<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: collaborative]]></title>
    <link>http://securityratty.com/tag/collaborative</link>
    <description></description>
    <pubDate>Mon, 14 Jul 2008 20:02:59 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Combating Cyber Threats Around the Globe -- A More Collaborative Approach?]]></title>
      <link>http://securityratty.com/article/8df2d8ecd4971660aba1b9067cdcd17d</link>
      <guid>http://securityratty.com/article/8df2d8ecd4971660aba1b9067cdcd17d</guid>
      <description><![CDATA[Governments and law enforcement agencies from North America and Europe continue to increase cooperation and coordination to combat the growing threats of cyber-crime and e-espionage. That was quite...]]></description>
      <content:encoded><![CDATA[<p>Governments and law enforcement agencies from North   America and Europe continue to increase   cooperation and coordination to combat the growing threats of cyber-crime and   e-espionage. &nbsp;That was quite evident at the recent RSA Conference Europe that   was held in London as a significant number of   representatives from governments participated in panels and other events. &nbsp;&nbsp;I   moderated one of those sessions, which was titled &ldquo;<strong>Tackling Cyber-crime and Protecting Critical   Information Infrastructure &ndash; Public Sector Approaches</strong>&rdquo...]]></content:encoded>
      <pubDate>Tue, 11 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/law enforcement agencies">law enforcement agencies</category>
      <category domain="http://securityratty.com/tag/europe continue">europe continue</category>
      <category domain="http://securityratty.com/tag/north america">north america</category>
      <category domain="http://securityratty.com/tag/governments">governments</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/increase cooperation">increase cooperation</category>
      <category domain="http://securityratty.com/tag/cyber-crime">cyber-crime</category>
      <category domain="http://securityratty.com/tag/coordination">coordination</category>
      <category domain="http://securityratty.com/tag/held">held</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1385">Combating Cyber Threats Around the Globe -- A More Collaborative Approach?</source>
    </item>
    <item>
      <title><![CDATA[A horse's ass approach to virtualization security - Part 3 - Data is the "constant"]]></title>
      <link>http://securityratty.com/article/af1e0093472ebbd2f739b12a4817fa7e</link>
      <guid>http://securityratty.com/article/af1e0093472ebbd2f739b12a4817fa7e</guid>
      <description><![CDATA[The third in the series where I am trying to think through the current approaches to securing virtual environments

See part one and two here

Virtualization enables organizations to optimally manage...]]></description>
      <content:encoded><![CDATA[The third in the series where I am trying to think through the current approaches to securing virtual environments...<br /><br />See <a href="http://bitarmor.blogspot.com/2008/10/horses-ass-approach-to-virtualization.html">part one</a> and <a href="http://bitarmor.blogspot.com/2008/10/horses-ass-approach-to-virtualization_22.html">two here</a>...<br /><br />Virtualization enables organizations to optimally manage their infrastructure resources. It can provide significant cost benefits (by sharing resources), flexibility (by just-in-time allocation of resources where they are needed), and agility (speed of provisioning resources).  Therefore, organizations have been able to virtualize:<br /><ul><li><span style="font-weight: bold;">Devices/OS</span>: Companies such as VMWare, Citrix, Microsoft, and Sun are providing hypervisor, virtual machine, and virtual device solutions where several virtual “devices,” “servers,” or “desktops” can mimic separate physical devices.</li><li><span style="font-weight: bold;">Networks</span>: Virtualized networks enable dynamic collaboration by slicing bandwidth into virtual, isolated channels that can be assigned to a particular set of devices, real or virtual.  Setting up new connections and collaborative environments becomes extremely easy.</li><li><span style="font-weight: bold;">Applications</span>: Virtual applications can either be streamed down to execute on local desktops (Microsoft App-V or Altiris SVS) or executed remotely from server farms such as Citrix XenApp.  This allows applications to be portable and accessible from anywhere while reducing inter-application conflicts.</li></ul>However, organizations will never be able to virtualize the fourth element, I talked about in teh <a href="http://bitarmor.blogspot.com/2008/10/horses-ass-approach-to-virtualization_22.html">second blog</a> post — the data itself. The focus of device, network, and application virtualization is about flexibility, resource sharing, and agility. This involves short life spans, since these elements are brought up to fulfill a specific short term task, and upon completion, they are brought down or even deleted. Data, however, has a lifetime <span style="font-weight: bold; font-style: italic;">beyond </span>the short term and will therefore live on for further use or analysis in a non-virtual or subsequent virtual world.<br /><br />This makes data the “constant” in a dynamically changing environment — even if the location of data itself is virtualized. Data will also have the longest lifetime of the four elements in the infrastructure and thus will have to live “outside” of the virtual environment. Therefore, from a security standpoint, it is imperative that data becomes the focus of protection - and we dont just continue protecting the infrastructure.  Data is the critical asset, and since it travels across boundaries and lives longer than virtual elements, it can be easily compromised.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/BitArmor1?a=nM7eM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=nM7eM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=xKbIm"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=xKbIm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=JcSvM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=JcSvM" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/BitArmor1/~4/430031380" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 23 Oct 2008 16:51:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/devices">devices</category>
      <category domain="http://securityratty.com/tag/virtual devices">virtual devices</category>
      <category domain="http://securityratty.com/tag/virtual">virtual</category>
      <category domain="http://securityratty.com/tag/virtual applications">virtual applications</category>
      <category domain="http://securityratty.com/tag/subsequent virtual world">subsequent virtual world</category>
      <category domain="http://securityratty.com/tag/virtual environments">virtual environments</category>
      <category domain="http://securityratty.com/tag/non-virtual">non-virtual</category>
