Posted on Fri, Apr 06, 2012 @ 01:14 PM
This month’s collection of top IT industry articles takes a look at IT talent, mobile management, disaster recovery (DR), the post-PC era and business strategy, as well as a few industry headlines. Enjoy!
IT & Business Strategy
Cloud computing affects every aspect of your business and stimulates disruption through automation. To be truly effective, it Calls for a Rebuilding of Enterprise IT, not simply a swap out of existing technology. For this reason, CIO.com’s Bernard Golden (@bernardgolden) recommends a complete reevaluation of IT processes and skills for the cloud, with a focus on the following:
- Remove legacy IT costs by moving to SaaS applications when possible.
- Re-architect the application development process to speed production and simplify ongoing management.
- Restructure IT operations to eliminate manual installation and configuration.
- Use real-time feedback and analytics, and application characteristics to guide financial decisions.
When creating your strategy, remember that IT strategy no longer stands alone; it must be integrated into a larger business strategy.
IT Job Demand
The number of cloud computing jobs posted online grew 92% in the past year, with opportunities mostly stemming from service providers, such as VMware, Microsoft and Amazon, according to a report by Wanted Analytics.
Due to this staggering growth, the talent pool is unable to meet demand. This makes it harder for companies to find and recruit qualified cloud professionals, particularly software engineers, systems engineers and network administrators. However, it opens up a wealth of opportunities for those candidates that do have the required skill sets.
Feeling rusty? MCPc offers advanced Citrix training through our Citrix Authorized Learning Center. Learn more about upcoming classes in XenApp and XenDesktop.
Post-PC Era
Gartner Says the Personal Cloud Will Replace the Personal Computer. Instead of relying on a single device, consumers will shift between several (i.e. smart phones, tablets, laptops, etc.) with the cloud enabling seamless transitions between them.
This trend is driven by several factors, including: consumerization, virtualization, app-ification, the ever-available self-service cloud and the mobility shift. It’s also the driver behind our recently announced anyplace workspace architecture.
For more on the growth of smart phones and tablets, and device usage, check out Business Insider’s The Future of Mobile.
Mobile Management
In the post-PC era, mobile device security takes center stage. Pamela Lewis Dolan (@pdolan_amnews) provides tips on How to Ensure a Lost Mobile Device Won’t Cause a Data Breach. While recommendations are geared toward the medical community, they are applicable across industries:
- Pick the right mobile device and security apps based on your usage needs and data types. Use product reviews and recommendations to sift through available products and find the most trusted providers.
- Encrypt data and phone calls.
- Employ passcode locks and application passwords to prevent unwanted access.
- Set your device so that data can be wiped if lost or stolen.
- Restore the operating system back to factory settings before disposing of any device.
DR in Virtual Environments
Robert L. Scheier (@BobScheier) recommends using virtualization and data replication technologies to achieve cost-effective disaster recovery in his article, Disaster Recovery on Double Duty.
As you account for DR in traditional server environments, so you must in the cloud. If a server fails, virtualization enables you to shift critical workloads off it and onto a server that hosts less critical workloads—deferring non-priority workloads until later. This way, DR is achieved using existing hardware, instead of paying for equipment that sits idle during normal operations.
In addition, replication software lets you copy data and transfer it to a recovery site in near real time (instead of having to ship tapes offsite). Like virtualization, this saves time and money, without sacrificing network uptime.
In the News
- Wyse Technology introduced the T10 zero client that provides a low-cost, secure and zero management solution for virtual desktops built on Citrix, Microsoft, Quest and VMware platforms.
- Apple released the iPad 3. With the best (arguably?) and most cost-effective tablet on the market, the company may be ushering in the post-PC era.
- A Citrix study found that 93% of organizations will implement “workshifting” policies by the end of 2013, providing greater flexibility and mobility for employees.
- Nearly 1 billion connected devices (PCs, laptops, smartphones and tablets) were shipped in 2011. IDC expects this number to double by 2016. (Source)
What articles did you enjoy last month? Please share your thoughts and additional resources in the comments below.
This post is an MCPc blogging team collaboration.
Posted on Fri, Mar 30, 2012 @ 02:10 PM
This blog post discusses highlights of Andy Jones’ interview for the Forrester report: Building A Successful RFP for Desktop Virtualization, by Clarence Villanueva (@cvillanu). For the Forrester blog post and link to full article, click here.
With demand on the rise for greater workforce mobility and mobility management in the enterprise, desktop virtualization (DV) is a sound solution that:
- Allows for controlled and secure employee access to enterprise information across multiple devices.
- Converts devices into thin clients, lengthening lifecycles of those devices.
- Enables IT management updates and enforced compliance requirements from a central source.
