<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: forrester]]></title>
    <link>http://securityratty.com/tag/forrester</link>
    <description></description>
    <pubDate>Wed, 06 Aug 2008 13:06:37 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Links List 11.24.08]]></title>
      <link>http://securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</link>
      <guid>http://securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</guid>
      <description><![CDATA[The hunt for the nations first CTO continues . Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/markcuban.jpg" border="0" alt="markcuban" width="240" height="164" align="left" /> The hunt for the <a href="http://weblog.infoworld.com/robertxcringely/archives/2008/11/the_once_and_fu.html?source=NLC-NOTES&amp;cgd=2008-11-17" target="_blank">nation’s first CTO continues</a>. Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at BT; Mark Cuban for his obvious business sense – and in spite of the <a href="http://www.huffingtonpost.com/2008/11/17/mark-cuban-insider-tradin_n_144320.html" target="_blank">insider trading indictment</a> – and Carly Fiorina, former controversial CEO of HP, the next question is what policies should this CTO pursue? Visit <a href="http://obamacto.org/" target="_blank">ObamaCTO.org</a> to view and vote for policies.</p>
<p>SaaS is taking a bite out of the $18 billion IT management market. A <a href="http://www.informationweek.com/blog/main/archives/2008/11/will_it_managem.html?cid=RSSfeed_IWK_ALL" target="_blank">new Forrester Research report forecasts SaaS-based IT management accounts will be 10%</a> of the market by 2013. The reason: high level of interest from medium-sized and large enterprises. Forrester also predicts that enterprises with 1,000 or more employees will account for 50% of SaaS installations in 2009. We’ve seen this on the service desk side with the <a href="http://www.redmonk.com/cote/2007/01/17/service-nowcom-briefing-itil-saas/" target="_blank">rapid growth of upstart Service-now.com</a>. Companies are looking for easier and rapid deployment, lower upfront and capital costs and rapid time to value – all benefits of SaaS as well as our own <a href="http://www.sciencelogic.com/appliancebenefits.htm" target="_blank">appliance model</a>.</p>
<p><a href="http://chucksblog.emc.com/chucks_blog/2008/11/the-speculation-game-ibm-buys-transitive.html" target="_blank">IBM snapped up Transitive</a> this week. Their QuickTransit software dynamically translates native code <a href="http://arstechnica.com/news.ars/post/20081120-ibm-to-buy-transitive.html" target="_blank">between architectures</a>, enabling apps compiled for one processor to be run on another without any modification. Apple was the first licensee and used it to build Rosetta, a translation system that allowed users of Intel Macs to seamlessly run legacy PowerPC apps. IBM plans to use the technology to move workloads onto IBM systems without recompiling, allowing customers to “save on energy costs due to hardware consolidation and reduced TCO.”</p>
<p>At CA World, CA announced a partnership with Amazon to provide “<a href="http://stage.vambenepe.com/archives/442" target="_blank">management capabilities around Amazon’s EC2</a> utility computing platform, potentially including discovery of software running on EC2 instances, performance monitoring, configuration management, software deployment capabilities and provisioning”. John Willis, in spite of some pretty funny potshots and stories about CA (don’t we all have them), writes that “<a href="http://www.johnmwillis.com/amazon/what-color-is-your-cloud/" target="_blank">CA is the first of the Big Four to take the cloud serious</a>”.</p>
]]></content:encoded>
      <pubDate>Mon, 24 Nov 2008 11:15:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software deployment capabilities">software deployment capabilities</category>
      <category domain="http://securityratty.com/tag/software">software</category>
      <category domain="http://securityratty.com/tag/ibm plans">ibm plans</category>
      <category domain="http://securityratty.com/tag/ibm">ibm</category>
      <category domain="http://securityratty.com/tag/apps">apps</category>
      <category domain="http://securityratty.com/tag/legacy powerpc apps">legacy powerpc apps</category>
      <category domain="http://securityratty.com/tag/saas">saas</category>
      <category domain="http://securityratty.com/tag/saas installations">saas installations</category>
      <category domain="http://securityratty.com/tag/market">market</category>
      <source url="http://blog.sciencelogic.com/links-list-112408/11/2008">Links List 11.24.08</source>
    </item>
    <item>
      <title><![CDATA[Steve Hunt on the Physical Security Industry]]></title>
      <link>http://securityratty.com/article/d98515fd4bff98bac60235d37183ac17</link>
      <guid>http://securityratty.com/article/d98515fd4bff98bac60235d37183ac17</guid>
      <description><![CDATA[Security industry consultant Steve Hunt is a self-described rabble rouser. Hunt, a former analyst who once headed up the security research practices at Giga Information Group and Forrester Research,...]]></description>
