07
Feb 14

SecurityWeek – Understanding IT Risk from the Business Perspective

Most Organizations Lack the Tools and Processes to Assess and Prioritize Risks and Vulnerabilities from the Business Perspective…

Recent security breaches at major retailers such as Target, Neiman Marcus and Michaels Stores have given further visibility of and placed a greater urgency around IT risks that have a direct impact on the business. For many years, information security has taken a back seat to other corporate priorities, but security has evolved — and moved up the corporate ladder — from simply restricting access to a few monolithic systems, to enabling safe access in a business environment that is dynamic, global, and always on.

Security is no longer just a technical issue that can be managed in bits and bytes; it’s a core business issue. Modern networks and data centers consist of many complex and intertwined business applications — from commercial off-the-shelf applications such as SAP and SharePoint, to homegrown applications performing custom business logic, to 3rd party cloud-based services — all are critical for the business to run.

A security breach or an outage to a business application or an entire network has a direct impact on a company’s bottom line. Security has to be effective enough to minimize risks to the business but also must enable the business to be agile in order to stay relevant and competitive. This requires a different approach to vulnerability management and a shift in the way security is viewed.

More of the SecurityWeek post from Nimmy Reichenberg


06
Feb 14

Tech Time Tea – How PaaS and DevOps are the next big wave in Enterprise Cloud computing

Cloud computing, a disruptive phenomena has gone mainstream in 2013 and now in 2014, PaaS promises to revolutionize the enterprises globally. Although virtualisation of cloud computing is now ubiquitous, It is the implementation of private PaaS, a competitive and evolving service model along with DevOps internally for enterprise organization that promises to drive the next big wave in cloud computing. Cloud computing itself too has tremendously evolving from just being a software-as-a-service to complex forms that also includes hardware and platform as a service. The three service models namely IaaS, PaaS and SaaS too are now showing signs of integration through 2014 with SaaS as the dominant service model by 2015. For 2014, The spotlight is on PaaS and Enterprises across globe are rapidly adopting PaaS (Platform-as-a-Service), as a delivery model for software application development. However, even within PaaS, enterprises are in need for a faster delivery of software developments therefore a hybrid of private PaaS and DevOps emerges as better option. By working around the respective trade offs of PaaS namely extreme productivity at the expense of control and of DevOps namely high level of control and flexibility at the expense of productivity, Enterprises seek to tap into the benefits of Hybrid cloud computing. Thus by utilising DevOps as foundation for PaaS, Enterprises can have the control of DevOps and productivity of PaaS. This enables to bring more fluidity to automation, continuous delivery and integration. Such a hybrid system allows for significant cost advantage by reducing development cost and increasing margins.

More of the Tech Time Tea article


04
Feb 14

DevOps is not a technology problem. DevOps is a business problem.

DevOps is not a technology problem. DevOps is a business problem.


04
Feb 14

The Enterprise Architect Paradox

The other day, I received the nicest note from Ivan Lazarov, Chief Architect – Enterprise Business Solutions at Intuit. Ivan wrote, “I recently read your book The CIO Paradox and a lot of what you wrote resonated with me. I even took the list of CIO paradox statements and with very little modification translated them to Enterprise Architecture Paradox statements.”

I really liked Ivan’s translation of the CIO Paradox into an EA Paradox, so I thought I would share it with all of you. Note: Ivan’s changes from the original CIO Paradox are in italics.

The Enterprise Architecture Paradox

• Your Role

–You were hired to be strategic, but spend a lot of your time on operational issues and convincing operationally focused folks that they don’t want to “just plug the hole for right now.”

More of the CIO.com article by Martha Heller


03
Feb 14

Mindjet: The High Cost of Multitasking [INFOGRAPHIC]

Even with all of the blogs, statistics, and other cautionary tales warning people about the consequences of multitasking, it’s still today’s most popular (and seemingly unavoidable) way to work. Modern life is hard, y’all — we have more gadgets and entertainment channels distracting us than ever before, higher expectations of output at a greater frequency and with infinitely faster turnaround. And if we’re being honest, the constant exposure to other people who at least seem to be doing it all is enough to make many of us go into overdrive.

More of the Mindjet post


20
Jan 14

Fast Company – 6 Habits Of Resilient People

On April Fool’s Day 2011, I was unexpectedly diagnosed with early-stage invasive breast cancer. As a freelance writer with a career I love and a family that depends on my income, I spent most of the year juggling surgeries, chemotherapy, and radiation with assignments, interviews, and youth soccer schedules. Throughout, friends and colleagues seemed surprised that I remained relatively active and pretty optimistic.