      <category domain="http://securityratty.com/tag/virtual machine">virtual machine</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <source url="http://feeds.feedburner.com/~r/BitArmor1/~3/430031380/horses-ass-approach-to-virtualization_23.html">A horse's ass approach to virtualization security - Part 3 - Data is the "constant"</source>
    </item>
    <item>
      <title><![CDATA[Symantec details grand product-integration scheme]]></title>
      <link>http://securityratty.com/article/13ecf075d3e8fdc048f72c73066a13c3</link>
      <guid>http://securityratty.com/article/13ecf075d3e8fdc048f72c73066a13c3</guid>
      <description><![CDATA[Symantec's Open Collaborative Architecture is an ongoing project that combines its endpoint security suite and backup and recovery products with asset management offerings obtained via the Altiris...]]></description>
      <content:encoded><![CDATA[Symantec's Open Collaborative Architecture is an ongoing project that combines its endpoint security suite and backup and recovery products with asset management offerings obtained via the Altiris acquisition late last year.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:249185b20aac71f3027b7ffd7a44fa7a:9k534hmETp6nRLsKS%2BiaiJdlPk6XpxkYIEFtEiWWDoDA9sFj4AsDGp%2BiSBHUbyZwTKAazcPGR3r7'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:d9ede13e3b6f046e952dd3393b205097:NaopefQ3TJhTH7Q1oZcZhp5olEWRKTt32Haye%2B5%2FNPPT3H3SeIGk0Pt1bRh2POOnU5LzlO2qdTIeIw%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:de332f6869b162a2a318dadabb803cf1:pO%2BEP757PwF3k%2FE2atiIVscaUeG2MJMk%2BmzWVrrG5oSaIG%2BjzV%2FNABZRoa9qGngXmp6YCfmh7at3GA%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:29d8cf09f411b0ae1136f340dee609ee:gyGvzZ92hk9dJeYDdC0QN1NdDwEkhpugDectTaa9VEFOf0eopgCirQVz3WICx42807kKZ2Ws170uZw%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=021b9c32c42a5d25ca5c5f214fd8ad7a" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=021b9c32c42a5d25ca5c5f214fd8ad7a" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Wed, 15 Oct 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/asset management offerings">asset management offerings</category>
      <category domain="http://securityratty.com/tag/endpoint security suite">endpoint security suite</category>
      <category domain="http://securityratty.com/tag/symantec">symantec</category>
      <category domain="http://securityratty.com/tag/altiris acquisition">altiris acquisition</category>
      <category domain="http://securityratty.com/tag/collaborative architecture">collaborative architecture</category>
      <category domain="http://securityratty.com/tag/recovery products">recovery products</category>
      <category domain="http://securityratty.com/tag/project">project</category>
      <category domain="http://securityratty.com/tag/combines">combines</category>
      <category domain="http://securityratty.com/tag/backup">backup</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=021b9c32c42a5d25ca5c5f214fd8ad7a">Symantec details grand product-integration scheme</source>
    </item>
    <item>
      <title><![CDATA[CEP, Event Noise and Asymmetric Event Processing]]></title>
      <link>http://securityratty.com/article/2749df765875344a0e16c9acc0faf260</link>
      <guid>http://securityratty.com/article/2749df765875344a0e16c9acc0faf260</guid>
      <description><![CDATA[In The Genesis of Complex Event Processing: Asymmetric Capabilities I introduced the abstract concept of asymmetric processing capabilities to describe the foundations of complex event processing. If...]]></description>
      <content:encoded><![CDATA[<p>In <a title="The Genesis of Complex Event Processing: Asymmetric Capabilities" rel="bookmark" href="../2008/09/29/the-genesis-of-complex-event-processing-asymmetric-capabilites/">The Genesis of Complex Event Processing: Asymmetric Capabilities</a> I introduced the abstract concept of &#8220;asymmetric processing capabilities&#8221; to describe the foundations of complex event processing.   If you take a few moments to review the <a href="http://www.thecepblog.com/2008/07/07/a-blast-from-the-past-cep-at-stanford1998-2003/" target="_blank">first CEP projects</a> from <a href="http://www.stanford.edu" target="_blank">Stanford University</a>, you will see that the application of CEP was toward  solving myriad asymmetric event processing problems in distributed networks.    These applications included challenging problems such as:</p>
<ul>
<li><a href="http://pavg.stanford.edu/cep/netviewer-presentation.ppt">Network Level Monitoring and Management,<br />
</a></li>
<li><a href="http://pavg.stanford.edu/ID/">Cyber Security: Network Intrusion Detection,<br />
</a></li>
<li>Enterprise Monitoring and Management,</li>
<li><a href="http://pavg.stanford.edu/cep/final-version-131102.pdf">Modeling and Simulation of Collaborative Business Processes, </a></li>
<li>Business Policy Monitoring, and</li>
<li>Analysis and Debugging of Distributed Systems.</li>
</ul>
<p>In each of the CEP application examples above, the amount of event information available to software developers can be staggering; however, despite all the available information, the capability to sense-and-respond to threats and opportunities is crude, at best.</p>
<p>Folks who work in network and security management, for example, are bombarded with event information.  However, this deluge of event information is, for the most part, &#8220;noise&#8221; that is difficult to understand.   In network management one of the most difficult things to accomplish is to find the root cause of an outage or performance problem.   This is why researchers at Stanford were funded to focused on research topics such as (above), <em>the Analysis and Debugging of Distributed Systems</em>.</p>
<p>These are the classes of asymmetric event processing problems that define complex event processing, or CEP.   Processing events by mediating events, routing events, or running a rule-set against events and making a processing decision are all perfectly valid event processing applications.   However, the core reason to have &#8220;complex event processing&#8221; is to solve event processing problems where there exists a significant asymmetry between the deluge of &#8220;event noise&#8221;  (Professor Luckham called this phenomena the &#8220;event cloud&#8221;) and detecting business-relevant, actionable complex events in an climate of uncertainty and noise.</p>
<p>In my next post on this topic I will briefly the review motivation behind my 1999 ACM paper, <a title="Intrusion Detection Systems and Multisensor Data Fusion" rel="bookmark" href="../intrusion-detection-systems-and-multisensor-data-fusion/">Intrusion Detection Systems and Multisensor Data Fusion, </a> where we were working on solving complex distributed security challenges based on real-world experiences with the problems of asymmetric processing capabiilities.   I will discuss why we evolved from an early rule-based expert system model to a more advanced inference model that was not dependent solely on rule-based thinking.   I will also explain why other researchers and developers experienced in complex event detection applications have come to the same conclusion.</p>
]]></content:encoded>
      <pubDate>Thu, 02 Oct 2008 01:22:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/asymmetric event">asymmetric event</category>