I know what you’re thinking: “Sounds great, Andy. Let’s put out an RFP to go with a virtualized desktop solution.”
Before you do, note that Forrester research finds that during the DV RFP process, incomplete or unclear information and project goals are often sent to potential vendors, and the result is unfulfilled RFP requirements and misguided DV proposals.
Earlier this year, I had the chance to discuss desktop virtualization with Forrester’s Clarence Villanueva (@cvillanu), specifically in regard to the RFP process. Interview findings combined with Forrester’s Forrsights for Business Technology survey results detail four key elements companies should incorporate in the RFP process to avoid said missteps.
4 Steps toward Your Successful DV RFP
To complete a successful desktop virtualization RFP, companies must consider the full scope and impact of desktop virtualization. It includes everything from a completely assessed IT inventory to defined goals and DV impact analysis.
- Define Project Goals. How will you know that DV implementation is a success? Give potential vendors a measuring stick to work toward so they can develop the right strategy to achieve your most important business goals.
- Describe Current IT Ecosystem (in comprehensive detail). When we receive an RFP, the first questions we must address to propose a workable solution center around the client’s existing environment. What type of user environment, network, security, storage and licensing processes are in place? Each is highly impacted by a move to a virtualized environment, and therefore must be included in the original RFP.
- Develop Vendor Questions. Now that you know what you’re working with and the end-goal in mind, develop questions to differentiate potential vendors—both in terms of product offering and service offering. Use this stage of the vetting process to know what you can expect in terms of completed implementations, industry expertise, and specifics on the recommended DV solution.
- Assess Impact and Environmental Changes. How will implementation change the environment, and does it align with your organization’s short- and long-term IT and business goals? Think about how DV affects people, processes, infrastructure and SLAs/SOWs.
For more information and resources that will help your company further develop its virtual desktop RFP, read the Forrester blog post and detailed report findings.
Final Thoughts
Virtualized desktops mean better access and security for a mobile workforce, as well as better IT management and control.
If you have questions about taking your enterprise to a more virtualized environment, or would like to share successes and challenges along the way, please post in the comments below.
 |
Andy Jones is Senior Vice President of Sales. He has more than 15 years of IT industry experience, and is an expert on cloud, virtualization and managed services solutions. Connect with Andy on LinkedIn.
|
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Image credit: twicepix
Posted on Fri, Sep 16, 2011 @ 09:16 AM
We’re finally coming down from the VMworld 2011 high, as the show themed “Your Cloud. Own It.” hit records of more than 19,000 attendees and 175 breakout sessions.
It’s an invigorating feeling to be among providers like VMware, our customers and other IT leaders, as together we learn to leverage virtualization and the cloud to make information technology a total business solution. In this post, we examine some of the underlining themes and takeaways from VMworld 2011.
The Cloud Era Is Here
In his keynote, Paul Maritz, chief executive officer of VMware, said that the new way of computing is “not just about technology,” but that it will require changes in people, processes and business operations to reach the highest potential.
Imagine upgrading your vehicle from a Honda to a Ferrari. If you change the car, but not your driving style, you’ll see less improvement than you would if you learn to take advantage of the features a Ferrari has to offer. Similarly, upgrading to virtual and cloud technology can drive considerable business results, but only if strategically engineered and managed.
Post-show survey results revealed that while nearly 75 percent of VMworld attendees are currently building or operating in the cloud, with 58 percent of the remainder planning to do so in the best year, more than half of all respondents’ organizations do not have cloud management strategies.
As discussed in a recent MCPc roundtable session, overcoming the challenges along the path to the cloud is complex and takes input from an entire organization. To transition to the cloud successfully, we recommend customers strategically “walk their way to the cloud,” a concept VMworld confirmed.
Next-Gen Applications & Automations
Application development was highlighted as a component critical to cloud adoption, as organizations await a “new generation of applications.” While many of today’s apps are coded to compute serially or linearly, end users have called for more rapid responses. Business needs include access to cloud-based infrastructures, up-to-date data and real-time computing.
Automating virtualization and cloud management was another key topic discussed by VMware representatives — expect to hear more on this in the coming months. While current environments have historically been created and administered manually, the expectation is improvements in vSphere and the management toolsets such as vCenter Operations and vCloud Director means these technologies will be far more “public utility” in form and function. Finally, elastic cloud infrastructure has arrived with the “plumbing” able to be turned on like a light bulb; as long as your organization is ready to make the people and process changes needed to embrace this tectonic shift in compute power
Virtualization and cloud automation would enable IT managers to spend less time on administrative tasks, and focus more on taking advantage of agility enabled by the cloud, to help their organizations improve business processes, innovations and information access.
IT: Delivering Solutions
-
It’s no longer about delivering technology. It’s about delivering solutions.
