<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: forecast]]></title>
    <link>http://securityratty.com/tag/forecast</link>
    <description></description>
    <pubDate>Wed, 12 Dec 2007 11:06:29 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[S&P Downgrades TIBCO to Sell On Financial Services Exposure]]></title>
      <link>http://securityratty.com/article/401726b89f56c470f7b2b4c0e8f2d4f1</link>
      <guid>http://securityratty.com/article/401726b89f56c470f7b2b4c0e8f2d4f1</guid>
      <description><![CDATA[Standard &amp; Poors analyst Zaineb Bokhari cut her rating on TIBCO Software (TIBX) to Sell from Hold. Bokhari referenced TIBCOs relatively high exposure to financial services and telecom companies and...]]></description>
      <content:encoded><![CDATA[<p>Standard &amp; Poor’s analyst Zaineb Bokhari  cut her rating on TIBCO Software <a href="http://online.barrons.com/quotes/main.html?symbol=tibx">(TIBX)</a> to Sell from Hold.  Bokhari referenced TIBCO’s relatively high exposure to financial services and telecom companies and dependence on large deals.  Bokhari noted that TIBCO will report Aug 2008 quarter results on September 25.  She estimates revenue of $154 million and an operating EPS of 6 cents.  For the November 2008 fiscal year, she cut his sales forecast to $650 million from $663 million, with EPS dropping 2 cents to 34 cents. For FY ‘09,  Bokhari drops another penny to 44 cents.  Bokhari cuts her target price on TIBCO stock to $6.50, from $8.</p>
]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 14:15:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tibco">tibco</category>
      <category domain="http://securityratty.com/tag/bokhari">bokhari</category>
      <category domain="http://securityratty.com/tag/bokhari drops">bokhari drops</category>
      <category domain="http://securityratty.com/tag/bokhari cuts">bokhari cuts</category>
      <category domain="http://securityratty.com/tag/tibco software">tibco software</category>
      <category domain="http://securityratty.com/tag/financial services">financial services</category>
      <category domain="http://securityratty.com/tag/cents">cents</category>
      <category domain="http://securityratty.com/tag/bokhari noted">bokhari noted</category>
      <category domain="http://securityratty.com/tag/million">million</category>
      <source url="http://www.thecepblog.com/2008/09/18/sp-downgrades-tibco-to-sell-on-financial-services-exposure/">S&amp;P Downgrades TIBCO to Sell On Financial Services Exposure</source>
    </item>
    <item>
      <title><![CDATA[U.S. sees six 'disruptive technologies' by 2025]]></title>
      <link>http://securityratty.com/article/ab4c0a8f80778df4a8f429ac2841333d</link>
      <guid>http://securityratty.com/article/ab4c0a8f80778df4a8f429ac2841333d</guid>
      <description><![CDATA[In December, the president-elect will get a report detailing threats to the U.S. and that most likely includes a list of emerging technologies that will have a major impact on the U.S. and the world....]]></description>
      <content:encoded><![CDATA[In December, the president-elect will get a report detailing threats to the U.S. and that most likely includes a list of emerging technologies that will have a major impact on the U.S. and the world. This report, called Global Trends 2025, is a forecast prepared by U.S. intelligence agencies.]]></content:encoded>
      <pubDate>Tue, 09 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/technologies">technologies</category>
      <category domain="http://securityratty.com/tag/global trends">global trends</category>
      <category domain="http://securityratty.com/tag/report">report</category>
      <category domain="http://securityratty.com/tag/intelligence agencies">intelligence agencies</category>
      <category domain="http://securityratty.com/tag/major impact">major impact</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/forecast">forecast</category>
      <category domain="http://securityratty.com/tag/december">december</category>
      <source url="http://www.networkworld.com/news/2008/091008-us-sees-six-disruptive-technologies.html?fsrc=rss-security">U.S. sees six 'disruptive technologies' by 2025</source>
    </item>
    <item>
      <title><![CDATA[Leading Travel Writer Reams Out In-Flight Internet]]></title>
      <link>http://securityratty.com/article/f64004c5f420a4aa7be1520dea970d4b</link>
