Have you ever been sucked into the false debate over how much IT spending should be spent on security?  I used to all the time.  Some folks point to a rule of thumb that goes something like “ten percent of the IT budget should be applied to security.”  That old school formula may well...
Read More »

If you are a technologist, please take a moment to download the PDF of the report by the U.S. Commission on Cybersecurity.  This report, titled Securing Cyberspace for the 44th Presidency, is the best proclamation of the challenges of cyber I have read.  It is also a roadmap that will help any trying to...
Read More »

My last several briefings, including one yesterday at the FIAC, have addressed some of the dramatic changes underway in the IT world.   That briefing is attached here: Download FIACGourleyBrief.pdf The conference had a focus on information assurance, computer security, network security and Chief Information Assurance Officers (CISO) in the federal space.   So I not...
Read More »

There are some interesting analogies between performance management applied to organizations and performance management applied to computers. In both cases, performance metrics are crucial to success.  In organizations, what we reward gets measured, and what gets measured can be more efficiently and effectively done.   In our computers, what we decide is important gets measured,...
Read More »

In 2002 congress passed the E-Government Act.  It mandated that the approximately 300 federal entities that can make rules expose those rules in a modernized way and also specified that regulations in draft will be exposed so comments can be solicited. The government’s response: OMB and CIO’s from throughout the government established an eRulemaking...
Read More »

I’ve previously blogged about Triumfant, a company that has mastered the automated detection and resolution of IT problems.   I also think of them as the world’s greatest compliance monitoring capability.  What do I mean by compliance?  I mean compliance in the context of the many rules, regulations and configurations that external organizations and the...
Read More »

In January 2008 I was named to the advisory board of Triumfant, a company who has mastered the automated detection and resolution of IT problems.  Of all the IT firms I’ve seen, they are the ones with the most comprehensive approach to automated resolution management and the only one I’ve seen that can automate...
Read More »