-
It’s no longer about STRICT CONTROL and LOCK DOWN of mobile device management. It’s about managing the users so they can connect to the enterprise from any device, easily and securely.
These two trends were evident throughout VMworld 2011, and they reflect a business practice we believe in at MCPc: With the proper infrastructure and tools in place, leveraging technologies like virtualization and cloud can put IT in a position to truly advance the business as a whole. As the roles of CIOs evolve, IT’s strategy must also advance to address holistic, modern business needs.
Keynotes & Comments
Check out the recorded keynote sessions on VMware.com. Maritz in particular provided an inside look at how cloud computing is shaping the next generation of IT. Tuesday’s address from VMware chief technology office and senior vice president of research and development, Steve Herrod (@herrod), showcased a comprehensive cloud infrastructure for the enterprise.
What did you think of VMworld, and what takeaways do you plan on incorporating into your business’ IT strategy?
|
Andy Jones is Senior Vice President of Sales. He has more than 15 years of IT industry experience, and is an expert on cloud, virtualization and managed services solutions. Connect with Andy on LinkedIn.
|
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Image credit: dellphotos
Posted on Tue, Sep 06, 2011 @ 08:39 AM
Each month, we share a collection of articles that provide insight into the ever-evolving world of IT. August’s roundup looks at: unified communications, data management, the IT job landscape, and recent news from Hewlett-Packard and Apple.
Unified Communications
Unified communications provides the tools to make collaboration simpler than ever before and much more engrained in an organization’s processes. At MCPc, we refer to this as intuitive collaboration.
When implementing unified communications, Bob Hockman suggests developing a UC Assurance Plan to ensure a seamless experience for users. In his article, “Unified Communications: Speeding Time to Acceptance,” he outlines the key components of this plan, including pre-deployment testing, and the ongoing monitoring of user experience and network traffic.
For more on unified communications solutions, see Marty Parker’s thoughts on Gartner’s 2011 UC Magic Quadrant, over at Unified Communications Strategies.
Data Management
According to Dell’s Brandon Canaday (@wbcanaday) in his “Data Management Manifesto,” many organizations struggle to keep up with rising storage costs, as the amount of data grows exponentially in the virtual era.
To solve the problem, Canaday advocates for organizations to employ an active archiving solution that reduces static data, limits the amount of data that needs to be backed up and cuts storage spending.
For more on data management, read “Modularity Does Not Necessarily Mean Uniformity” by IBM’s Steve Sams, in which he explains that modular data centers do not have to take a one-size-fits-all approach.
IT Job Landscape
IT hiring remains strong despite economic fears. In fact, IT jobs in Cleveland grew 107 percent in the past year. So, what does it take to secure your dream job? CIO’s Meredith Levinson (@meridith) offers tips for improving your resume, including:
-
Portray your personal brand.
-
Provide an executive summary that highlights expertise and experience.
-
Communicate your functional niche, such as healthcare, Fortune 500 or startup.
-
Display concrete accomplishments, or business goals you achieved.
-
Make your resume easy to read and scan.
For additional resume suggestions from MCPc, read “Your Resume Has Five Seconds to Make a Good Impression.”
August IT News
Hewlett-Packard
In conjunction with the release of its third-quarter earnings, HP announced plans for significant changes within the organization, including exploring strategic alternatives for its PC business, ending its webOS TouchPad and webOS phone business, and acquiring information management software vendor Autonomy.
For more on HP, read GigaOm’s “Without PCs, HP Must Capitalize on the Cloud” and MSPMentor’s “HP’s New Direction: Five Critical Lessons for Your Business.”
Apple
Steve Jobs resigned as Apple CEO. Learn more about how Apple unintentionally revolutionized corporate IT during his tenure, as well as how CIOs can emulate Jobs’ leadership success.
What Do You Think?
What articles, blog posts, videos or podcasts did you find interesting last month? Post a comment, and we’ll be sure to keep an eye on those sources and topics for future articles like this one.
This post is an MCPc blogging team collaboration.
Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Posted on Fri, Jul 01, 2011 @ 07:25 AM
Transitioning to a cloud-hosted infrastructure can present a wealth of advantages to companies. As a result, most CIOs expect cloud penetration to rise 40-50% within the next five years.
However, this transition should be approached cautiously, as cloud computing is more than a technology play; it affects the way the business as a whole is run. Below are five tips for a smooth move to the cloud.
1. Assess Your Current Business Needs
According to Sandra Hamilton from EMC Consulting, the first step is to consider the business reasons for moving to the cloud.
-
What benefits are you hoping to achieve?
-
What can the cloud help you deliver?
-
How will you measure success?