      <guid>http://securityratty.com/article/f64004c5f420a4aa7be1520dea970d4b</guid>
      <description><![CDATA[Joe Brancatelli pokes beneath the surface of claims that in-flight Internet is imminent: I've covered some of the same ground, but veteran travel writer Brancatelli connected the dots by checking with...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/08/19/AR2008081901066.html"><strong>Joe Brancatelli pokes beneath the surface of claims that in-flight Internet is imminent:</strong></a> I've covered some of the same ground, but veteran travel writer Brancatelli connected the dots by checking with the FAA to find the status of applications for aircraft certification by Aircell and others. </p>

<p>He's not very positive about it, because his research shows a mismatch between claims and work. He writes that an unnamed American airline executive is frustrated by the delay in launching the 3-to-6 month pilot on their trans-continental fleet; that Aircell hasn't submitted paperwork for Virgin's Airbus models for certification; and that the FAA just received a request to certify Delta's MD-80 craft, which makes a launch with 75 planes this year on that airline less likely.</p>

<p>Competitor Row 44 doesn't fare better in his analysis, as they promised spring and summer 2008 tests that still haven't happened, with Southwest and Alaska Airlines.</p>

<p>I'm a little more positive about the future of in-flight broadband. There's no particular conspiracy. It's hard to make it work. Development and testing is tricky due to FAA limits, and getting in-flight handoffs to work for seamless service at 35,000 feet is far more difficult than, say, cellular handoffs in a moving car at 100 feet above sea level. My suspicion is that tuning the service to be entirely reliable at launch is what's taking so long.</p>

<p>Brancatelli blames the high price of Connexion on its failure, but I don't think the $27 fee for long-haul flights deterred users. Lufthansa, which deployed all its long-haul fleet, apparently had very good usage. Most other airlines had few craft equipped, which didn't allow business travelers, able to expense several hours of work for a $27 fee, the reliability of having on-board Internet when they needed it. Connexion also had many reports of spotty service in certain areas. </p>

<p>Connexion's failure came from deploying technology that was old when it was deployed, which weighed too much, and which was too expensive to install. Connexion's revenue and expenses were forecast based on having several hundred aircraft with Connexion service--recall that it was supposed to be a domestic U.S. service, too. In the end they had about 100, I believe. </p>

<p>Brancatelli is also modest when he says Boeing "lost" $300m. That's part of what they wrote down. My sources say they spent more than a billion in R&D, transponder leases, ground station operation, airline incentives, and payoffs at the end.</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 05:34:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/seamless service">seamless service</category>
      <category domain="http://securityratty.com/tag/spotty service">spotty service</category>
      <category domain="http://securityratty.com/tag/connexion service">connexion service</category>
      <category domain="http://securityratty.com/tag/connexion">connexion</category>
      <category domain="http://securityratty.com/tag/airline incentives">airline incentives</category>
      <category domain="http://securityratty.com/tag/airline">airline</category>
      <category domain="http://securityratty.com/tag/in-flight internet">in-flight internet</category>
      <category domain="http://securityratty.com/tag/ground">ground</category>
      <source url="http://wifinetnews.com/archives/008422.html">Leading Travel Writer Reams Out In-Flight Internet</source>
    </item>
    <item>
      <title><![CDATA[Ideal Tool to Solve Real Problems ... of the Near Future? - II]]></title>
      <link>http://securityratty.com/article/4d45e2880b790245f00c577a7d0b0226</link>
      <guid>http://securityratty.com/article/4d45e2880b790245f00c577a7d0b0226</guid>
      <description><![CDATA[I would like to continue the discussion I started in my previous post called &quot; Ideal Tool to Solve Real Problems ... of the Near Future? &quot; Specifically, upon outlining some problems with logging, I...]]></description>
