Greg Young

A member of the Gartner Blog Network

Greg Young
Research VP
6 years at Gartner
22 years IT security

Greg Young is a research vice president in Gartner and the lead analyst for network security. Mr. Young has experience in IT security in product companies, and in both the private and public sectors. He spent his military career in technology security… Read Full Bio

Coverage Areas:

In The Works: Hype Cycle for Infrastructure Protection 2008

by Greg Young  |  September 14, 2008  |  Comments Off

This year it was my turn to lead the update to the Hype Cycle for Infrastructure Protection. (HCIP to make your reading easier).  There are 3 HCs underway in security right now: HC for Data and Application led by analyst Jay Heiser, the HCIP, and an ‘umbrella’ HC for Information Security led by Managing VP Ray Wagner.  This year’s HCIP will reflect the convergence of only a few safeguards and the introduction of new safeguards as a result of the evolving threat.

The HCIP has 30 Technology Profiles (TP) or ‘dots’ representing a safeguard that warrants incusion. Each TP has an author and may have co-authors.  Each TP is reviewed extensively by individual peer review, group review, management review, editorial review, and review by the other HC leads  ….  About 12 analysts are listed as author in the HCIP, and about another 10 people are handling quality, production, graphics, and editorial steps.  I wanted to blog this to give a glimpse into the degree of rigor that goes into a research note and that no note is a solo effort – even the shortest document, a First Take, has a team of review and fact-checking behind it although only the primary author’s name may appear on it. 

If you want to get some more detailed information on HCs, Jackie Fenn and Mark Raskino have an HC blog and an upcoming book entitled “Mastering the Hype Cycle”.

After so much effort to get it right, it is still just a snapshot in time.  If you are basing a significant IT decision on any research piece, or just have a question about what analysis went into an element of it, I encourage our customers to schedule an inquiry (no matter how brief the question) and speak to the author.  We always have more or more timely information available than what made it into a research note, and we can filter the analysis to your specific use-case. 

Along with my colleague John Pescatore, I am also working on the Magic Quadrant (MQ) for Enterprise Network Firewalls.  This MQ is proceeding along well.  More on the MQ in upcoming blog entries. 

 

Comments Off

Category: Security Research In Progress     Tags: