Key Takeaways from the Forrester Security & Risk Summit: The Future of Risk Is Continuous and Dynamic

Agreement that CISOs need tools that can turn complicated security data into clear, actionable steps.

By Resha Chheda

I recently attended the Forrester Security & Risk Summit, and it was an eye-opening experience. The discussions revolved around the big changes in our industry, from how we use technology to how we handle risk in a faster-paced world. Below, I’ve highlighted some of the sharpest insights from the Summit, featuring perspectives from industry leaders who are redefining how we think about security, risk, and the future of the digital world.

Rethinking Risk Management for Today’s Complex World

Risk was a major topic throughout the event. Amy DeMartine, Forrester VP and Research Director, highlighted how, while we talk about “risk” a lot in business, many people don’t really understand it. According to a survey she shared, 21% of leaders say they struggle the most with keeping a constant eye on risks.

Amy also challenged the idea that risk is always bad. She encouraged businesses to think about how certain risks—if taken in the pursuit of business objectives—can lead to opportunities and growth.

Forrester Senior Analyst Cody Scott addressed a common problem in risk analysis—qualitative “heatmaps.” These visual tools are often used to present risks, but without strong data to back them up, Cody said they’re not very useful. Instead, he suggested using FAIR (Factor Analysis of Information Risk) to calculate risks reliably. This approach allows businesses to focus on real facts and numbers, not guesses.

Safe Security team at the Forrester conference

The Need for a Continuous, Dynamic Risk Model

Alla Valente, Forrester Senior Research Analyst, expanded on this forward-looking approach, critiquing the traditional “three lines of defense” model in risk management. She asserted that this framework—while historically useful in ensuring segregation of duties—is now a bottleneck that prevents organizations from managing risk effectively. “Risk is dynamic, risk is continuous, cyber risk is business risk,” Scott and Valente emphasized.

She advocated for a value-driven, continuous risk management model integrated across stakeholders, processes, and data streams. By doing so, organizations can create feedback loops that provide deeper insights and actionable strategies for managing risk in real-time.

CISOs Are Becoming Key Players in Business Decisions

Another major insight was how the role of CISOs (Chief Information Security Officers) is growing. A CISO’s job isn’t just about protecting against cyber threats anymore—it’s about leading the way in managing cyber risk to help the business achieve its goals.

To do this, they need tools that can turn complicated security data into clear, actionable steps. 

To achieve this, CISOs need the right tools—not just for security but for translating raw security signals into actionable insights. Enter SAFE X, which was introduced at the Summit as a game-changing solution. SAFE X is an AI-powered platform that helps CISOs manage risk smarter, faster, and in a business-friendly way. It’s like having an intelligent assistant that connects all the dots for you, so you can focus on what really matters.

Omar Khawaja, Databricks CISO, Client, and Safe Security CEO Saket Modi led a Forrester GenAI session

Safe Security President Nick Sanna (left) and CEO Saket Modi (right) at Safe Security’s Forrester Summit session on GenAI-related risk

The GenAI Revolution and the Future of the Internet

“GenAI will destroy the Internet and Google as we know them today,” said George Colony, CEO of Forrester, in a bold declaration that set the tone for the event. His insights on the impact of generative AI (GenAI) on consumer experiences were both provocative and visionary. Colony questioned why users still interact with cumbersome menus and interfaces when GenAI can give us a “big fat prompt” where we ask for what we need in natural language—and get exactly that.

This is more than just a shift in how we experience the web. It’s a transformation that tears down the artificial walls between organizations and their customers. “GenAI is the hammer that will destroy the walls that stand between your organizations and your customers,” noted Colony. The simplicity, accessibility, and personalization of this future promise unprecedented opportunities for both businesses and consumers.

Safe Security CEO Saket Modi at the Forrester summit

Safe Security’s Vision Is on the Right Track

For those of us championing the need for continuous, value-driven risk management solutions, the discussions at the Forrester Summit were nothing short of validation. At Safe Security, we’ve long advocated for integrating technology, AI, and data into a unified ecosystem that empowers organizations to manage cyber risk dynamically. The industry’s reaction and alignment at this Summit reaffirmed why Safe Security has seen record-breaking growth.

We were not just absorbing ideas at the Summit; we were excited to share SAFE X, our vision for providing CISOs the tools they need to lead. SAFE X is built to support modern CISOs in their role as a true strategic business partner, finally bridging the gap between technical security measures and business value.

Final Thoughts

The Forrester Security & Risk Summit was a reminder that our industry is moving fast. GenAI is changing how we connect with technology and each other. Risk management is becoming more complex and needs more modern solutions. And CISOs are stepping into bigger roles as strategic business leaders.

For those ready to adapt to these changes, the tools are already here. SAFE X is one such tool, built to help businesses not just keep up but stay ahead. The future is continuous, dynamic, and full of opportunities—if you’re ready to take the leap!

Get started with a demo of Safe Security’s SAFE One platform. The only AI-driven platform to unify your first-party and third-party cyber risk management, enabling your business to safely go faster.