These objectives will drive your overall strategy and help establish your case for a cloud-based environment. It will also help you determine what type of infrastructure (private, public or hybrid cloud) is best for your organization.
2. Review Your IT Infrastructure
Next, take a look at your current IT infrastructure to identify where improvements can be made, and how updates will affect the overall ecosystem and business processes. Some key items to consider include:
-
What devices (desktops, laptops, tablets, thin clients, etc.) are in use?
-
What are your end points? How are they secured?
-
How and where do end users access printers?
-
How do you handle data storage? How are files backed up?
-
How is the network designed? What systems do you regularly use and rely on, and how are they accessed?
-
What security concerns might you face?
-
What regulatory and compliance issues must you adhere to?
During this phase, InfoWorld’s J. Peter Bruzzese recommends taking a close look at your data and security needs. While provider service level agreements and data encryption can protect some of your assets, he explains that “not all data may be suitable for the cloud,” and that you might want to hold on to sensitive information internally.
After reviewing business drivers and your current technology infrastructure, you can then begin to create a roadmap that outlines planned updates. We’ll discuss these in more detail later.
3. Obtain Buy-In from Executives and Employees
During the planning process, it’s important that candid conversations are had with all C-level executives, as well as with employees, to get their buy-in. Cloud computing can impact corporate culture, employee devices and the end-user experiences. Therefore, discussions should be held upfront on the benefits and potential challenges. This will prevent roadblocks later and ensure everyone is on the same page moving forward.
4. Evaluate Providers and Solutions
In moving to the cloud, you are exchanging technology control for lower costs, better scalability and reliability, and less ongoing maintenance. As a result, CIO’s David Taber recommends you consider the following when evaluating vendors and cloud services:
-
Ensure contracts and service level agreements provide the security and user access privileges you require.
-
Understand that cloud services providers will manage in the best interest of their overall business; this may not always be what is most convenient for you. As changes are rolled out to cloud services, plan on preparation and testing from your internal team.
-
If you’re thinking of using a free service, consider alternative options in case that provider goes out of business or puts their services behind a pay-wall.
When dealing with service providers, Bruzzese also adds that you should get everything in writing, and know how you can reclaim your data should you choose to move it back in-house or to another provider. He also recommends qualifying your provider by considering how long they have been in business, the security systems they have in place and how they handle your data.
5. Ease into the Technology Transition
As mentioned previously, transitioning to the cloud usually involves four major steps – server virtualization, application and/or desktop virtualization, private cloud and public cloud. Developing a roadmap for your move to the cloud, and following this process ensures that the proper infrastructure is in place before moving on to the next step.
By taking a strategic approach to cloud computing, you can ensure the best possible solution for your organization’s unique culture, processes, needs and objectives.
Learn more about MCPc’s approach to cloud computing.
Your Thoughts?
-
Have you transitioned to the cloud? What tips would you recommend?
-
What are your key concerns about moving to the cloud?
-
What steps have you put in place to prepare for a cloud-based infrastructure?
|
Andy Jones is Senior Vice President of Sales. He has more than 15 years of IT industry experience, and is an expert on cloud, virtualization and managed services solutions. Connect with Andy on LinkedIn.
|
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
image credit: deansouglass
Posted on Tue, May 10, 2011 @ 01:20 PM
As technology continues to drive innovation, an increasing number of higher education CIOs are taking IT services off campus and cashing in on the benefits of data center consolidation.
Often a central focus of the overall IT environment, approaching data center consolidation, virtualization and even cloud technology with long-term vision can make higher education CIOs the most valuable force on campus, and can bring agility for the university’s lasting growth and success.
The Evolving IT Landscape
A 2010 technology survey found that reducing energy costs and data center consolidation strategies are top-of-mind for higher education CIOs.
- 74% have or are developing programs to reduce IT energy use and are familiar with the EPA’s ENERGY STAR Rating for Data Centers program, but only 13% track Power Usage Effectiveness (PUE) — the core measurement for the EPA ENERGY STAR Rating, which is the ratio of total power into the data center compared to the power used by IT.
- 78% have or are developing specific data center consolidation strategies.
Data consolidation and off-campus service trends continue within The Chronicle’s CIO Leadership Board survey, which examines functions handled off campus. Email and social networks are most often pushed off campus; others include applications, desktop tools, and administrative functions such as grading, registration and admissions.
What Does the Data Center in Higher Education Look Like?
As the central location for all computing resources, the data center is the starting point for a strategically managed IT environment. It includes your servers, networks, technology equipment, applications, software, management tools and IT team.
Consolidation means simplifying the IT environment with increased manageability, which has many benefits, including:
- Reduced IT costs
- Decreased energy consumption
- Strengthened security
- Improved accessibility and business agility
- A framework for expansion into future technology
Overcoming Barriers
Two of the most common barriers higher education CIOs face in efforts to consolidate data centers are decreasing budgets and senior management priorities, which are usually not focused on data center consolidation.
