#44 -WHAT COULD GO WRONG? – JOHN MILLICAN

John Millican pixWhat could go wrong?  As an information security manager, I have often been asked that question.  But, there are two ways it is asked.

The first is my preferred way.  It is a genuine effort to identify and evaluate the risk associated with the item at hand.  That is a conversation I want to have.  That is a thought process I want to encourage. Continue reading

#42 – CORPORATE SOFTWARE RISK REDUCTION IN A FORTUNE 500 COMPANY – CAPERS JONES

Capers Jones pixEXECUTIVE SUMMARY
Due to schedule delays, cost overruns, and several canceled software projects the Chairman of a Fortune 500 company decided to bring in outside experts to identify major software risks and develop solutions for those risks.

Initially the new risk abatement team reported directly to the Chairman, which is unusual but effective. The team visited more than 20 software locations in a dozen countries and met with many software managers and technical personnel. Continue reading

#40 – CYBER SECURITY RISKS & PROCESS IMPROVEMENT – ADINA SUCIU

One of the big 2014 trends for IT is the increased shift from being a division supporting the business to becoming more and more a business partner.  When technology is deployed and managed to fully support business processes and advance effectiveness and efficiency on the E2E (exchange to exchange) outside in customer view processes, the overall organization has increased agility that is easier to sustain. Continue reading

#40 – SOFTWARE INFORMATION SOURCES – CAPERS JONES

Capers Jones pixABSTRACT
This list of software information sources is provided as a public service by Namcook Analytics LLC.  Since this report consists primarily of citations to published books, articles, and web sites it is not copyrighted and may be freely distributed.  However the books and articles themselves normally are copyrighted so permissions would be needed to use the actual books and publications shown in this report.

Continue reading

#40 – IN SOFTWARE (AND IN CYBER) ‘FASTER IS SLOWER’ – GARY GACK

GG-photo-20100224“Faster is Slower” is one of the “Laws” formulated by Peter Senge in his book The Fifth Discipline.  This particular “law” plays out with a vengeance in larger software development projects, and often has a secondary negative impact of cyber security.  Let’s look at a rather typical scenario that illustrates this dynamic. Continue reading