      <content:encoded><![CDATA[<p>I would like to continue the discussion I started in my previous post called &quot;<a href="http://chuvakin.blogspot.com/2008/06/ideal-tool-to-solve-real-problems-of.html">Ideal Tool to Solve Real Problems ... of the Near Future?</a>&quot; Specifically, upon outlining some problems with logging, I will now forecast what will happen with them in 18-24 months. </p>  <ul>   <li>Which problems will be solved and forgotten? </li>    <li>Which ones will simply go away? </li>    <li>Which ones will persist and in fact increase? </li>    <li>Finally, which new ones might emerge? </li> </ul>  <p>First, let me bet my ass that &quot;<strong>Not knowing what to log</strong>&quot;<strong> </strong>problem <strong>will be licked in 18-24 months</strong>; at least as far as major regulations go, people will have a pretty good idea a) what&#160; the auditors want them to log (and review!) b) what they need to log for solving their problems. Now, for esoteric log sources (and custom applications) might still present a challenge from that point of view, but for basic &quot;staples&quot; (firewall, network gear, major OS) the mystery will be over (again, see &quot;<a href="http://chuvakin.blogspot.com/2008/02/must-do-logging-for-pci.html">Tell me EXACTLY what to log for PCI?</a>&quot;&#160; for reference)</p>  <p>Next, the problem of &quot;<strong>Log volume&quot; will&#160; definitely get worse, much worse</strong>.&#160; One might think that <em>100,000 each second</em> is a lot of log - but there WILL BE more at many companies! <em>Big application log explosion is coming</em>, fueled by the need to address logging in areas where such motivation was lacking before (basically, custom and vertical applications) as well as harness the power of &quot;uncommon&quot; logs for such tasks as fraud analysis or SOA monitoring. Keep in mind that even though in some areas logging is NOT a preferred way of monitoring and auditing activities (see <a href="http://chuvakin.blogspot.com/2007/12/how-to-do-database-loggingmonitoring.html">this discussion</a> on database logs <u><a href="http://chuvakin.blogspot.com/2007/12/how-to-do-database-loggingmonitoring.html">here</a></u>), application logging will still explode on us...</p>  <p>The problem of &quot;<strong>Log diversity&quot; </strong>(the fact that most logs all look different in format and meaning) <strong>will get worse before it will get better</strong> - and better it WILL (!!!) get since <a href="http://cee.mitre.org">standards are being developed</a>. We will see people struggling with all sorts bizarro log data in the coming years. Virtualization, web services and SOA, various ERP applications and even cloud services will increase the diversity of logging in the coming years.</p>  <p>Similar to the above, a problem of &quot;<strong>Bad logs&quot; </strong>(ones that are subjective, miss key information, require groping for a crystal ball to understand, turn log <em>analysis</em> into dark voodooistic experience or are <a href="http://www.loganalysis.org/pipermail/loganalysis/2008-January/000534.html">useless in some other way</a>) will also follow the pattern of the above log diversity problems - it <strong>will get worse before it gets better</strong> (via the <a href="http://cee.mitre.org">CEE standard effort</a> that now covers the <u><a href="http://openxdas.sourceforge.net/">OpenXDAS effort as well</a>!</u>) I noticed that people started asked me questions about &quot;how to do application logging right?&quot; and &quot;what to tell application developers about logging?&quot; which almost never happened in the past. BTW, watch <a href="http://www.securitywarrior.org">my blog</a> for some uber-fun info on that!</p>  <p><strong>&quot;Getting the logs&quot;</strong>&#160; has gotten much easier in recent years; agentless collectors like <u><a href="http://sourceforge.net/projects/lassolog">Project Lasso</a></u> (which, BTW, just <u><a href="http://www.loglogic.com/news/news-releases/2008/07/loglogic-launches-centralized-windows-event-log-collection-appliance-for-enterprise/">got updated</a></u>) and grabbing&#160; files remotely via secure protocols made application log collection easier (syslog-NG with TCP transfer and buffering also helped). Next, Windows 2008 will make it MUCH easier for the whole Windows kingdom due to their <a href="http://www.realtime-windowsserver.com/tips_tricks/2007/08/event_log_subscriptions_in_win.htm">use of web serv</a>ices (<u><a href="http://blogs.msdn.com/ericfitz/">thanks Eric!</a></u>). However, in the future it <strong>might resurface</strong> as we try to collect logs from &quot;weird&quot; places, again, <u><a href="http://chuvakin.blogspot.com/2008/05/cloud-this-cloud-that.html">clouds come to mind</a></u> as well as <u><a href="https://www.sans.org/webcasts/show.php?webcastid=91979">virtual environments</a></u> (e.g. how do you get logs off a dormant VM?). What's the next frontier in this area? Log discovery - automatic finding and identifying log files on systems in order to analyze and retain them (Yo, <u><a href="http://chuvakin.blogspot.com/2008/06/thanks-for-wonderful-t-shirt.html">my t-shirt-making colleagues...</a> </u>:-))</p>  <p>All this, however, pales in comparison with my favorite &quot;uber-challenge&quot;, &quot;<strong>Making sense of logs in&#160; an automated fashion&quot;</strong> - this baby is definitely not going away in 2-3 years. Much more research is needed to make that &quot;<strong>log-&gt;conclusion&quot;</strong> jump automatically without head-scratching, invoking ancient deities and cursing under ones's breath. Only then we can attempt to reliable handle &quot;proactive logging&quot; (i.e. analyzing various failure or compromise precursors in logs and then predicting the future based on them), another Holy Grail of logging domain.</p>  <p>Anything new will emerge? Yes, I think awareness of the <strong>&quot;Logging Gap&quot; problem will grow</strong>. &quot;Logging gap&quot; happens when you combine &quot;a need to log&quot; with utter &quot;inability to do so.&quot;&#160; For example, this will happen when people will know that they HAVE TO log, say, for compliance, but will have no way of doing it due to application or platform limitations. This will become one of the challenges and special &quot;logging add-ons&quot; will appear to close the logging gap and create additional logs where activity audit is desperately needed, but native logging is not helping to achieve it.</p>  <p>Also, I think people will <strong>finally</strong> <strong>wake up to</strong> &quot;<strong>Log security</strong>&quot; challenges - i.e. producing for use as evidence, compliance attestations, etc. <u><a href="http://chuvakin.blogspot.com/2007/10/top-11-reasons-to-secure-and-protect.html">Log security</a></u> is not getting the attention <u><a href="http://chuvakin.blogspot.com/2007/10/top-11-reasons-to-secure-and-protect.html">it deserves</a></u>, but I think this challenge will finally emerge in full force in the next 2-3 years. My next poll will address that :-)</p>  <p>Anything else I missed? Share away!</p>  <p><strong>Related posts:</strong></p>  <ul>   <li>     <h5><a href="http://chuvakin.blogspot.com/2008/06/ideal-tool-to-solve-real-problems-of.html">Ideal Tool to Solve Real Problems ... of the Near Future?</a></h5>   </li>    <li>     <h5><a href="http://chuvakin.blogspot.com/2007/11/ideal-log-management-tool.html">Ideal Log Management Tool?</a></h5>   </li> </ul>  <div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=OiE77K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=OiE77K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=mHZh5K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=mHZh5K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=MlgSPK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=MlgSPK" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/356001661" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 04 Aug 2008 17:30:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/log discovery">log discovery</category>
      <category domain="http://securityratty.com/tag/log">log</category>
      <category domain="http://securityratty.com/tag/log diversity">log diversity</category>
      <category domain="http://securityratty.com/tag/esoteric log sources">esoteric log sources</category>
      <category domain="http://securityratty.com/tag/log security">log security</category>
      <category domain="http://securityratty.com/tag/application log explosion">application log explosion</category>
      <category domain="http://securityratty.com/tag/application">application</category>
      <category domain="http://securityratty.com/tag/log analysis">log analysis</category>
      <category domain="http://securityratty.com/tag/log volume">log volume</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/356001661/ideal-tool-to-solve-real-problems-of.html">Ideal Tool to Solve Real Problems ... of the Near Future? - II</source>