A CIO’s path to data center consolidation includes a foundation that overcomes these challenges and wins internal buy-in for data center consolidation.
- Research. Knowing the data behind data center consolidation (case studies, standards, primary interviews) makes you the expert, and gives your recommendation more weight among decision makers.
- Think holistically. Show that data center consolidation not only benefits IT, but has lasting university advantages and impact (green initiatives and commitments, growing mobility and agility for future students and programs, reduced costs, etc.).
- Do the math. Make the decision into a financial “no-brainer” investment. Evaluate your existing budget, then use results from other universities and relate those to your IT environment.
- Leverage free programs. The EPA and DOE have free tools and programs that can assess data center improvements and validate investments. Measure while planning, throughout the process and after completion.
- Attend workshops. Consolidation can be a daunting task. Available workshops specific to higher education data center consolidation are valuable resources critical for success.
- Do an assessment. Work with a partner to secure third-party support on your plans, develop a strategic design based on your college or university’s data use, storage needs and future objectives.
Making the Grade: Examples of Successful Consolidation
Taking a look at some of the lessons learned by peers and examining higher education IT case studies is one way that CIOs can define considerations about their own IT landscape and consolidation.
Examples of recent successes and thoughts on the topic from university CIOs follow.
Your Thoughts?
Is your school considering data center consolidation? Please share your questions, concerns and lessons below.
MCPc recently worked with Malone University in Canton, Ohio to consolidate its data center. Read the Solution Spotlight or watch a video interview about their experience.
 |
Perry Szarka is a Solution Consultant at MCPc with expertise in data storage and network infrastructure. He works closely with clients to understand their business objectives and discover solutions to help them achieve their goals.
|
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Image credit: xedos4 / FreeDigitalPhotos.net
Posted on Thu, May 05, 2011 @ 07:22 AM
Each month, MCPc shares a collection of articles that provide insight into prominent IT topics. April’s roundup takes a look at: data center redesign, server virtualization vendor evaluation, tablet adoption, Amazon’s cloud outage, and a revamped Cisco.
Green Data Center Design
In the article Facebook's 'Green' Data Center Design to Have Ripple Effect, Carolyn Duffy Marsan provides an inside look at Facebook’s new and innovative data center design, one that’s 38 percent more energy efficient than conventional designs and scores one of the lowest Power Usage Effectiveness ratings ever recorded (1.07). The design is sure to have a significant effect on future corporate data centers.
And, in 8 Radical Ways to Reduce Data Center Power Costs, Mel Beckman offers some tips, including:
- Power off unused servers.
- Turn up the heat, and redirect data center heat to make office spaces more comfortable.
- Use direct current to feed power and reduce AC-to-DC conversion.
For additional methods and more details on the above, read the complete article.
Virtualization: Vendor Evaluation
In Virtualization Shoot-out: Citrix, Microsoft, Red Hat, and VMware, Paul Venezia reports on a comparison of these server virtualization solutions — by measures including ease of installation, management capabilities, storage, speed, support and more.
The results? “All four solutions combine very good hypervisor performance with rich sets of management tools. But the solutions are not all equal in either performance or management.”
VMware, the early leader in virtualization, still has the most advanced capabilities and best level of consistency… along with highest price tag. (Although, Venezia points out that hidden, long-term costs may drive up the TCO on other available solutions.)
See the full article for testing results, displayed in tables and graph format when possible.
BYOD, Early Tablet Adoption a Must
There’s No Reason to Delay, CIOs Should Be Experimenting With Media Tablets in Business, according to Gartner. The research and advisory company calls for enterprises to shift their thinking on the acceptance of mobile devices in the workplace, particularly regarding the support of employee-owned tablets. Gartner finds that, after learning their lessons from slow smartphone adoption, CIOs are determined to incorporate tablets to the enterprise early.
Rather than a replacement for the laptop or smartphone, the tablet is a valuable complement. Currently, there is heavy demand from enterprise sales leaders who see the iPad and other tablets as valuable tools for sharing information and accessing data while mobile. Gartner also points out additional uses, such as establishing more personal connections between doctors and patients, or retail clerks and their customers, by using the devices to develop and walk through customized programs.
David Willis, research vice president at Gartner, sums up the argument for tablet adoption simply: “The opportunities are huge.”
Amazon Cloud Collapse
A recap of April’s IT news would not be complete without mention of Amazon’s April 21 cloud collapse. Amazon released its Summary of the Service Disruption on April 29, which covers what happened, the cause, and processes Amazon is putting into effect to prevent a similar event in the future.