      <category domain="http://securityratty.com/tag/complex">complex</category>
      <category domain="http://securityratty.com/tag/define complex event">define complex event</category>
      <category domain="http://securityratty.com/tag/asymmetric">asymmetric</category>
      <category domain="http://securityratty.com/tag/actionable complex events">actionable complex events</category>
      <category domain="http://securityratty.com/tag/myriad asymmetric event">myriad asymmetric event</category>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/management">management</category>
      <category domain="http://securityratty.com/tag/security management">security management</category>
      <source url="http://www.thecepblog.com/2008/10/02/cep-event-noise-and-asymmetric-event-processing/">CEP, Event Noise and Asymmetric Event Processing</source>
    </item>
    <item>
      <title><![CDATA[Interop NY: The ROI of Social Networking]]></title>
      <link>http://securityratty.com/article/8c52c835add6dca7c33f67c83e868434</link>
      <guid>http://securityratty.com/article/8c52c835add6dca7c33f67c83e868434</guid>
      <description><![CDATA[How do you derive business value from social networks
Moderator: Nick Hoover, Senior Editor, InformationWeek
Speaker - Anne Berkowitch, Co-Founder &amp; CEO, SelectMinds
Speaker - J.B. Holston, CEO and...]]></description>
      <content:encoded><![CDATA[<p>How do you derive business <a href="http://www.interop.com/newyork/conference/enterprise-20.php" target="_blank">value from social networks</a>?</p>
<ul>
<li>Moderator: Nick Hoover, Senior Editor, InformationWeek</li>
<li>Speaker - Anne Berkowitch, Co-Founder &amp; CEO, SelectMinds</li>
<li>Speaker - J.B. Holston, CEO and President, NewsGator</li>
<li>Speaker - Umberto Milletti, CEO, InsideView</li>
</ul>
<p>Businesses can take advantage of social networks by finding innovative ways to reach out to people. Looking at who you know and how you know them can benefit you. Knowing a personal connection to someone that you are trying to contact (for sales) is helpful. The blurring between home, personal, and business life is making this information more available and better able to leverage. People are able to capture more valuable long term information from social networks.</p>
<p>A lot of social network applications can be taken from the talent management space. Deploying alumni networks as a talent source is also a great asset. Alumni represent a well-known and relevant population. This provides a great economic benefit from a social network.</p>
<p>If you are running a sales organization and looking at building a pipeline of leads, consider how these leads are relevant. The ability to get more leads is apparent in finding the right person, right connection, and right contact. Underlying everything are productivity and efficiency. How much time are sales reps spending researching and pursuing each opportunity? With information on social networks, the time can be greatly decreased. Knowledge sharing is something that can be actively measured.</p>
<p>The ROI varies with the business issue that&#8217;s trying to be addressed by a particular network. Recruiting for example has a very concrete, measurable ROI. Knowledge share gets a little more tricky. How do you measure how much is shared and the impact on business systems? Businesses need to determine what specific goal they are trying to address.</p>
<p>CFOs want to see ROI, not intuitive information. If you can demonstrate engagement and participation in these networks and knowledge sharing tools, more and more executives are getting comfortable seeing how it&#8217;s used at a qualitative and process level. It&#8217;s a very case by case basis.</p>
<p>One major crisis that we see in our customers is the competition between sales and marketing. Each wants to do their own thing, they go together like oil and water. However, the push of the economy is now forcing them work together. This is a great opportunity for IT to step in and help them collaborate and be more productive.</p>
<p>Other resistance from companies are how to manage what they are trying to accomplish while still giving employees free reign of sites like Facebook. What are the incentives for using these technologies? How does it fit into your company culture and productivity scale? You must bring meaning to the structure of engaging in social networks.</p>
<p>Social networks like LinkedIn and Facebook would not exist if people did not contribute information to them. However, if people don&#8217;t know that it is there, it does not exist. People need to see the value and get drawn in to engage. There are two ways that companies get into social networks. Tie it into the business process. The general idea of social networks are intuitive and easy to understand, which make it an easier case to present to chief executives. Make it clear - how do you go about it and what&#8217;s the value?</p>
<p>Social networks are intrinsically about extending the network, the more contacts you have, the more to choose from when researching a specific contact. It also has to be integrated into your dataworkflow. Companies are going to build a variety of networks inside and outside the enterprise. The big companies (SAP, IBM) are all rushing to offer collaborative and social network functionality. However, this is not entirely useful unless it&#8217;s integrated into the entire infrastructure.</p>
]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 17:54:45 +0000</pubDate>
      <category domain="http://securityratty.com/tag/alumni networks">alumni networks</category>
      <category domain="http://securityratty.com/tag/social network applications">social network applications</category>
      <category domain="http://securityratty.com/tag/networks">networks</category>
      <category domain="http://securityratty.com/tag/social network">social network</category>
      <category domain="http://securityratty.com/tag/networks inside">networks inside</category>
      <category domain="http://securityratty.com/tag/social networks">social networks</category>
      <category domain="http://securityratty.com/tag/social network functionality">social network functionality</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/roi">roi</category>
      <source url="http://blog.sciencelogic.com/interop-ny-the-roi-of-social-networking/09/2008">Interop NY: The ROI of Social Networking</source>
    </item>
    <item>
      <title><![CDATA[Interop NY Keynotes: IBM]]></title>
      <link>http://securityratty.com/article/44ba0e9ad08b54462e9c92a6c54837a5</link>
      <guid>http://securityratty.com/article/44ba0e9ad08b54462e9c92a6c54837a5</guid>
      <description><![CDATA[Day one of Interop NY began with an introduction from Interop Manager Lenny Heymann, then Bob Picciano, General manager Lotus software and WebSpehere Portal IBM took the stage
IBMs presentation was...]]></description>
      <content:encoded><![CDATA[<p>Day one of Interop NY began with an introduction from Interop Manager Lenny Heymann, then Bob Picciano, General manager Lotus software and WebSpehere Portal IBM took the stage.</p>
