Sandy Carielli is a principal analyst at Forrester. She advises security and risk professionals on application and product security, with a particular emphasis on the collaboration among security and risk, product management, application development, operations, and business teams. Her research covers topics such as proactive security design, protecting modern and emerging application architectures, safeguarding applications in production environments, and embedding security throughout the product life cycle.

Sandy has more than 15 years of experience in the security industry working as a software engineer, consultant, product manager and technology strategist. Sandy is a coauthor of the Industrial Internet Consortium’s IoT Security Maturity Model and has spoken at RSA Conference, ISSA and many other regional security events.

Allie Mellen is a Forrester analyst covering topics such as security operations, nation-state threats and the use of automation, machine learning, and AI in security tools. She has been in the technology industry for over a decade undertaking various roles such as a researcher at MIT, running her own engineering consultancy, being a hacker, and finally becoming a security practitioner. She now advises Fortune 500 CISOs and security teams on their detection and response practice.

Allie is a featured speaker at many leading security conferences, including RSA Conference, Black Hat Briefings and HOPE Conference. She is frequently quoted in top business press outlets, including NPR, The Washington Post, The Wall Street Journal, CNN Money, CNBC and Dark Reading.