      <content:encoded><![CDATA[Security industry consultant Steve Hunt is a self-described rabble rouser. Hunt, a former analyst who once headed up the security research practices at Giga Information Group and Forrester Research, now runs Hunt Business Intelligence, an industry advisory firm. His additional background in physical security has made him a central figure in discussion about the interplay of physical and IT security.]]></content:encoded>
      <pubDate>Tue, 11 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/physical security">physical security</category>
      <category domain="http://securityratty.com/tag/physical">physical</category>
      <category domain="http://securityratty.com/tag/security research practices">security research practices</category>
      <category domain="http://securityratty.com/tag/industry advisory firm">industry advisory firm</category>
      <category domain="http://securityratty.com/tag/hunt">hunt</category>
      <category domain="http://securityratty.com/tag/forrester research">forrester research</category>
      <category domain="http://securityratty.com/tag/giga information">giga information</category>
      <category domain="http://securityratty.com/tag/additional background">additional background</category>
      <source url="http://www.networkworld.com/news/2008/111208-steve-hunt-on-the-physical.html?fsrc=rss-security">Steve Hunt on the Physical Security Industry</source>
    </item>
    <item>
      <title><![CDATA[Links List 11.7.08]]></title>
      <link>http://securityratty.com/article/005aeccf95461397bcc44aae9976e6f2</link>
      <guid>http://securityratty.com/article/005aeccf95461397bcc44aae9976e6f2</guid>
      <description><![CDATA[Government contractors spill their thoughts about how Obamas historic win will affect the industry. A majority of those questioned agreed to the fact that nothing will change overnight and everything...]]></description>
      <content:encoded><![CDATA[<p>Government <a href="http://www.bisnow.com/washington_dc_tech_news_story.php?p=1744">contractors spill their thoughts</a> about how Obama’s historic win will affect the industry. A majority of those questioned agreed to the fact that nothing will change overnight and everything will occur within 2-3 years. Others expressed thoughts on who will lead procurement and acquisition policy at GSA and OMB, as well as a possible hiring freeze for the government workforce. We’re also waiting to see what will happen to <a href="http://blog.sciencelogic.com/government-sent-home-with-a-c-on-fisma-report-card/08/2008">FISMA</a> and<a href="http://blog.sciencelogic.com/times-up-ipv6-omb-mandate/06/2008"> IPv6</a> compliance going forward as a new administration and new OMB management sets their own agendas and mandates.<strong></strong></p>
<p>Due to the slow economy, most tech companies are being cautious and ratcheting back sales forecasts for software and hardware. <a href="http://blogs.wsj.com/biztech/2008/10/31/how-to-survive-the-downturn-sell-tech-to-bankruptcy-lawyers/?mod=djemTECH">The exception: Infra-Strategy</a>, a company that operates a group of Web sites that help people find a lawyer and info to deal with bankruptcies, divorces and DUI cases. Visits to the sites are booming – with visits to <a href="http://www.totaldivorce.com/">totaldivorce.com</a>, for example, up 112% in October 2008 (I found the picture on the website particularly compelling). Apparently, in bad times, divorce rates go up. Who knew?</p>
<p>Is it always a recession when it comes to IT Operations? <a href="http://blogs.forrester.com/it_infrastructure/2008/10/how-is-the-econ.html">Companies are constantly trying to find ways to do more with less in IT – reducing costs but keeping the same or even adding functionality</a> – deploying technologies that drive IT consolidation such as mobile and remote access, unified communications and virtualization. Chris Silva of The Forrester Blog for IT Infrastructure &amp; Operations Professionals is looking for a research panel to find out what fellow IT companies are doing to keep their IT budgets in check. To join the research panel visit: <a href="http://itpanel.forrester.com/">http://itpanel.forrester.com/</a>.</p>
<p>The Cloud Computing Monopoly debate continues. O’Reilly Media founder Tim O’Reilly and technology writer Nicholas Carr (of <a href="http://www.computerworld.com/managementtopics/roi/story/0,10801,81045,00.html">“IT Doesn’t Matter”</a> fame/infamy) have been <a href="http://www.informationweek.com/blog/main/archives/2008/11/the_cloud_compu.html?cid=RSSfeed_IWK_ALL">discussing the ‘potential for a single company to achieve monopoly control of the world of cloud computing</a>.’ But what’s even more interesting is the “who will make a lot of money” in cloud computing question.</p>
]]></content:encoded>
      <pubDate>Fri, 07 Nov 2008 19:49:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/research panel visit">research panel visit</category>
      <category domain="http://securityratty.com/tag/research panel">research panel</category>