What else was there to do, I wondered. Taking to my bed for the better part of a year wasn’t an option for my personality or my bank account. Why not look at the bright side of early diagnosis and great prognosis and keep going? During that time, I contributed to two books, wrote dozens of articles and ended the year with a clean bill of health.

More of the Fast Company article by Gwen Moran


16
Jan 14

The Virtualization Practice – Something Is Wrong: It Must Be the Hypervisor!

If you work in any virtual or cloud environments, how many times have you heard that statement as soon as any kind of problem surfaces? Way back when during the twentieth century, as a problem deflection, the network would immediately be blamed. As we got into the twenty-first century, virtualization quickly became the go-to area for any and all problems. As part of the virtualization and cloud computing teams, we would have to prove that a problem was not caused by virtualization before any other teams would really dig in and troubleshoot the issue. Even after the fourteen years since the turn of the century and the mainstream acceptance of virtualization technology as a whole, I still see that kind of blame mentality today. And just when I thought I’d heard it all when it comes to virtualization blame, a news story comes out that takes this immediate blame game to a whole new level.

It has been reported that on December 29, 2013, the official website for the OpenSSL code library was compromised in an incident that caused great concern among security professionals. Although the actual code repositories were untouched, the breach left defacement on the OpenSSL home page. Upon discovering the defacement, OpenSSL immediately restored the index.html file from backup and then started the forensics, investigation, and recovery process. So far, so good, right? Well, by New Year’s Day, OpenSSL had issued an advisory stating that “the attack was made via hypervisor through the hosting provider and not via any vulnerability in the OS configuration.” This advisory, which lacked any real details, immediately raised the question of whether the attack could be exploited to target other sites that utilize the same service. Without finishing the forensic investigation, OpenSSL had jumped the gun and deflected blame to the hypervisor. Once the advisory placed the blame on the hypervisor, it did not take long before people started to realize that the hypervisor under suspicion appears to have been VMware’s ESXi server.

As a result of the advisory, the VMware Security Response Center started to actively investigate the incident in order to understand if and how any VMware products were involved and whether VMware needed to take any action to ensure customer safety.

More of The Virtualization Practice post from Steve Beaver


15
Jan 14

WorkingHardInIt – How To Measure IOPS Of A Virtual Machine With Resource Metering And MeasureVM

The first time we used the Storage QoS capabilities in Windows Server 2012 R2 it was done in a trial and error fashion. We knew that it was the new VM causing the disruption and kind of dropped the Maximum IOPS to a level that was acceptable. We also ran some PerfMon stats & looked at the IOPS on the HBA going the host. It was all a bit tedious and convoluted. Discussing this with Senthil Rajaram, who’s heavily involved with anything storage at Microsoft he educated me on how to get it done fast & easy.

More of the WorkingHardInIt.com post


03
Jan 14

Mashable – 3 Reasons Why Your Business Technology Is Failing

As businesses depend on technology to get more and more work done, the rate at which that technology is failing them is on the rise, new research shows.

A study by technology-performance firm Compuware Corp. revealed that businesses of all sizes face pervasive technology failures, with more than half registering a significant technology failure within the past year and 81% indicating they had the same fiasco occur multiple times. Overall, nearly half of the companies surveyed said they experience tech-performance issues daily, while more than 25% reported that the frequency of failures is increasing.

Compuware CEO Bob Paul said that, at a time when technology permeates the operational fabric of every business, technology performance becomes a key competitive differentiator.

More of the Mashable article


20
Dec 13

Baseline – Why Employees Bring Their Clouds to Work

When organizations don’t provide an approved cloud application that enables employees to share and exchange files instantly, users will bring their own cloud.

Before “cloud sprawl” can be fully understood, we need a basic understanding of cloud computing. One useful definition is: “a colloquial expression used to describe a variety of different types of computing concepts that involve a large number of computers connected through a real-time communication network (such as the Internet).”

The phrase also commonly refers to virtual servers that store information for an organization, including saved documents, organizational data and software programs. Understanding this, we can define cloud sprawl.

Cloud sprawl is the distribution of organizational data across multiple cloud-based applications. For example, having different business departments using different clouds—such as Dropbox, Google Drive, SkyDrive, iCloud and others—leads to cloud sprawl. This is not a good situation because the CIO and IT asset managers have lost control, corporate data is scattered about on multiple platforms and data security is at risk.

More of the Baseline magazine article by Jonathon Kirby