In David Linthicum’s post, The Failure Behind the Amazon Outage Isn’t Just Amazon’s, he strikes a main point that cloud users must realize: removing risk in the cloud is an integral component of your cloud adoption strategy.
Just like IT of the past, in the cloud it is necessary to architect around the potential loss of a major component, and not stack all of your data in a single location. Becoming overly dependent on their cloud provider (Amazon), and not considering important factors like redundancy and control, was a key cause for companies hit hardest in the outage.
See Charles Babcock’s article, Amazon Cloud Outage Proves Importance of Failover Planning, for the story of two companies that survived the crash “without business disruption.”
Learn about our approach to cloud computing consulting, which is cemented in a thoughtful, strategic path to the cloud that helps to ensure business continuity.
A Revamped Cisco?
As it expands in the face of virtual market opportunities, many say that Cisco needs improved focus. Recent events — like the dissolution of its flip camera and refocus on enterprise, network-centric platform strategy — have put Cisco in the spotlight of its investors and within the technology industry as a whole.
In What Would a Revamped Cisco Look Like? Jim Duffy examines Cisco’s current state and future projections for a leaner, more focused operations. The company’s main messages are business alignment and adjacent market focus — with close attention to what’s made Cisco successful to this point, and how it can capitalize on those areas for future growth.
On the Cisco blog, president and CEO John Chambers asked employees, “What do you want Cisco to be?” His own answer to the question follows:
"I want it to be a company that keeps changing the way the world lives, works, plays and learns … A company that knows how to win and intends to continue that track record. A company that's taking the network where it needs to be, with focus. And at a place that puts people, customers and communities at the core of its values. That's Cisco, no excuses."
As a Cisco Gold Certified Partner, we’re excited to see what lies ahead.
What Do You Think?
What articles, blog posts, videos or podcasts did you find interesting last month? Post a comment, and we’ll be sure to keep an eye on those sources and topics for future wrap-up articles like this one.
This post is an MCPc blogging team collaboration.
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Posted on Mon, Apr 11, 2011 @ 02:42 PM
Each month we share a collection of articles that provide insight into the ever-evolving world of IT. March’s roundup looks at: the changing role of the CIO and IT departments, the case for BYOT (Bring Your Own Technology), how upgrade your network for mobile employees, cloud computing security, and trends in data center design.
IT Industry & Expectations
In The Four Personas of the Next-Generation CIO, R “Ray” Wang focuses on the advancement of the role of CIO as it assesses new and disruptive technologies with a business purpose in mind.
Wang outlines the personas he anticipates for the next-generation CIO:
- Chief “Infrastructure” Officer – responsible for cost reduction and technology.
- Chief “Integration” Officer – responsible for connecting internal and external ecosystems.
- Chief “Intelligence” Officer – responsible for bringing the business actionable insights, and improving access to information and data.
- Chief “Innovation” Officer – responsible for identifying disruptive technologies for pilot projects through trial and error.
For more on the changing expectations for CIOs, see our blog post, The Evolving Role of the CIO.
In Stewardship, Not Ownership: It’s Time for IT to Give up on Control, Bob Lewis argues for IT to shift from the ownership and regulation of technology to application, device and user management.
Several historical and current trends combine to indicate the need for a fresh look at IT’s role:
- Changes in IT responsibilities over time (from the 1960’s to present day)
- The consumerization of IT and increased sophistication of end users
- Changing computing processes that put end users in more control of their technology assets
Lewis argues that IT departments need to let go of control and take advantage of new opportunities provided by becoming “stewards, not owners,” of the company computing processes.
For more on the trends driving Lewis’ recommendations, as well as a few “baby steps” to help you get started, see his complete article.
Bring Your Own Technology (BYOT)
As employees continue to bring their own devices — such as personal laptops, smartphones and tablets — to the office, some companies are starting to transition from supporting only standard, recognized corporate devices to creating “BYOT” (or BYOD – Bring Your Own Device) workplaces.
In the article, Is it Time for Bring Your Own Technology? John Parkinson outlines three trends that are making BYOT a more likely reality for many organizations:
- Mobility – Today’s innovation is focused on mobility and evolving technology in the mobile market. Advancements in this technology have also upped the cost of a mobile device, making BYOD even more attractive.
- Virtualization – With end-user technology as an access point, companies can allow multiple devices to log in securely through device identification and user authentication.
- Contracted Support – When working with partner organizations and consultants, it’s unlikely that you can dictate the technology they use, but you’ll likely need to provide support for their devices when used within your environment.
To learn more about these trends, check out the new section of our website focused on managing mobile devices in the workplace, and BYOD options.