      <category domain="http://securityratty.com/tag/monopoly">monopoly</category>
      <category domain="http://securityratty.com/tag/achieve monopoly control">achieve monopoly control</category>
      <category domain="http://securityratty.com/tag/tech companies">tech companies</category>
      <category domain="http://securityratty.com/tag/omb management sets">omb management sets</category>
      <category domain="http://securityratty.com/tag/companies">companies</category>
      <category domain="http://securityratty.com/tag/omb">omb</category>
      <category domain="http://securityratty.com/tag/forrester">forrester</category>
      <source url="http://blog.sciencelogic.com/links-list-11708/11/2008">Links List 11.7.08</source>
    </item>
    <item>
      <title><![CDATA[Are There Recession-Proof IT Products?]]></title>
      <link>http://securityratty.com/article/14ee1965cb0a5c1de3818f96fa79e8c8</link>
      <guid>http://securityratty.com/article/14ee1965cb0a5c1de3818f96fa79e8c8</guid>
      <description><![CDATA[You have to live under a rock not to know that the financial crisis is having (and will continue to have for some time yet) a major impact on buying decisions, both corporate and personal. Gartner cut...]]></description>
      <content:encoded><![CDATA[<p>You have to live under a rock not to know that the financial crisis is having (and will continue to have for some time yet) a major impact on buying decisions, both corporate and personal. <a href="http://www.eweek.com/c/a/IT-Infrastructure/With-the-Financial-Crisis-Looming-Gartner-Forrester-Trim-IT-Spending-Forecasts/?kc=EWWHNEMNL10232008STR1" target="_blank">Gartner cut its 2009 IT spending growth forecast</a> to 2.3%, less than half of the 5.8% it originally predicted just in August. And in <a href="http://www.crncanada.ca/index.php/VARBusiness/Gartner-lowers-2009-IT-spending-outlook.html?np=2" target="_blank">North America</a>, even more drastic cuts – growth will be only 0.5%, way down from the original 5.3% predicted.
<p>“Developed economics, especially in the United States and Western Europe, will be the worst affected, but emerging regions will not be immune,” said Peter Sondergaard, the global head of research at Gartner. “Europe will experience negative growth in 2009, the United States and Japan will be flat.”
<p>Forrester is more optimistic (so far). Back in September, the analyst firm revised their prediction downward to an <a href="http://www.techcareers.com/articles/i/ad3910/blogs/information-technology/wall-street-crisis-not-deterring-it-spending-forecasts.htm" target="_blank">increase of 6.1%</a> instead of the original 9.4%.
<p>But both firms agree that the first IT purchases to feel the cut are in hardware – PCs, servers, storage devices, communications equipment, etc. Next up, software purchases and IT servers.
<p>So are <a href="http://www.networkworld.com/newsletters/branch/2008/102008branch1.html" target="_blank">MSPs immune to the economic slow down</a>? With expected layoffs and certainly hiring freezes across the board, turning to MSPs to pick up part of the load is starting to look better and better. At the recent MSP Alliance conference in Chicago, attending MSPs had a rosy view about growth in their industry, with sales cycles actually shortening from 6-12 months down to 2-6 months and 25% of them actually increasing prices in the past six months. It’s a good time to be a MSP.</p>
]]></content:encoded>
      <pubDate>Thu, 23 Oct 2008 18:50:35 +0000</pubDate>
      <category domain="http://securityratty.com/tag/growth">growth</category>
      <category domain="http://securityratty.com/tag/experience negative growth">experience negative growth</category>
      <category domain="http://securityratty.com/tag/drastic cuts growth">drastic cuts growth</category>
      <category domain="http://securityratty.com/tag/msps immune">msps immune</category>
      <category domain="http://securityratty.com/tag/immune">immune</category>
      <category domain="http://securityratty.com/tag/msps">msps</category>
      <category domain="http://securityratty.com/tag/gartner cut">gartner cut</category>
      <category domain="http://securityratty.com/tag/cut">cut</category>
      <category domain="http://securityratty.com/tag/purchases">purchases</category>
      <source url="http://blog.sciencelogic.com/are-there-recession-proof-it-products/10/2008">Are There Recession-Proof IT Products?</source>
    </item>
    <item>
      <title><![CDATA[The Virtues and Dangers of Security and Compliance]]></title>
      <link>http://securityratty.com/article/c851d24e675867c73b9ed6b8c8f43676</link>
      <guid>http://securityratty.com/article/c851d24e675867c73b9ed6b8c8f43676</guid>
      <description><![CDATA[Last week I made a flying visit to NYC to appear on a panel at Interop with John Pironti of Getronics, Khalid Kark of Forrester, Jennifer Mack of the PCI Standards Council and Jim Routh of DTCC. The...]]></description>