<p>IBM&#8217;s presentation was cleverly titled <strong>2mor0@Wrk</strong> - Tomororow work and Web 2.0.</p>
<p><strong>Overview</strong></p>
<p>Web 2.0 is delivering a whole different paradigm of communication. The slide is Lotus Symphony - NOT PPT. Over 2 million downloads.</p>
<p>There is an information overload that impacts individual productivity in the workplace. It has a profound effect on organizational productivity. A more complex organization entity provides more pressure and more inefficiencies in workplace. Up to 70% of time can be used looking for the WRONG information.</p>
<p>Collaboration mitigates information overload. It allows you to identify experts and opinions.</p>
<p>The collaboration agenda. Enterprises are at the onset of exploring these features. Web 2.0 is giving us the capacity to do more. Collaboration optimizes business outcomes - global, secure and dynamic.The most progressive companies are looking at UNIFIED COMMUNICATIONS. Making sure that directories and profiles are fully mobile.</p>
<p>Collaboration should be a contextual part of the workflow, going directly into applications.</p>
<p>IBM&#8217;s collaboration strategy is to deliver these services through online or offline services.</p>
<p><strong>Demonstration</strong></p>
<p>Executive IT architect Ron Sebastian provided a demonstration of IBM&#8217;s collaboration strategy. IBM&#8217;s Web 2.0 solutions span delivery platforms:</p>
<ul>
<li>Platform - web as&nbsp; platform</li>
<li>Application - development</li>
<li>People - social computing</li>
</ul>
<p><a href="http://www-01.ibm.com/software/lotus/products/connections/" target="_blank">Lotus Connections</a> - a family of social computing software that provides profile lookup and community capabilities. Think of Facebook, Yahoo Groups, and delicious combined in one portal.</p>
<p>Ron demonstrated these social services embedded into a healthcare provider application. Semantic tagging is available, contact information and commenting. Not only are we providing service to customers, you can integrate sync capability to directly call the person you want.</p>
<p>The biggest aspect of Lotus Connection? It&#8217;s all integrated.</p>
<p>A new service - <a href="https://www.bluehouse.lotus.com/" target="_blank">Project Bluehouse</a>. This is a SaaS delivery of these collaborated capabilities. The store and share can manage and share documents within and outside the company. Access control is no longer an issue.</p>
<p>Collaborative Web 2.0 services available as standalone products that also work in a mobile environment.</p>
<p><strong>Case Study: Natural Disaster Management Mashup</strong></p>
<p>Boeing came up with twenty different scenarios that they could handle through their systems. The problem was the one they didn&#8217;t count on. One example was Katrina - how to deliver supplies to the area: what airports were open? Where could they land? The problem was they could not find one list of public, private and military airports, nor what was open. The mashup took different feeds to allow the deacon maker to make a more rapid and intelligent decision based on information on where they could fly in the appropriate supplies. From open information sites like <a href="http://www.airnav.com/" target="_blank">AirNav.com</a> and personal contacts, users were able to mashup the information to make better decisions.</p>
<p><strong>Conclusion</strong></p>
<p><a href="http://www.eweek.com/c/a/Messaging-and-Collaboration/IBM-to-Unveil-Social-Software-Center-at-Interop/" target="_blank">IBM announced the IBM Center for Social Software</a>, proving their commitment to connect, collaborate, and innovate. Users and academics can work together to how these innovations can be applied to businesses and provide value to the market.</p>
<p>There has been <a href="http://teblog.typepad.com/david_tebbutt/2008/04/ibms-bluehouse.html" target="_blank">some question</a> of whether or not IBM can pull this off and move into the collaborative Web 2.0 market. Despite <a href="http://www.theappgap.com/ibm-bluehouse-organizes-online-meetings-and-the-before-and-after.html" target="_blank">some criticism</a>, it looks like IBM has really taken a step forward in advancing their products and services to meet market needs.</p>
<p>People drive better business outcomes. Connecting, collaboration, and innovation is key. Having the right tools and information to do that eases pressure that many organizations feel and brings Web 2.0 technologies to the heart of businesses.</p>
]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 09:39:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ibm">ibm</category>
      <category domain="http://securityratty.com/tag/information sites">information sites</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/collaboration">collaboration</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/social">social</category>
      <category domain="http://securityratty.com/tag/ibms collaboration strategy">ibms collaboration strategy</category>
      <category domain="http://securityratty.com/tag/social services">social services</category>
      <category domain="http://securityratty.com/tag/collaborative web">collaborative web</category>
      <source url="http://blog.sciencelogic.com/interop-ny-keynotes-ibm/09/2008">Interop NY Keynotes: IBM</source>
    </item>
    <item>
      <title><![CDATA[On The History of Event Processing: Global Network Monitoring]]></title>
      <link>http://securityratty.com/article/0a39883e48015e3b5b486ebc5391de1e</link>
      <guid>http://securityratty.com/article/0a39883e48015e3b5b486ebc5391de1e</guid>
      <description><![CDATA[In A Short History of Complex Event Processing. Part 1: Beginnings , David Luckham opens his history discussion by saying
Event processing has been going on for more than fifty years
However, in On...]]></description>
      <content:encoded><![CDATA[<p>In <a title="A Short History of Complex Event Processing.  Part 1: Beginnings" rel="bookmark" href="http://complexevents.com/?p=321">A Short History of Complex Event Processing. Part 1: Beginnings</a>, David Luckham opens his history discussion by saying;</p>
<blockquote><p>&#8220;Event processing has been going on for more than fifty years.&#8221;</p></blockquote>
<p>However, in <a href="http://epthinking.blogspot.com/2008/08/on-event-processing-as-discipline-and.html" target="_blank">On Event Processing as a Discipline and Some Subsets</a> another colleague mistakenly blogs,</p>
<blockquote><p><em>&#8220;&#8230; <span>people who dealt in this area [network management and event correlation] have never investigated event processing in the larger sense (e.g. looking at additional patterns), and this area has also not spawned the event processing discipline.&#8221;</span></em></p></blockquote>
<p>If you examine just one page from the <a href="http://pavg.stanford.edu/cep/" target="_blank">CEP history at Stanford</a>, researchers there outlined their view of the future applications for CEP, as follows:</p>
<ul>
<li>Instant Insight  - hierarchical event viewing applied to the Enterprise IT layer.