    </item>
    <item>
      <title><![CDATA[Security heading for the cloud]]></title>
      <link>http://securityratty.com/article/5ca69e8b402d7254ecf88b79732d6abd</link>
      <guid>http://securityratty.com/article/5ca69e8b402d7254ecf88b79732d6abd</guid>
      <description><![CDATA[Security software will jump off PCs and into 'the cloud', with spending on online security services forecast to triple by...]]></description>
      <content:encoded><![CDATA[Security software will jump off PCs and into 'the cloud', with spending on online security services forecast to triple by 2013.]]></content:encoded>
      <pubDate>Thu, 17 Jul 2008 11:25:46 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/security software">security software</category>
      <category domain="http://securityratty.com/tag/triple">triple</category>
      <category domain="http://securityratty.com/tag/pcs">pcs</category>
      <category domain="http://securityratty.com/tag/jump">jump</category>
      <source url="http://www.enn.ie/article/10124643.html">Security heading for the cloud</source>
    </item>
    <item>
      <title><![CDATA[Q&A with Doug McClure: Is BSM Lite the Answer?]]></title>
      <link>http://securityratty.com/article/183e734958786a07b2c4d4b988eb60cc</link>
      <guid>http://securityratty.com/article/183e734958786a07b2c4d4b988eb60cc</guid>
      <description><![CDATA[We had the opportunity to chat with Doug McClure , who is currently the Senior Managing Consultant for Business Service Management (BSM) and IT Service Management (ITSM) for the IBM Software Services...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 0px 10px 10px 0px; border-right-width: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/07/dougmcclurefeb2008-web.jpg" border="0" alt="dougmcclureFeb2008-web" width="105" height="156" align="left" /> We had the opportunity to chat with <a href="http://dougmcclure.net/blog/" target="_blank">Doug McClure</a>, who is currently the Senior Managing Consultant for Business Service Management (BSM) and IT Service Management (ITSM) for the IBM Software Services for Tivoli (ISST) team at IBM Tivoli (part of Software Group (SWG)). He currently leads the Virtual BSM Practice within IBM Software Services for Tivoli.</p>
<p><em><strong>ScienceLogic:</strong></em> What is “BSM Lite” and how is it different from “heavy” BSM?</p>
<p><strong><em>Doug McClure:</em></strong> I think the concepts that <a href="http://netforecast.com/" target="_blank">Peter Sevcik from Net Forecast</a> initially <a href="http://www.networkworld.com/community/node/27818" target="_blank">outlined in his blog post</a> sum up what &#8220;BSM Lite&#8221; is all about: a simpler, less expensive, more responsive way of achieving the goals and objectives of Business Service Management (BSM).  He&#8217;s contrasted this nicely against what he termed &#8220;BSM Heavy&#8221; being the larger investments in time and resources to deploy domain specific tools and solutions each providing a view into the business service delivery with some aggregation and consolidation to tie up all of the disparate tool&#8217;s information into a concise end-to-end business service management story.</p>
<p>I&#8217;m pleased that he leveraged some of my thinking around a better working definition of what BSM really is from the <a href="http://dougmcclure.net/blog/business-service-management-bsm-defined/" target="_blank">BSM Defined page on my blog</a>. Of course, these definitions are going to vary depending on whom you talk with and how they see the overall BSM Maturity Model.  I&#8217;ve created a BSM Maturity Model that aligns with the famous Gartner IT maturity model.  I&#8217;d like to think that a &#8220;BSM Lite&#8221; solution is one attacking the low hanging fruit, enabling one to achieve value quicker, and in a more tactical manner.  The &#8220;BSM Heavy&#8221; solutions are capable of the same, but span all along the BSM Maturity Model by adding additional point solutions, products and technologies from their broader portfolio. </p>
<p><strong><em>ScienceLogic:</em></strong> Does “BSM Lite” just refer to the tools, or can it refer to the process and methodology as well?</p>