      <content:encoded><![CDATA[<p>Last week I made a flying visit to NYC to appear on a panel at Interop with John Pironti of Getronics, Khalid Kark of Forrester, Jennifer Mack of the PCI Standards Council and Jim Routh of DTCC. The subject was &quot;Security By Compliance - A Discussion of Information Risk Management's Greatest Challenge&quot;.</p>
]]></content:encoded>
      <pubDate>Sun, 28 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/pci standards council">pci standards council</category>
      <category domain="http://securityratty.com/tag/information risk management">information risk management</category>
      <category domain="http://securityratty.com/tag/khalid kark">khalid kark</category>
      <category domain="http://securityratty.com/tag/jennifer mack">jennifer mack</category>
      <category domain="http://securityratty.com/tag/jim routh">jim routh</category>
      <category domain="http://securityratty.com/tag/compliance">compliance</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/john pironti">john pironti</category>
      <category domain="http://securityratty.com/tag/visit">visit</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1356">The Virtues and Dangers of Security and Compliance</source>
    </item>
    <item>
      <title><![CDATA[Data security now 10% of IT operating budgets, Forrester says]]></title>
      <link>http://securityratty.com/article/e0e72748905a880fc10fdaa2d0c4be49</link>
      <guid>http://securityratty.com/article/e0e72748905a880fc10fdaa2d0c4be49</guid>
      <description><![CDATA[Abstract: IT security budgets are on the rise, reflecting growing concern over data breaches and increasing CEO involvement in the task of protecting sensitive...]]></description>
      <content:encoded><![CDATA[Abstract: IT security budgets are on the rise, reflecting growing concern over data breaches and increasing CEO involvement in the task of protecting sensitive data.<p><A href="http://ad.doubleclick.net/jump/idg.us.nwf.rss/security;sz=468x60;ord=2577?">
<IMG src="http://ad.doubleclick.net/ad/idg.us.nwf.rss/security;sz=468x60;ord=2577?" border="0" width="468" height="60"></A>
</p>]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ceo involvement">ceo involvement</category>
      <category domain="http://securityratty.com/tag/security budgets">security budgets</category>
      <category domain="http://securityratty.com/tag/sensitive data">sensitive data</category>
      <category domain="http://securityratty.com/tag/data breaches">data breaches</category>
      <category domain="http://securityratty.com/tag/task">task</category>
      <category domain="http://securityratty.com/tag/abstract">abstract</category>
      <category domain="http://securityratty.com/tag/concern">concern</category>
      <source url="http://www.networkworld.com/news/2008/090408-it-budget-data-security.html?fsrc=rss-security">Data security now 10% of IT operating budgets, Forrester says</source>
    </item>
    <item>
      <title><![CDATA[Four quick tips for choosing an IM security product]]></title>
      <link>http://securityratty.com/article/644c4d858c0af28c530dae2d00363c43</link>
      <guid>http://securityratty.com/article/644c4d858c0af28c530dae2d00363c43</guid>
      <description><![CDATA[Instant messaging (IM) has become an increasingly useful business tool for modern corporations. Data from a Forrester Research survey suggests that 71% of businesses will invest in real-time messaging...]]></description>
      <content:encoded><![CDATA[Instant messaging (IM) has become an increasingly useful business tool for modern corporations. Data from a Forrester Research survey suggests that 71% of businesses will invest in real-time messaging this year.]]></content:encoded>
      <pubDate>Mon, 25 Aug 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/modern corporations">modern corporations</category>
      <category domain="http://securityratty.com/tag/business tool">business tool</category>
      <category domain="http://securityratty.com/tag/real-time">real-time</category>
      <category domain="http://securityratty.com/tag/businesses">businesses</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/instant">instant</category>
      <category domain="http://securityratty.com/tag/increasingly">increasingly</category>
      <source url="http://www.networkworld.com/news/2008/082608-four-quick-tips-for-choosing.html?fsrc=rss-security">Four quick tips for choosing an IM security product</source>
    </item>
    <item>
      <title><![CDATA[IBM Raises The Stakes In Business and IT Continuity Services]]></title>
      <link>http://securityratty.com/article/a92cdf5dd8f2018462a4657fa7e717b8</link>
      <guid>http://securityratty.com/article/a92cdf5dd8f2018462a4657fa7e717b8</guid>
      <description><![CDATA[IBM announced today that it was spending US$300 million to build out 13 data centers in 10 countries in 2008 - IBM refers to these sites as &quot;Business Resilience service delivery centers&quot;. These...]]></description>
      <content:encoded><![CDATA[<p><img title="Stephanie Balaouras" alt="Stephanie Balaouras" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Stephanie-Balaouras.gif" border="0" style="FLOAT: left; MARGIN: 0px 5px 5px 0px" /></p>