<ul>
<li><a href="http://pavg.stanford.edu/cep/instantinsightpaper.pdf">Analysing business processes</a></li>
</ul>
</li>
<li><a href="http://pavg.stanford.edu/cep/netviewer-presentation.ppt" target="_blank">Network Level Monitoring and Management</a></li>
<li><a href="http://pavg.stanford.edu/ID/">Cyber Security: Network Intrusion Detection</a></li>
<li>Enterprise Monitoring and Management</li>
<li><a href="http://pavg.stanford.edu/cep/final-version-131102.pdf">Modeling and Simulation of Collaborative Business Processes </a></li>
<li>Business Policy Monitoring</li>
<li>Analysis and Debugging of Distributed Systems</li>
</ul>
<p>These applications areas mentioned by Stanford researchers, including Professor Luckham, support and validate our recent discussion <a title="Magic Quadrant for IT Event Correlation and Analysis, 2007" rel="bookmark" href="http://www.thecepblog.com/2008/08/26/magic-quadrant-for-it-event-correlation-and-analysis-2007/"><span style="color: #105cb6;">Magic Quadrant for IT Event Correlation and Analysis, 2007</span></a> where we concluded that <em>&#8220;event correlation and event analysis is Gartner’s closest magic quadrant (MQ)  [...] relates directly to complex event processing (and event processing in general).&#8221;  </em></p>
<p>If you take a detailed look at the 1999 CEP presentation, <a href="http://pavg.stanford.edu/cep/netviewer-presentation.ppt" target="_blank">Defeating Large Scale Attacks: Technology and Strategies for Global Network Monitoring</a> you will readily see that our colleagues are incorrect when they says that event correlational and network management folks have never investigated event processing in the &#8220;larger sense&#8221;.  For example, the 1999 slides above, Stanford, slide 6, is titled &#8220;Complex Event Processing,&#8221; defining CEP from the application perspective of event correlation;</p>
<p><em>Complex Event Processing</em></p>
<ul>
<li>Accept network ‘events’ from any source
<ul>
<li>CISCO NetFlow FlowCollector, tcpdump</li>
</ul>
</li>
<li>Correlates events based on content and temporal relationship between events</li>
<li>Event Processing Agents (EPAs) connected in an Event Processing Network (EPNs)</li>
<li>Both post-mortem and real-time processing</li>
</ul>
<p>This single event correlational project example from David&#8217;s team at Stanford examined the challenging event correlation problems in the context of hierarchical events, maps, patterns, visualization tools, event processing models, patterns languages, network management abstraction layers, and more.  Those core event processing problems from this 1999 example, very large and complex then, still exist today and are much more large and complex - precisely why it is called &#8220;complex event processing.&#8221;</p>
<p>It is quite obvious, in just this one example, that many folks have been looking at event correlation as a motivating application for event processing, in a larger context, for a long time, contrary to what our colleagues write in their &#8220;history of event processing&#8221; posts.  </p>
<p>In a future post I will completely debuke these event processing &#8220;history revisionists.&#8221;   I will illustrate very clearly how the history of event processing goes back at least a decade, and perhaps two (twenty years) before the history outlined in posts like <a href="http://epthinking.blogspot.com/2008/08/on-research-and-practice-in-event.html" target="_blank">On Research and Practice in Event Processing</a> and <a href="http://www.eventstreamprocessing.com/cep-history.htm" target="_blank">The History of Complex Event Processing</a>. </p>
<p>David Luckam stated that the art-and-science of event processing goes back around 50 years. </p>
<p>I am not sure I will go all the way back to 1960 in my next post on the history of event processing.  However,  I will go back at least to the early days of Internet Protocol (IP) networking and illustrate why distributed IP networking, network management and network security, is one of the key  motivating factors for what we now call &#8220;event processing&#8221; and &#8220;complex event processing.&#8221;</p>
]]></content:encoded>
      <pubDate>Sat, 30 Aug 2008 06:17:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/event correlational">event correlational</category>
      <category domain="http://securityratty.com/tag/event correlation problemsin">event correlation problemsin</category>
      <category domain="http://securityratty.com/tag/core event">core event</category>
      <category domain="http://securityratty.com/tag/complex event">complex event</category>
      <category domain="http://securityratty.com/tag/complex">complex</category>
      <category domain="http://securityratty.com/tag/event correlation">event correlation</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/hierarchical event">hierarchical event</category>
      <source url="http://www.thecepblog.com/2008/08/30/on-the-history-of-event-processing-global-network-monitoring/">On The History of Event Processing: Global Network Monitoring</source>
    </item>
    <item>
      <title><![CDATA[Envysion adds collaboration to managed video service]]></title>
      <link>http://securityratty.com/article/d6d6b4de0ad1de2193149ae5f645ade6</link>
      <guid>http://securityratty.com/article/d6d6b4de0ad1de2193149ae5f645ade6</guid>
      <description><![CDATA[Envysion, a Louisville, Colo.-based video software-as-a-service company, announced a new, collaborative Web-based broadcast service that corporations can use for making video clips available as a kind...]]></description>
      <content:encoded><![CDATA[Envysion, a Louisville, Colo.-based video software-as-a-service company, announced a new, collaborative Web-based broadcast service that corporations can use for making video clips available as a kind of private YouTube. The firm also says this month it passed a Level 1 Payment Card Industry compliance audit of its network operations.]]></content:encoded>
      <pubDate>Thu, 24 Jul 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/video">video</category>
      <category domain="http://securityratty.com/tag/video clips">video clips</category>
      <category domain="http://securityratty.com/tag/broadcast service">broadcast service</category>
      <category domain="http://securityratty.com/tag/envysion">envysion</category>
      <category domain="http://securityratty.com/tag/network operations">network operations</category>
      <category domain="http://securityratty.com/tag/collaborative">collaborative</category>
      <category domain="http://securityratty.com/tag/month">month</category>
      <category domain="http://securityratty.com/tag/firm">firm</category>
      <category domain="http://securityratty.com/tag/corporations">corporations</category>
      <source url="http://www.networkworld.com/news/2008/072508-envysion-adds-collaboration.html?fsrc=rss-security">Envysion adds collaboration to managed video service</source>
    </item>
    <item>
      <title><![CDATA[NAPA Shows How the Government is Using Web 2.0]]></title>
      <link>http://securityratty.com/article/c2382eef0b0cdb073ef226ac74ecee5b</link>
      <guid>http://securityratty.com/article/c2382eef0b0cdb073ef226ac74ecee5b</guid>
      <description><![CDATA[Back in April, we attended a session at the FOSE conference that highlighted Web 2.0 usage in the public sector . We also found through a survey of government workers that 65% of government IT workers...]]></description>
      <content:encoded><![CDATA[<p>Back in April, we attended a session at the <a href="http://blog.sciencelogic.com/fose-session-web-20-for-the-public-sector/04/2008" target="_blank">FOSE conference that highlighted Web 2.0 usage in the public sector</a>. We also found <a href="http://blog.sciencelogic.com/web-20-adoption-by-the-federal-government-shouldnt-be-a-surprise/06/2008" target="_blank">through a survey of government workers</a> that 65% of government IT workers surveyed said that Web 2.0 tools are important to their operations. The overall message was that all IT, government included, have too many projects they could be taking on for the amount of resources they have. For much of the IT topics we covered in the survey, importance was high but actual deployment was lower.
