Uncategorized

A couple of articles

Microsoft Cloud Event at the CN Tower 12(2)

Security and environmental sustainability remain top-of-mind questions for Canadian businesses.

 

I got to talk about both last week:
Best spending value is on security awareness,  and

Vancouver’s Global Relay at cutting edge of cool data

Advertisements
Categories: Uncategorized | Leave a comment

Cite a Standard, Know the Standard

Misc Standardl.png

The great thing about standards is that there are so many of them.  There are standards for just about anything.  Early in my days as an engineer a colleague of mine was looking describe the specifications for the newly released CD-ROM drives for PCs.  He ordered what he thought was the right standard from ISO and got something entirely different.  Mind you, it didn’t stop company reps from claiming full compliance when we asked them about their new systems.  In another case, I called upon full DOD-STD-2167A compliance for a standard computer software project back in the day only to find that the cost ballooned far beyond expectations (almost as bad as some of the other over-specified common every day products.)  Thankfully, someone took the time and walked me through the standard I had casually referenced and pointed out all the processes, documentation, reviews and attestations that I had invoked for my relatively small project.  Lesson learned, I started reading standards and specifications to understand all the mandatory, optional, normative, informative and other nuances found within.  I liked it so much that over the years I also contributed to a few including: ACP, DOD, IETF, ISO, TBS and others.

Standards are great since they help make things work as expected.  For example, they help make sure that when you plug in an electrical appliance, so that it safely performs as expected.  While standards frequently help things work, sometimes different interpretations or optional functionality within standards can prevent stuff from working properly together.  That’s just one reason why it’s super important to know what parts of the standard are important to you and what parts are not so important.  There are several others reasons too, including perhaps the most important one: cost.  Yes it can be a pain to have to wade through what can be hundreds of requirements, but ultimately simply pointing to a specification number is entirely unhelpful.

Technology seems to be evolving more rapidly than ever before and sometimes the speed of innovation outpaces existing standards.  New approaches for meeting requirements can create discord with the existing standardized status quo.  That’s when it becomes even more important to understand those details behind that specification or compliance standard number.  Maybe that new capability makes a number of requirements obsolete, or perhaps far exceeds the tolerances of days gone by.  Organizations, and the people using specifications to help their organizations, owe it to themselves to build out a comprehensive understanding of the specifications they are using and the rationale behind asking for them.

Perhaps it’s the pace of change, but recently I’ve also seen an increasing number of people ask about non-existing certifications or ask about compliance against standards that don’t apply to a particular scenario.  While not quite as egregious as the ISO Open Cold Storage of Cabbage standard I pointed to above (you saw that, right?), they are unfortunate none-the-less.  Calling out standards that don’t apply to your type of business or regions where you operate can create a drag on your business that you just don’t need.  So before you cite a standard or specification, take a moment to ask yourself what particular parts of the standard are most important to your business so that you can be sure that the solutions you specify do everything you expect them to.

By the way, sometimes people might simply call out an arcane standard with the hopes of cutting a meeting short by stumping the supplier sitting across from them.  You’d never do that, right?

Categories: CIO Toolbox, Uncategorized | Tags: , , , | Leave a comment

Adopting a New Frame of Reference to Manage Cyber-risk

People sometimes “anchor” on past experiences when managing new and complex problems.  The challenge in anchoring opinion / perceptions in the rapidly evolving world of technology is that the frame of reference often used in decision making can move dramatically in the space of a few month.  It’s like the insurance commercial where Nan explains her photos that she’s pasted to her livingroom wall.

As organizations look to increasingly adopt cloud service, it’s essential that they adjust their frame of reference (or haul up their anchor) from the single server that they administered to a new frame of reference for hyperscale cloud.  After all, running over 1 000 000 physical CPUs is not the same as taking those processes you used for that box in the closet and multiplying a million times.  I’ve captured a few thoughts on adjusting our frame of reference in this video

Laser Cats

Laser Cats

 

 

 

Categories: Uncategorized | Leave a comment

Investing wisely in CyberSecurity

Sometimes those expensive safeguards might not be giving you the big benefit you expect.  Often the biggest impact can come from the low cost tools.  Have a look at what I mean in this video.