<p><a href="http://www-03.ibm.com/press/us/en/pressrelease/24957.wss">IBM announced today that it was spending US$300 million to build out 13 data centers in 10 countries in 2008 - IBM refers to these sites as &quot;Business Resilience service delivery centers&quot;.</a> These centers will certainly help IBM deliver more of its traditional IT recovery services but they will also support the next generation of IT continuity services - repeatable, scalable, productize services such as online backup and virtual recovery.&nbsp; These types of services don't require massive capital investment in an inventory of heterogeneous server and storage platforms, instead the service provider can focus its efforts on building a scalable pool of virtualized servers and shared storage built with industry standard components.</p>

<p><a href="http://www.forrester.com/go?docid=42947">Online backup is an important service because it provides an affordable information protection service for small and medium businesses and it's even useful for enterprises as a means to backup PCs corporate-wide as well as small servers at remote locations.</a> In addition to the $300 million that IBM is spending on its new resiliency centers, late in 2008, it acquired <a href="http://blogs.forrester.com/it_infrastructure/2007/12/online-backup-m.html">Arsenal Digital Solutions</a>, one of the major players in online backup. </p>

<p>In addition to online backup, recovery services using software-based replication to a cloud infrastructure will also open up new opportunities. These services will provide a much a better recovery time and recovery point than tape-based services but won't cost nearly as much as custom services based on storage-based replication and dedicated hardware. The cost of these services is more than most small and medium, even some large enterprises can or are willing to pay for. SunGard was the first to announce such a productized service, <a href="http://blogs.forrester.com/srm/2008/08/traditional-dis.html">Forrester expects all the traditional DR service providers to bring similar offerings to market over time.</a></p>