<p>Dan Munz, project manager of the <a href="http://www.collaborationproject.org/" target="_blank">Collaboration Project</a> commented on <a href="http://www.collaborationproject.org/display/home/Collaboration+Project+Blog" target="_blank">the unique work</a> that the National Academy of Public Administration (NAPA) is doing to bring together government leaders. The Collaboration Project seeks to innovate across government not just down the silos and create a safe place for leaders to have discussions around innovation.
<p><strong><em>ScienceLogic:</em></strong> What is the National Academy of Public Administration?
<p><strong><em>Dan Munz:</em></strong> The Academy is an independent, non-partisan, non-profit organization dedicated to tackling government&#8217;s most complex challenges. We were founded in 1967 by James Webb, the NASA administrator who took us to the moon – he saw that he could consult the National Academy of Sciences for expert technical advice, but had no counterpart in government for expert management advice. That&#8217;s been our mission ever since.
<p><strong><em>ScienceLogic:</em></strong> What is the Collaboration Project? How long has it been around?
<p><strong><em>Dan Munz:</em></strong> The Collaboration Project is the Academy&#8217;s response to two parallel trends we see in government. The first is the government’s need to transform the way it does business. There is a strong demand for change out there driven by a number of challenges that are forcing the government to rethink its mission and structure. Challenges include a public disconnected from government; a multi-sector workforce and increasing reliance on contractors; financial instability; and new types of security threats, just to name a few. More and more, the challenges facing government reach across the traditional boundaries of agency and mission. But government isn&#8217;t configured to work that way.
<p>The second trend is the unprecedented opportunity collaborative technology offers to drive transformational change in government. Tools like blogs, wikis, and mashups are changing the way leaders think about problems. They&#8217;re focusing not on what they can do just within their offices or agencies, but what voices they need to pull together across government, non-profits, the general citizenry, and other stakeholders to solve these problems. The Collaboration Project’s goal is to encourage this type of thinking and empower leaders committed to use collaborative technology to:
<ul>
<li>strengthen citizen civic engagement;</li>
<li>enhance government transparency;</li>
<li>improve service delivery and operational efficiency; and</li>
<li>facilitate coordination and innovation within and between agencies.</li>
</ul>
<p><strong><em>ScienceLogic:</em></strong> Why focus on Web 2.0 in the government?
<p><strong><em>Dan Munz:</em></strong> The question of how web 2.0 will impact federal IT departments is a critical one. Our view is that &#8220;the era of big systems&#8221; is basically over. Things like disk space, bandwidth, and computing power are basically shifting from being assets to being commodities.
<p>There&#8217;s also a shift in expectations. People both inside and outside government – especially Gen-X and Gen-Y – are incredibly frustrated by being able to use lightning-fast apps like Flickr, YouTube, and Facebook <i>that don&#8217;t even live on their hard drives</i> while the government and other large organizations still operate clunky PCs, space-limited e-mail accounts, and sluggish e-mail servers.
<p>So aside from the opportunity for transformative leadership, the idea of web 2.0 at a government level is very appealing in terms of getting the most out of the IT infrastructure we already have, rather than embarking on costly, large-scale projects in an era of diminishing budgets.
<p><strong><em>ScienceLogic:</em></strong> How do you build a sense of community at the Collaboration Project?
<p><strong><em>Dan Munz:</em></strong> Some community feel emerges naturally, from a sense that mass collaboration really is a tool for &#8220;doing government&#8221; in a whole new way.
<p>The more formal community building mechanisms we have include <a href="http://www.collaborationproject.org" target="_blank">our web page</a>, where we share insights, news, case studies, and other content – The virtual space serves as an anchor for people, whether they&#8217;re experts or beginners, to learn about what we do.
<p>Finally, we are conducting an ongoing series of in-person meetings, usually featuring a leader who has harnessed collaborative technology in what we think is a truly revolutionary new way.
<p><strong><em>ScienceLogic:</em></strong> How do you hear about cool new government Web 2.0 projects?
<p><strong><em>Dan Munz:</em></strong> That&#8217;s a key question, because part of our mission is to inspire action by finding leaders who have succeeded and highlight their accomplishments. We&#8217;ve done that with folks like Kip Hawley, TSA, Molly O&#8217;Neill, EPA, and Jim Walker, Alabama DHS.
<p>We also feel that the Academy&#8217;s position as a &#8220;safe space&#8221; for leaders means that we&#8217;re a place people can turn to when they hear about an emerging trend or project and want some help making sense of it.
<p><strong><em>ScienceLogic:</em></strong> What are the most innovative uses of Web 2.0 technology you&#8217;ve seen in the government?
<p><strong><em>Dan Munz:</em></strong> It&#8217;s important to distinguish between agencies that are simply adjusting to the reality of web 2.0, and those that are &#8220;using&#8221; it. Getting a YouTube account for your agency, or putting some photos on Flickr, is a great first step, but we want to inspire leaders to really transform their normal ways of doing business. At the moment a few that come to mind are the EPA Puget Sound Mashup, ODNI&#8217;s Intellipedia, TSA IdeaFactory, the PTO Peer-to-Patent Project, and Virtual Alabama, to name a few.
<p>The <a href="http://www.fcw.com/print/22_5/features/151791-1.html" target="_blank">TSA launched the IdeaFactory</a> in February 2008. TSA set up a collaboration platform with commenting, voting, etc. to form communities in a way to bring people to consensus and <a href="http://www.collaborationproject.org/pages/viewpage.action?pageId=5668923&amp;navigatingVersions=true" target="_blank">offer ways to improve the agency&#8217;s performance</a>.
<p><strong><em>ScienceLogic:</em></strong> Do you see a difference between state and local versus federal adoption of Web 2.0?
<p><strong><em>Dan Munz:</em></strong> That&#8217;s a hard generalization to make – at all levels you see leaders who recognize the potential in this technology to bring new voices into the governance process.
<p><strong><em>ScienceLogic:</em></strong> What are the obstacles to Web 2.0 adoption by government agencies?
<p><strong><em>Dan Munz:</em></strong> The three main challenges that we see are in the areas of technology, culture, and policy/governance.