<p><strong><em>Doug McClure:</em></strong> I think that BSM is as much a philosophy as it is technology, process, people and methodology.  If we can get people to think, operate and respond differently than they do today with a focus on the business, customers, quality, revenue, or whatever else is most important to their business goals and objectives, than that is Business Service Management and could be &#8220;BSM Lite&#8221; if you will. </p>
<p>Being that I work for IBM Tivoli, one of my personal objectives is to identify ways to use our key BSM enabling products in a more efficient, effective and BSM centric way. This was a huge driver for trying to hold DevCampTivoli focused on &#8220;Collaborative Development of End-to-End BSM Solutions&#8221;. </p>
<p>In my opinion, we don’t make things very easy for our clients and the answer can’t be to “buy this product, module or widget” to fill in the gaps.  In my opinion, we must establish a BSM overlay within IBM Tivoli’s development and product management organization that ensures that we have clearly thought about how to enable BSM with the hundreds or products that we sell.  In my opinion, every product release must incorporate the fundamentals of enabling BSM in addition to the core domain specific functionality intended. I hope to keep this spirit alive and get our smartest IBMers and clients thinking about the best way to take a &#8220;BSM Heavy&#8221; solution and make it &#8220;lighter&#8221;. I hope to share more about my plans here and guidance for the industry in general soon.</p>
<p>That said, I am always interested in consulting with clients and collaborate with peers in the industry to figure out how to get the focus on the people, process and technology as key components of their BSM strategies.  I am absolutely convinced that without a documented BSM strategy, roadmap and top level sponsorship within the business and IT, the chances of BSM success greatly diminish.</p>
<p><strong><em>ScienceLogic:</em></strong> Given the complexities involved in implementing a BSM strategy and dealing with the people and processes components of any business, how does “BSM Lite” really work? Should the expectations and outcomes be “lite” as well?</p>
<p><strong><em>Doug McClure:</em></strong> Time will tell if &#8220;BSM Lite&#8221; will work.  I&#8217;m seeing emerging companies that are already breaking down some of the barriers to BSM success.  I do not expect that those choosing to begin with a &#8220;BSM Lite&#8221; approach should expect &#8220;lite&#8221; outcomes. </p>
<p>The outcomes are the same regardless of the approach IF you&#8217;ve got a documented BSM strategy, roadmap and top level sponsorship in place before you begin. New features, capabilities and technologies will be needed as the needs of the business change and companies mature in BSM and fundamental IT management. This will likely force companies to move in more &#8220;BSM Heavy&#8221; directions to fill those gaps. </p>
<p>In my opinion, this is the ideal scenario now as it gives &#8220;BSM Lite&#8221; vendors opportunities to grow their products and solutions. It also GREATLY improves the chances for success with a &#8220;BSM Heavy&#8221; solution because the organization would have already had matured enough to approach a &#8220;BSM Heavy&#8221; solution than if they hadn&#8217;t done a &#8220;BSM Lite&#8221; solution in the past.</p>
<p><strong><em>ScienceLogic:</em></strong> Is “BSM Lite” more appropriate for a small or midsized organization, or does it apply equally to large companies? Is there an ideal profile for a company that can successfully implement a BSM strategy? Is there a different profile for “BSM Lite”?</p>
<p><strong><em>Doug McClure:</em></strong> From an economic perspective, the concepts of &#8220;BSM Lite&#8221; are appropriate for all companies.  Remember, with &#8220;BSM Lite&#8221; we&#8217;re focused on identifying ways to make the goals and objectives of BSM easier to implement and in a more cost effective way.  Any company concerned about their IT cost overhead should care about this, especially when the risks of starting out with a &#8220;BSM Heavy&#8221; type deployment are much greater and the time to value generally much longer.</p>
<p>The &#8220;ideal&#8221; profile for any company is one where the BSM initiative begins by establishing top level buy in through creation of a formal BSM strategy for the company. This BSM strategy personalizes how the company defines what BSM is, what value the company expects from it, and how it will use BSM as a competitive differentiator for delivery of its business and IT services, products, etc.</p>