<p>These cloud-based service offerings are important for several other reasons, first, it could help stem the tide of enterprises who are just so fed up with the traditional disaster recovery services model that they take DR back in house, second, it could convince, more medium size businesses that they can afford more advanced IT continuity solutions and lastly, it will help protect their market against new competitors who can simply partner with cloud providers such as Amazon S3 and Google to offer similar services.</p>

<p>IBM is not only using its expansion and acquisitions to stay competitive, it's also also hoping that customers will recognize the value of IBM expertise, process and best practices in BC. </p>

<p>What do you think? Does the reputation and expertise of BC and IT Continuity service providers like IBM and SunGard critical in your decision-making or can new players enter the market? Do these lower cost services that offer better RTO and RPO renew your interest in service providers or do you still plan to keep DR in-house?</p>

<p>I welcome your thoughts.</p>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 11:38:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/recovery">recovery</category>
      <category domain="http://securityratty.com/tag/recovery services">recovery services</category>
      <category domain="http://securityratty.com/tag/continuity services">continuity services</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/ibm">ibm</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/service offerings">service offerings</category>
      <category domain="http://securityratty.com/tag/cost">cost</category>
      <source url="http://blogs.forrester.com/srm/2008/08/ibm-raises-the.html">IBM Raises The Stakes In Business and IT Continuity Services</source>
    </item>
    <item>
      <title><![CDATA[The Growing Security Skills Shortage]]></title>
      <link>http://securityratty.com/article/6f0a31fa5334384c34fb7f51cba96b5b</link>
      <guid>http://securityratty.com/article/6f0a31fa5334384c34fb7f51cba96b5b</guid>
      <description><![CDATA[We are regularly hearing from our security clients about their difficulties finding people with the right skills or when they do finally find them, these people are too costly to employ because their...]]></description>
      <content:encoded><![CDATA[<p><img title="Jonathan Penn" alt="Jonathan Penn" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Jonathan-Penn.gif" border="0" style="FLOAT: left; MARGIN: 0px 5px 5px 0px" /></p>

<p>We are regularly hearing from our security clients about their difficulties finding people with the right skills – or when they do finally find them, these people are too costly to employ because their skills are in such demand.</p>



<p>Indeed, the “unavailability of people with the right skills” was cited as a top challenge for security groups in both our <a href="http://www.forrester.com/go?docid=44366">enterprise</a> and <a href="http://www.forrester.com/go?docid=44692">SMB</a> surveys.</p>



<p>In comparing need for talent across 25 different IT roles, Forrester analysts came to the conclusion that information security experts are among <a href="http://www.forrester.com/go?docid=46400">the hottest roles in IT</a>, sharing the top spot with information/data architects.</p>



<p>The skills shortage is likely to get worse before it gets better. We’re unlikely to see a significant spike in security experts’ salaries to attract those we need to hire: large changes in compensation for senior security personnel would run against the current of economic belt-tightening. Another typical approach to offsetting the shortage would be to train up: foster the career development and advancement of existing security personnel on our payroll. However, with all the outsourcing that is going on – and which will increasingly occur – there is a shrinking pool from which to find people with “the right stuff” worth championing their advancement.</p>



<p>We could look outside of security to others in IT, or even to co-workers in other departments or business groups. But given how poor a job IT Security does of marketing its value proposition, I don’t hold much hope for attracting non-security people.</p>



<p>What do you think? Are we about to hit a very big wall when it comes to skills and staffing? Are you presently feeling the pain of a skills shortage? Do you see such a shortage looming? What measures are you taking to acquire and nurture talent? Which ones are successful and why?</p>



<p>I welcome your thoughts on the topic.</p>

]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 05:02:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/senior security personnel">senior security personnel</category>
      <category domain="http://securityratty.com/tag/security clients">security clients</category>
      <category domain="http://securityratty.com/tag/security experts salaries">security experts salaries</category>
      <category domain="http://securityratty.com/tag/skills shortage">skills shortage</category>
      <category domain="http://securityratty.com/tag/shortage">shortage</category>
      <category domain="http://securityratty.com/tag/information security experts">information security experts</category>
      <category domain="http://securityratty.com/tag/skills">skills</category>
      <category domain="http://securityratty.com/tag/security personnel">security personnel</category>
      <source url="http://blogs.forrester.com/srm/2008/08/the-growing-sec.html">The Growing Security Skills Shortage</source>
    </item>
    <item>
      <title><![CDATA[Traditional Disaster Recovery Services Are Dead]]></title>
      <link>http://securityratty.com/article/91a8e062482df48ac9d61748458d67d9</link>
      <guid>http://securityratty.com/article/91a8e062482df48ac9d61748458d67d9</guid>
      <description><![CDATA[If you still subscribe to fixed site recovery services using shared IT infrastructure from the likes of HP, IBM BCRS, or SunGard, among others, you will quickly become a dinosaur in the next 1 to 2...]]></description>
      <content:encoded><![CDATA[<p><img border="0" title="Stephanie Balaouras" alt="Stephanie Balaouras" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Stephanie-Balaouras.gif" style="margin: 0px 5px 5px 0px; float: left;" /></p>

