwide General Contacts

Become a Client

Media Relations
Worldwide Media Relations

Investor Relations
+ 1 203 316 6537
investor.relations@gartner.com

Office of the Ombudsman
+ 1 203 316 3334
ombudsman@gartner.com

Quote Requests
+ 1 203 316 6178
quote.requests@gartner.com

About Gartner Become a Client Careers Contact Gartner Corporate Information Investor Relations Gartner Newsroom Office Locations Why Use Gartner

Products & Services Consulting Executive Programs Events Gartner Books Gartner Invest Media Products Research

Analyst Relations Quote Requests Reprints Vendor Briefings

Gartner Policies Corrections Governance Office of the Ombudsman Privacy Usage Guidelines

gartner.com Accessibility Glossary Help Online Training Site Index Technical Support Website Terms of Use

©2011 Gartner, Inc. and/or its Affiliates. All Rights Reserved.