<p>The technology issue is probably the simplest to solve – it&#8217;s important to choose a technology that fits the problem you&#8217;re trying to solve, but these technologies are usually inexpensive and almost never very complex.
<p>The question of culture is harder, particularly given the way that baby boomers, gen-xers, and millenials are beginning to interact in the workforce. How do you gain acceptance and buy-in among groups that have very different comfort levels with collaborative tools and environments?
<p>Finally, the most daunting challenge might be the questions of policy and governance, if only because those are the things that most commonly prevent leaders from even dipping a toe in the waters of collaboration. Most of the policies, regulations, and statutes governing the way government does business don&#8217;t anticipate things like wikis, blogs, or instant messaging. One of our most important missions is helping leaders who just want to get to action navigate these obstacles.
<p><strong><em>ScienceLogic:</em></strong> Is there any advice you can give to government employees getting started with Web 2.0? Or any places you would point them to for more info?
<p><strong><em>Dan Munz:</em></strong> It&#8217;s shameless plug time! I&#8217;d of course point them to our web page, <a href="http://collaborationproject.org/">collaborationproject.org</a>, where, among other things, we&#8217;ve collected a case library of over 40 instances of collaborative technology being used in the government and non-profit sectors. The library is growing every day and is a sort of &#8220;database of record&#8221; for what is and isn&#8217;t working in terms of collaborative government. I think that would be a great place to start for anyone looking to get started but not really knowing the way.
<p>In terms of advice, the best thing to say is that, once you&#8217;ve settled on a problem you want to solve and an audience you want to reach out to, <b>just do it</b>! We believe strongly that there are a lot of organizational and leadership issues that still need to be addressed regarding collaboration in government, but our biggest mantra is about getting leaders to action. The most successful projects we&#8217;ve seen are ones that try something daring and new, and discover the true power of what they&#8217;ve done as it catches on more and more widely.</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=NAPA+Shows+How+the+Government+is+Using+Web+2.0&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fnapa-shows-how-the-government-is-using-web-20%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Wed, 16 Jul 2008 16:45:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/government">government</category>
      <category domain="http://securityratty.com/tag/web page">web page</category>
      <category domain="http://securityratty.com/tag/government web">government web</category>
      <category domain="http://securityratty.com/tag/collaboration">collaboration</category>
      <category domain="http://securityratty.com/tag/mass collaboration">mass collaboration</category>
      <category domain="http://securityratty.com/tag/collaboration project seeks">collaboration project seeks</category>
      <category domain="http://securityratty.com/tag/government employees">government employees</category>
      <category domain="http://securityratty.com/tag/enhance government transparency">enhance government transparency</category>
      <source url="http://blog.sciencelogic.com/napa-shows-how-the-government-is-using-web-20/07/2008">NAPA Shows How the Government is Using Web 2.0</source>
    </item>
    <item>
      <title><![CDATA[Q&A with Doug McClure: Is BSM Lite the Answer?]]></title>
      <link>http://securityratty.com/article/183e734958786a07b2c4d4b988eb60cc</link>
      <guid>http://securityratty.com/article/183e734958786a07b2c4d4b988eb60cc</guid>
      <description><![CDATA[We had the opportunity to chat with Doug McClure , who is currently the Senior Managing Consultant for Business Service Management (BSM) and IT Service Management (ITSM) for the IBM Software Services...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 0px 10px 10px 0px; border-right-width: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/07/dougmcclurefeb2008-web.jpg" border="0" alt="dougmcclureFeb2008-web" width="105" height="156" align="left" /> We had the opportunity to chat with <a href="http://dougmcclure.net/blog/" target="_blank">Doug McClure</a>, who is currently the Senior Managing Consultant for Business Service Management (BSM) and IT Service Management (ITSM) for the IBM Software Services for Tivoli (ISST) team at IBM Tivoli (part of Software Group (SWG)). He currently leads the Virtual BSM Practice within IBM Software Services for Tivoli.</p>
<p><em><strong>ScienceLogic:</strong></em> What is “BSM Lite” and how is it different from “heavy” BSM?</p>
<p><strong><em>Doug McClure:</em></strong> I think the concepts that <a href="http://netforecast.com/" target="_blank">Peter Sevcik from Net Forecast</a> initially <a href="http://www.networkworld.com/community/node/27818" target="_blank">outlined in his blog post</a> sum up what &#8220;BSM Lite&#8221; is all about: a simpler, less expensive, more responsive way of achieving the goals and objectives of Business Service Management (BSM).  He&#8217;s contrasted this nicely against what he termed &#8220;BSM Heavy&#8221; being the larger investments in time and resources to deploy domain specific tools and solutions each providing a view into the business service delivery with some aggregation and consolidation to tie up all of the disparate tool&#8217;s information into a concise end-to-end business service management story.</p>
<p>I&#8217;m pleased that he leveraged some of my thinking around a better working definition of what BSM really is from the <a href="http://dougmcclure.net/blog/business-service-management-bsm-defined/" target="_blank">BSM Defined page on my blog</a>. Of course, these definitions are going to vary depending on whom you talk with and how they see the overall BSM Maturity Model.  I&#8217;ve created a BSM Maturity Model that aligns with the famous Gartner IT maturity model.  I&#8217;d like to think that a &#8220;BSM Lite&#8221; solution is one attacking the low hanging fruit, enabling one to achieve value quicker, and in a more tactical manner.  The &#8220;BSM Heavy&#8221; solutions are capable of the same, but span all along the BSM Maturity Model by adding additional point solutions, products and technologies from their broader portfolio. </p>
<p><strong><em>ScienceLogic:</em></strong> Does “BSM Lite” just refer to the tools, or can it refer to the process and methodology as well?</p>
<p><strong><em>Doug McClure:</em></strong> I think that BSM is as much a philosophy as it is technology, process, people and methodology.  If we can get people to think, operate and respond differently than they do today with a focus on the business, customers, quality, revenue, or whatever else is most important to their business goals and objectives, than that is Business Service Management and could be &#8220;BSM Lite&#8221; if you will. </p>
<p>Being that I work for IBM Tivoli, one of my personal objectives is to identify ways to use our key BSM enabling products in a more efficient, effective and BSM centric way. This was a huge driver for trying to hold DevCampTivoli focused on &#8220;Collaborative Development of End-to-End BSM Solutions&#8221;. </p>