<p><span style="font-size: 10pt; font-family: Arial;">If you still subscribe to fixed site recovery services using shared IT infrastructure from the likes of HP, IBM BCRS, or SunGard, among others, you will quickly become a dinosaur in the next 1 to 2 years. </span></p>

<p><span style="font-size: 10pt; font-family: Arial;">These types of shared infrastructure services involve lengthy restores from tape and a recovery time objective of 72 hours, at best. Plus, you'll be lucky if you recover at all because chances are, you've had trouble scheduling a test with your service provider and it's been a LONG time since the last one, if indeed you’ve ever tested. </span></p>

<p><span style="font-size: 10pt; font-family: Arial;"><a href="http://www.forrester.com/go?docid=46270">72 hours recovery just doesn't cut it anymore</a>. And frankly, understanding your provider's oversubscription ratio to shared infrastructure to determine the risk of multiple invocations, or attempting to negotiate exclusions zones and availability guarantees is a time suck. Most companies are either taking DR back in-house or, if they still rely on a DR service provider, they are using dedicated infrastructure.</span></p>

<p><span style="font-size: 10pt; font-family: Arial;">A dedicated infrastructure is attractive as it enables replication to improve recovery objectives. But it’s expensive, and puts advanced IT recovery out of the reach of many companies who can't measure downtime in millions of dollars.</span></p>



<p><span style="font-size: 10pt; font-family: Arial;">But, there are new services on the horizon that will make advanced IT recovery affordable for the masses. This month SunGard announced the availability of its new Virtual Server Replication Service. As I discussed in my most recent <a href="http://www.forrester.com/go?docid=44878">Forrester Wave™ of DR Service Providers</a> and <a href="http://www.forrester.com/go?docid=42944">other reports</a>, server virtualization is transforming IT recovery. With replication to a virtualized server infrastructure and shared storage infrastructure, customers can enjoy improved recovery-time and recovery-point objectives without the cost of dedicated and custom IT recovery solutions from the <span class="hilite">DR</span> services provider.SunGard is the first DR service provider to productize these virtual services. I expect other DR service providers to follow suit. <br /></span></p>

<p><span style="font-size: 10pt; font-family: Arial;">So, the next time your contract is up for renewal, you need to completely rethink your approach to IT recovery. Get off tape and move to these new virtual services. It will improve your recovery capabilities and you don't have to worry about the oversubscription issue with shared virtual infrastructure -- the DR provider can manage capacity much more easily in this environment. In fact, SunGard is offering an RTO SLA of 6 hours as part of the offering. To my knowledge, this is the first time a DR service provider is offering this as part of a standard contract. I'm looking forward to the day when vendors will offer most services with transparent, subscription-based pricing, and standard contract terms that don't take a team of procurement professionals to negotiate.<span face="Times New Roman">&nbsp;</span><span style="font-size: 10pt; font-family: Arial;"><street w:st="on"></street></span></span></p>]]></content:encoded>
      <pubDate>Wed, 06 Aug 2008 13:06:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/recovery">recovery</category>
      <category domain="http://securityratty.com/tag/recovery time objective">recovery time objective</category>
      <category domain="http://securityratty.com/tag/recovery-time">recovery-time</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/recovery affordable">recovery affordable</category>
      <category domain="http://securityratty.com/tag/recovery capabilities">recovery capabilities</category>
      <category domain="http://securityratty.com/tag/recovery solutions">recovery solutions</category>
      <category domain="http://securityratty.com/tag/provider">provider</category>
      <category domain="http://securityratty.com/tag/recovery-point objectives">recovery-point objectives</category>
      <source url="http://blogs.forrester.com/srm/2008/08/traditional-dis.html">Traditional Disaster Recovery Services Are Dead</source>
    </item>
  </channel>
</rss>