Mobility
Galen Grumen discusses the fallbacks of local area networks (LANs) in today’s IT landscape, and shares a new technology designed to help push LANs into the post-PC era, in his article, In the Smartphone Era, Why is Your LAN Still Dumb?
As Gruman states, “the network itself is not architected to handle the post-PC environment rapidly developing at many businesses. LANs are generally designed under the assumption that each user works in a designated space, so an Ethernet port is a proxy for a specific user.”
This article describes a possible solution from Aruba Networks: a set of network-management tools called Mobile Virtual Enterprise that includes wired switches, wireless access points, iPad and iPhone self-registration, VPN and more. The solution provides enhanced visibility into what devices are connecting to your network when, as well as security controls.
Expect to see similar solutions arise, and talks about network stability continue, as mobility support comes to the forefront with increased use of personal devices in the workplace.
Cloud Computing
One of the top concerns among executives thinking about a move to the cloud is security. In his article, Simon Crosby discusses Why the Cloud is Actually the Safest Place for Your Data.
In traditional IT environments, data security issues arise when organizations loose control of the data. Questions like, “How is data stored and transmitted?” and, “What do end users do with that data?” could show leaks in the security of any infrastructure.
From data center to delivery to endpoint, clouds can give control back. With defense resources far beyond anything most corporations could match with in-house data centers, reputable cloud providers are equipped with vast and deep resources for data management and control.
For details on the security advantages you can find in the cloud — including back-end automation, data accessibility models and new methods for endpoint security — see the complete article.
Looking for more on cloud computing? Check out David Taber’s Cloud Computing: Advice for Application Control Freaks, which discusses benefits and drawbacks of private and public cloud solutions, and how to choose what’s best for your company based on both cost and business impact.
Green Data Center Design
According to Pike Research, global investment in energy efficient data center technology will represent 28 percent of the $150 billion data center infrastructure market by 2015.
The study also identifies seven key trends driving the move toward green data center design, such as virtualization, dynamic infrastructure, increased business value of data centers and modularity. For more, see the complete report, Green Data Centers (requires registration).
What Do You Think?
What articles, blog posts, videos or podcasts did you find interesting last month? Post a comment, and we’ll be sure to keep an eye on those sources for future wrap-up articles like this one.
This post is an MCPc blogging team collaboration.
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Posted on Mon, Mar 28, 2011 @ 10:00 AM
According to the 2010 Network Forensics Survey of more than 200 security professionals, “35% [of respondents] said they have had a significant security incident within the last 3 years, and 82% said that it's likely they will experience a significant incident within the next 3 years.”
Despite this understanding of risks, findings also showed that few organizations have the processes in place to effectively identify, determine the scope of, and respond to security breaches.
So, how can IT security professionals most cost-effectively secure their environments? By investing first in the areas that pose the biggest potential risk, and determining the proper solutions for their business’ unique needs and user base.
In my opinion, there are four key areas to consider when developing a comprehensive security plan: Network Security, Data Security, Device Security and Personnel Security. Below, I’ve outlined some basic best practices that you can implement easily in each of these areas.
Network Security
- Patch all OS and device firmware regularly as soon as vendors release them.
- Ensure that all the networking devices — including routers, switches, and access points — are protected by strong passwords.
- Ensure that remote access to network devices via Telnet and SNMP are restricted based on the IP address and granted to only authorized IT support personnel.
- Provide log-on banners such as Message of the Day (MOTD) for networking devices like Cisco routers and switches with a legal warning message to any unauthorized users attempting to access the device.
- Encrypt Internet and wireless communications and ensure that encryption keys are regularly changed in a secure fashion to prevent eavesdropping and data-manipulation based attacks.
Data Security
- Review your password policy to ensure that password protection, best-practices adherence, and retention policies reflect current practices. Update requirements for password complexity and password reuse rules if needed.
- Urge users not to open unsolicited attachments, which are a primary vehicle for viruses. Certain attachment types — .exe, .asp and .cmd — are more likely to carry malware than others.
- Never distribute sensitive information, such as payroll or customer lists, via email. It takes just one unwitting employee to forward this information into the wrong hands. Instead, store sensitive information and lists on a server that qualified employees can access securely. SharePoint is a great option.
- Remove, or update and protect, old mailboxes. Your domain may contain a few test accounts or inactive email addresses, which were likely created with simple passwords. Those easy-to-guess passwords can open the door for a savvy hacker to infiltrate your system.
Device Security
- Provide proper end-of-life management and data destruction.
- Develop desktop virtualization and application virtualization proof-of-concept initiatives.
- Implement software, such as the forthcoming Intel Anti-Theft Technology, to enable the IT department to remotely access a stolen company (or employee-owned) laptop and protect it from thieves by blocking the boot process.
