Can We Ever Get Away From the Sprawl?: Using ITIL to Organize IT

This song lyric, which is the title of this post, describes how it’s hard to break away from cities that continually grow and how that continual growth results in dead islands within cities that ultimately affect our behavior.

Modern organizations are often similar to cities in this respect. They grow over time, and pieces of them become somewhat obsolete islands. The effect this has on IT is paramount. We end up with functionally obsolete aspects of technology such as applications, servers, storage, tapes, printers, user IDs, and myriad other technology artifacts that offer little more than increased risk to the organization.

Read more

Risk Management with RSA’s Archer GRC Framework

Risk is something we deal with on a daily basis. Living in New Jersey and having the occasional storm, I’ve recently performed my own risk assessment determining the value of certain assets and activities and made a decision on what I was willing to spend to reduce risk to what I perceived as an acceptable level. My management of risk was a rather simple case. Sure, in my revised business continuity plan for my home, I’ll make sure that I have more D cell batteries, have my garage door adjusted so it opens manually again, more food I can heat on a stove and that doesn’t rely on refrigeration, and finally I’ll consider a whole house gas generator that uses natural gas, which has always been available to power critical systems like the sump pump in my basement. What if, however, I was a really large business? One with lots of components and interdependencies that require a tight integration in order to succeed? How and where can a large volume of information necessary to management, business continuity, and disaster recovery be correlated and communicated to those individuals who, because of their roles and responsibilities, need to make the critical decisions regarding the management of risk?

Read more

PMP Exam Prep Question of the Week

You are managing a process improvement project that is attempting to improve the efficiency of technical processes for offshore drilling operations. Which quality control tool would you use to determine if there was a relationship between the length of the team’s work shifts and the number of safety incidents reported?

Read more