<p>The organizational &#8220;profile&#8221; I&#8217;ve seen most successful is when implementing a BSM strategy originates from within or actively includes a group that many companies have now that serves as a liaison or relationship management role between the various lines of business and IT. Sometimes this group is often seen as the gatekeeper to filter (and hinder) business driven requirements into the IT organization. In the ideal scenario, this group works very closely with the business and IT (usually staffed by business people and not IT people) to understand both the business side and IT side of complex business services and applications. </p>
<p>Apart from the traditional IT components, what this group can do is help IT really understand the business perspective.  Analysis of the impact on the business in business terms is only possible by collaborating with a group such as this.  True value oriented BSM becomes attainable when we get to this level of IT and business alignment, cooperation, collaboration and communication.</p>
<p>If BSM is an IT only initiative, this will likely result in an IT centric perspective severely lacking in the necessary business perspective.  In these cases where IT doesn&#8217;t invest their BSM efforts with the business as an equal partner, the implementation ultimately becomes a &#8220;CYA&#8221; tool for IT and not achieve the desired value oriented expected.</p>
<p>To some degree &#8220;BSM Lite&#8221; may have an entirely different profile. If we see the price points, complexity and time to value change significantly we may see these types of deployments originate exclusively within the Line of Business. The possibility may exist where large enterprises operating in a shared IT services or IT outsourcing type model that the Line of Business brings in a &#8220;BSM Lite&#8221; solution to gain the visibility, checks and balances needed to ensure that the LoB’s needs are being met from the internal/external provider. I&#8217;d envision that &#8220;BSM Lite&#8221; may even be capable of operating within a &#8220;SaaS&#8221; model or other managed service type offering where the price points are below the signing levels triggering broader IT involvement and review.</p>
<p><em>To Be Continued&#8230;</em></p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Q%26amp%3BA+with+Doug+McClure%3A+Is+BSM+Lite+the+Answer%3F&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fqa-with-doug-mcclure-is-bsm-lite-the-answer%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Mon, 14 Jul 2008 20:02:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/lite">lite</category>
      <category domain="http://securityratty.com/tag/bsm heavy">bsm heavy</category>
      <category domain="http://securityratty.com/tag/bsm heavy directions">bsm heavy directions</category>
      <category domain="http://securityratty.com/tag/bsm">bsm</category>
      <category domain="http://securityratty.com/tag/outcomes">outcomes</category>
      <category domain="http://securityratty.com/tag/expect lite outcomes">expect lite outcomes</category>
      <category domain="http://securityratty.com/tag/bsm lite approach">bsm lite approach</category>
      <category domain="http://securityratty.com/tag/approach">approach</category>
      <category domain="http://securityratty.com/tag/bsm heavy solution">bsm heavy solution</category>
      <source url="http://blog.sciencelogic.com/qa-with-doug-mcclure-is-bsm-lite-the-answer/07/2008">Q&amp;A with Doug McClure: Is BSM Lite the Answer?</source>
    </item>
    <item>
      <title><![CDATA[Risk and the Brain]]></title>
      <link>http://securityratty.com/article/6fe945561e34a184357661814e4c8f77</link>
      <guid>http://securityratty.com/article/6fe945561e34a184357661814e4c8f77</guid>
      <description><![CDATA[New research on how the brain estimates risk: Using functional imaging in a simple gambling task in which risk was constantly changed, the researchers discovered that an early activation of the...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.sciencedaily.com/releases/2008/03/080312093854.htm">New research</a> on how the brain estimates risk:</p>

<blockquote>Using functional imaging in a simple gambling task in which risk was constantly changed, the researchers discovered that an early activation of the anterior insula of the brain was associated with mistakes in predicting risk.