- “One of 10 corporate laptops will be lost or stolen over their three-year lifetime — along with tens of thousands of dollars of data” (Source: InfoWorld)
- Interesting fact: Intel combats device theft this by allowing employees to store personal information on company machines, because then the user is more likely to value the device.
Personnel Security
- Provide employee education and training, so that they understand:
- Company device usage policies (not downloading or installing unapproved software, etc.)
- How to spot malicious apps, phishing scams, etc.
- Proper, approved use of cloud systems (MobileMe, Dropbox, etc.)
- Install video surveillance systems.
- Develop proper firing and debriefing procedures to ensure that important data doesn’t leave with departing employees.
- Start an awareness program. Prominently post basic tips — such as attachment vigilance, how to handle strange emails and password-protection steps — to keep employees conscious of the dangers they may encounter in their inboxes.
Lastly, here are a few big-picture things to keep in mind:
Create balanced security policies: Ensure compliance, protect corporate data and ensure the security of your infrastructure, but stop short of policing employees to the point where you may be hindering their abilities to do their jobs. You can always say, “no” when activity becomes inappropriate on a case-by-case basis. (Source: IT World Canada)
If you’re seeking additional budget to put the security you need in place, see this article: Five Security Budget Tips for 2011. It includes tips such as:
- Relate IT security budget needs to these three key drivers: compliance, risk of legal fees and brand damage in case of security breach.
- Discuss importance of risk management
- Find out if your customers are asking about security as a decision-maker
With basic security practices in place, and with security taking a higher profile within the organization, you’ll reap the benefits of a safer technology environment. And, you’ll be better poised to move forward with larger security initiatives if needed.
Your Thoughts?
What are your biggest security concerns? What systems are you putting in place to combat them?
 |
Darin Haines is Group President of MCPc's Advanced Technology Group - Delivery Division and has over 16 years of experience in leading the technology function in mid-sized and enterprise-level organizations. Connect with Darin on LinkedIn.
|
Image credit: hape_gera
Stay Connected with MCPc: Subscribe to the blog; follow us on Twitter, Facebook or LinkedIn.
Posted on Mon, Feb 21, 2011 @ 08:18 AM
You’ve probably heard the old real estate axiom that says location is the first, second and third most important consideration when evaluating property. In many ways, this holds true for data centers, too. The location of your data center is the most important decision you’ll make regarding data security and application uptime.
Ten years ago, if you asked executives if they thought email was a mission-critical business application, most probably would have shrugged their shoulders or stated that they could probably get by for a few hours, or even days, without it. Today, with email and other applications becoming more and more integrated into employee tasks, the answer would be quite different.
As application uptime increasingly becomes a necessity for daily business operations, a critical question emerges for IT managers: Is your office facility truly the best location for your servers, storage devices, and core network connectivity?
Data Center Colocation Centers
Data Center Colocation Centers — facilities that house network, server and storage infrastructures for multiple organizations — offer an affordable, secure and dependable alternative for companies that don’t have the best-suited office environment to house their data centers onsite.
The following are nine key considerations to help you evaluate whether moving your critical data center assets into a colocation building is right for your organization.
- Is your facility equipped with a generator?
- You may have configured protected-power for your server, storage and network components, but what about the cooling system? If your cooling system goes off-line and air flow ceases, how quickly will the temperature become too hot for your systems to continue operating? You may be surprised to discover that it is typically only a few minutes!
- Is your facility equipped with redundant power feeds (from two different electrical providers)?
- Is your facility in a flood zone?
- Is your computer room or data center hardened for earthquake events?
- How many roads lead to your facility? What would happen if those roads were closed?
- Does your facility have provisions for WAN connectivity from more than one provider on (truly) separate infrastructures?
- Do you have the capability to quickly diagnose and remedy copper and optical cabling faults? What about the servers, storage array and network gear? Do you have proactive monitoring and management in place today? Do you have an NOC (Network Operations Center)?
- If you have some redundant or fail-over systems in place today, how often are they checked to determine if they will work as expected when the time comes?
If any of these questions have you reconsidering the strength, security and reliability of your current data center location, a collocation center may be a viable alternative for your organization.
Keep in mind that relocating your hardware, applications and data will likely affect your management of them moving forward. You will almost certainly want to remotely handle as much of the administration as possible, which can be achieved with network monitoring solutions. In addition, the colocation facility you choose may offer administrative services that can help ease the burden of internal operational tasks.
Your Thoughts
Does your business use a colocation center? Are you considering one? Please share your experiences and concerns in the comments below.
|
Perry Szarka is a Solution Consultant at MCPc with expertise in data storage and network infrastructure. He works closely with clients to understand their business objectives and discover solutions to help them achieve their goals.
|
Image credit: traferty