More from Katie Norton

Katie Norton is a Research Manager for IDC’s DevSecOps and Software Supply Chain Security research practice. In this role, she is responsible for researching, writing, and advising clients on the fast-evolving DevSecOps and software supply chain security markets. With her background in research administration and data analytics, Katie takes a data-first approach in her market analysis.

Katie’s core research areas include how security is integrated into the software development lifecycle, exploring how development teams take ownership of security and collaborate with AppSec teams, and examining the drivers of DevSecOps adoption. She also explores buying patterns and trends for DevSecOps and software supply chain security tooling. Additionally, Katie authors industry leading research around defining the software supply chain security market and helping end users understand how to secure their software factories. Other topics include application security posture management (ASPM) and application vulnerability management, securing AI applications, AI uses cases in DevSecOps, and SBOM generation and management.

After receiving her master’s degree in Research Administration, Katie has worked as an analyst in both the private and public sectors. Prior to joining IDC, she was a senior data analyst at startup where she sourced, vetted, and planned the extraction of data for the company’s two data-as-a-service platforms in the Emergency Management and Energy industries. Katie also worked as an academic program analyst at Central Michigan University (CMU). There, she had end-to-end ownership of the academic program market intelligence process, which utilized quantitative methodologies to model the competitive landscape, economic outlook, and student demand for all levels of degree programs proposed at CMU.