<p>The time course of the activation also indicated a role in rapid updating, suggesting that this area is involved in how we learn to modify our risk predictions. The finding was particularly interesting, notes lead author and EPFL professor Peter Bossaerts, because the anterior insula is the locus of where we integrate and process emotions.</p>

<p>"This represents an important advance in our understanding of the neurological underpinnings of risk, in analogy with an earlier discovery of a signal for forecast error in the dopaminergic system," says Bossaerts, "and indicates that we need to update our understanding of the neural basis of reward anticipation in uncertain conditions to include risk assessment."</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=pyRF9lF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=pyRF9lF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=4TMW3PF"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=4TMW3PF" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 18 Mar 2008 03:51:31 +0000</pubDate>
      <category domain="http://securityratty.com/tag/risk">risk</category>
      <category domain="http://securityratty.com/tag/include risk assessment">include risk assessment</category>
      <category domain="http://securityratty.com/tag/risk predictions">risk predictions</category>
      <category domain="http://securityratty.com/tag/brain">brain</category>
      <category domain="http://securityratty.com/tag/anterior insula">anterior insula</category>
      <category domain="http://securityratty.com/tag/notes lead author">notes lead author</category>
      <category domain="http://securityratty.com/tag/process emotions">process emotions</category>
      <category domain="http://securityratty.com/tag/uncertain conditions">uncertain conditions</category>
      <category domain="http://securityratty.com/tag/dopaminergic system">dopaminergic system</category>
      <source url="http://www.schneier.com/blog/archives/2008/03/risk_and_the_br.html">Risk and the Brain</source>
    </item>
    <item>
      <title><![CDATA[Virus Center: Forecast: How Internet threats will evolve in 2008]]></title>
      <link>http://securityratty.com/article/6c013c6e9b3f2a0d361b7bf74249b496</link>
      <guid>http://securityratty.com/article/6c013c6e9b3f2a0d361b7bf74249b496</guid>
      <description><![CDATA[PandaLabs published a forecast on how Internet threats will evolve in 2008. One of the key factors will be the increase in the amount of malware, known and unknown, in circulation. If there has...]]></description>
      <content:encoded><![CDATA[PandaLabs published a forecast on how Internet threats will evolve in 2008.  One of the key factors will be the increase in the amount of malware, known and unknown, in circulation. If there has alrea...]]></content:encoded>
      <pubDate>Wed, 19 Dec 2007 20:35:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/internet threats">internet threats</category>
      <category domain="http://securityratty.com/tag/key factors">key factors</category>
      <category domain="http://securityratty.com/tag/evolve">evolve</category>
      <category domain="http://securityratty.com/tag/forecast">forecast</category>
      <category domain="http://securityratty.com/tag/malware">malware</category>
      <category domain="http://securityratty.com/tag/increase">increase</category>
      <category domain="http://securityratty.com/tag/alrea">alrea</category>
      <category domain="http://securityratty.com/tag/amount">amount</category>
      <category domain="http://securityratty.com/tag/unknown">unknown</category>
      <source url="http://feeds.feedburner.com/~r/HelpNetSecurity/~3/203009022/virus_news.php">Virus Center: Forecast: How Internet threats will evolve in 2008</source>
    </item>
    <item>
      <title><![CDATA[Security World: iPhone will be a primary target for cybercriminals in 2008]]></title>
      <link>http://securityratty.com/article/1fefd174f0c3a747f0df52441539013b</link>
      <guid>http://securityratty.com/article/1fefd174f0c3a747f0df52441539013b</guid>
      <description><![CDATA[Security predictions released by Arbor Networks reveal that the iPhone will be a major target for cybercriminals in 2008. The forecast also highlights Chinese specific crime as a major issue for the...]]></description>
      <content:encoded><![CDATA[Security predictions released by Arbor Networks reveal that the iPhone will be a major target for cybercriminals in 2008. The forecast also highlights Chinese specific crime as a major issue for the N...]]></content:encoded>
      <pubDate>Wed, 12 Dec 2007 11:06:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/arbor networks reveal">arbor networks reveal</category>
      <category domain="http://securityratty.com/tag/major issue">major issue</category>
      <category domain="http://securityratty.com/tag/iphone">iphone</category>
      <category domain="http://securityratty.com/tag/major target">major target</category>
      <category domain="http://securityratty.com/tag/security predictions">security predictions</category>
      <category domain="http://securityratty.com/tag/cybercriminals">cybercriminals</category>
      <category domain="http://securityratty.com/tag/forecast">forecast</category>
      <source url="http://feeds.feedburner.com/~r/HelpNetSecurity/~3/200290772/secworld.php">Security World: iPhone will be a primary target for cybercriminals in 2008</source>
    </item>
  </channel>
</rss>