<p>In my opinion, we don’t make things very easy for our clients and the answer can’t be to “buy this product, module or widget” to fill in the gaps.  In my opinion, we must establish a BSM overlay within IBM Tivoli’s development and product management organization that ensures that we have clearly thought about how to enable BSM with the hundreds or products that we sell.  In my opinion, every product release must incorporate the fundamentals of enabling BSM in addition to the core domain specific functionality intended. I hope to keep this spirit alive and get our smartest IBMers and clients thinking about the best way to take a &#8220;BSM Heavy&#8221; solution and make it &#8220;lighter&#8221;. I hope to share more about my plans here and guidance for the industry in general soon.</p>
<p>That said, I am always interested in consulting with clients and collaborate with peers in the industry to figure out how to get the focus on the people, process and technology as key components of their BSM strategies.  I am absolutely convinced that without a documented BSM strategy, roadmap and top level sponsorship within the business and IT, the chances of BSM success greatly diminish.</p>
<p><strong><em>ScienceLogic:</em></strong> Given the complexities involved in implementing a BSM strategy and dealing with the people and processes components of any business, how does “BSM Lite” really work? Should the expectations and outcomes be “lite” as well?</p>
<p><strong><em>Doug McClure:</em></strong> Time will tell if &#8220;BSM Lite&#8221; will work.  I&#8217;m seeing emerging companies that are already breaking down some of the barriers to BSM success.  I do not expect that those choosing to begin with a &#8220;BSM Lite&#8221; approach should expect &#8220;lite&#8221; outcomes. </p>
<p>The outcomes are the same regardless of the approach IF you&#8217;ve got a documented BSM strategy, roadmap and top level sponsorship in place before you begin. New features, capabilities and technologies will be needed as the needs of the business change and companies mature in BSM and fundamental IT management. This will likely force companies to move in more &#8220;BSM Heavy&#8221; directions to fill those gaps. </p>
<p>In my opinion, this is the ideal scenario now as it gives &#8220;BSM Lite&#8221; vendors opportunities to grow their products and solutions. It also GREATLY improves the chances for success with a &#8220;BSM Heavy&#8221; solution because the organization would have already had matured enough to approach a &#8220;BSM Heavy&#8221; solution than if they hadn&#8217;t done a &#8220;BSM Lite&#8221; solution in the past.</p>
<p><strong><em>ScienceLogic:</em></strong> Is “BSM Lite” more appropriate for a small or midsized organization, or does it apply equally to large companies? Is there an ideal profile for a company that can successfully implement a BSM strategy? Is there a different profile for “BSM Lite”?</p>
<p><strong><em>Doug McClure:</em></strong> From an economic perspective, the concepts of &#8220;BSM Lite&#8221; are appropriate for all companies.  Remember, with &#8220;BSM Lite&#8221; we&#8217;re focused on identifying ways to make the goals and objectives of BSM easier to implement and in a more cost effective way.  Any company concerned about their IT cost overhead should care about this, especially when the risks of starting out with a &#8220;BSM Heavy&#8221; type deployment are much greater and the time to value generally much longer.</p>
<p>The &#8220;ideal&#8221; profile for any company is one where the BSM initiative begins by establishing top level buy in through creation of a formal BSM strategy for the company. This BSM strategy personalizes how the company defines what BSM is, what value the company expects from it, and how it will use BSM as a competitive differentiator for delivery of its business and IT services, products, etc.</p>
<p>The organizational &#8220;profile&#8221; I&#8217;ve seen most successful is when implementing a BSM strategy originates from within or actively includes a group that many companies have now that serves as a liaison or relationship management role between the various lines of business and IT. Sometimes this group is often seen as the gatekeeper to filter (and hinder) business driven requirements into the IT organization. In the ideal scenario, this group works very closely with the business and IT (usually staffed by business people and not IT people) to understand both the business side and IT side of complex business services and applications. </p>
<p>Apart from the traditional IT components, what this group can do is help IT really understand the business perspective.  Analysis of the impact on the business in business terms is only possible by collaborating with a group such as this.  True value oriented BSM becomes attainable when we get to this level of IT and business alignment, cooperation, collaboration and communication.</p>
<p>If BSM is an IT only initiative, this will likely result in an IT centric perspective severely lacking in the necessary business perspective.  In these cases where IT doesn&#8217;t invest their BSM efforts with the business as an equal partner, the implementation ultimately becomes a &#8220;CYA&#8221; tool for IT and not achieve the desired value oriented expected.</p>
<p>To some degree &#8220;BSM Lite&#8221; may have an entirely different profile. If we see the price points, complexity and time to value change significantly we may see these types of deployments originate exclusively within the Line of Business. The possibility may exist where large enterprises operating in a shared IT services or IT outsourcing type model that the Line of Business brings in a &#8220;BSM Lite&#8221; solution to gain the visibility, checks and balances needed to ensure that the LoB’s needs are being met from the internal/external provider. I&#8217;d envision that &#8220;BSM Lite&#8221; may even be capable of operating within a &#8220;SaaS&#8221; model or other managed service type offering where the price points are below the signing levels triggering broader IT involvement and review.</p>
<p><em>To Be Continued&#8230;</em></p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Q%26amp%3BA+with+Doug+McClure%3A+Is+BSM+Lite+the+Answer%3F&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fqa-with-doug-mcclure-is-bsm-lite-the-answer%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 14 Jul 2008 20:02:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/lite">lite</category>
      <category domain="http://securityratty.com/tag/bsm heavy">bsm heavy</category>
      <category domain="http://securityratty.com/tag/bsm heavy directions">bsm heavy directions</category>
      <category domain="http://securityratty.com/tag/bsm">bsm</category>
      <category domain="http://securityratty.com/tag/outcomes">outcomes</category>
      <category domain="http://securityratty.com/tag/expect lite outcomes">expect lite outcomes</category>
      <category domain="http://securityratty.com/tag/bsm lite approach">bsm lite approach</category>
      <category domain="http://securityratty.com/tag/approach">approach</category>
      <category domain="http://securityratty.com/tag/bsm heavy solution">bsm heavy solution</category>
      <source url="http://blog.sciencelogic.com/qa-with-doug-mcclure-is-bsm-lite-the-answer/07/2008">Q&amp;A with Doug McClure: Is BSM Lite the Answer?</source>
    </item>
  </channel>
</rss>