ThatHat

That Hat

Categories: Uncategorized | Leave a comment

Thinking about driverless vehicles

what

With the NBA All-Star game weekend behind us in Toronto (and that unusual anthem brouhaha), the battle between Uber and Taxis in the city will go quite until the next flare up.  Cities around the world are wrestling with the policy question of how they manage ride sharing and taxi services.  While debate about how to smooth the introduction of ridesharing in an existing (yet broken) taxi marketplace is required, policy makers need to look to incredibly close future where there is no longer a driver behind the wheel.

We are already seeing trials of driverless taxis in Japan, seen long-haul trucks of the future, Local delivery vehicles and even air mules.  Disruptions in transportation technologies are palpably close, but the policy foundation seems to be lagging a little behind.  Some of the considerations are longer term, such as “What new jobs will replace those professional driver jobs?”  Others are more immediate, “Do we create special lanes for driverless cars?”  Let’s make sure our policy/rule makers are beginning to think about these things so that we can avoid as many unintended consequences as possible.

In exploring this question, my friend Darrell O’Donnell asked what governments I thought would be the first to ban human drivers.   After some thought, here’s what I came up with:

  1. Singapore:  While the members of the Singapore Ferrari Owners’ Club won’t be happy, I would expect Singapore to be top of the list.  Given its history of intelligent transportation systems and ability to execute, they would be a geo to watch.
  2. Tokyo – I’m thinking that the smart taxis and the social acceptance of new technologies would place this city at the top of the list as well.
  3. Amsterdam – This city is perhaps a bit of an outlier, but my thinking here is all about environmental sustainability and their success in moving people out of their cars by being one of the most cycle friendly cities in the world.
  4. London, UK – Say what you will about the Congestion Charge Zone, there is a certain willingness to try new things to reduce high traffic flows (and raise investment)

Of course that doesn’t mean other cities aren’t going to see connected vehicles and driverless cars (see Ann Arbor and even Stratford) It just means that other cities will probably need to take a less dramatic approach and set aside lanes or routes in place of outright prohibitions.

The conversation for commercial transportation is a little different.  I see Australia leading the way for long-haul trucks in place of their road-trains.  When you think of these road trains, it also helps to remember the Clay Christensen  “job” of the driver.  The driver not only drives the vehicle, they also provide security for the load, making sure to avoid bandits along the route.  Good thing MB still has an office up front in their driverless truck 🙂

What do you think the biggest policy question for driverless cars will be?

Categories: Uncategorized | Leave a comment

Would You Like a Chocolate?

physh

Ok, so I admit I have a bit of a soapbox around word finds, math quizzes, fuzzy puppies on social media.  Lately these seemingly innocent diversions have shifted to troublesome requests.  Requests that may put you at risk.

We all remember the study in the UK where people provided detailed info in return for  piece of chocolate.  Are we doing the same for less return?

These seemingly innocent quizzes may on the surface seem like a fun reminiscence, but what happens if someone trawls these answers and links them to your email address.  You might say it’s not a big deal, until you recall those password recovery questions you’ve used.  Since the development of recovery questions can be difficult, we keep seeing the same questi0ns come up time and time again: What’s your favourite movie, your elementary school or your first pet appear as questions again and again.  It’s a quick pivot to recover your password using the answers you’ve shared.

And while we’re on the subject of fraud, let’s also put an end to the “Likes Fraud” that’s creeping in as well.  I know y0u’ve seen Colby’s post.  Of course no one would think not to like a message like that (at this time over 962K people liked it on FB) and now it’s on Linkedin making it’s rounds every week or so from someone else, each getting ~5K likes.

Can we once and for all just say “Stawp!”

Categories: Uncategorized | Leave a comment

Reminding Ourselves About the Economics of the Cloud

~currency

Since it’s been over 5 years since the “Economics of the Cloud” whitepaper was published, it’s time that we dust off that copy that’s been sitting at the bottom of our documents folder.  No doubt there are a few people that are “new to cloud” and might not be aware of this gem and there are a few people that certainly can be reminded of its content as they build new custom IT projects.

I’ve worked on a wide variety of cloud initiatives over the past 5 years and seen the supply side economics first hand.  For one initiative, I contacted suppliers of containerized data centres to purchase 10 containers.  I was a little taken aback that I could only be offered retail pricing for a quantity so small.  It was the same story for energy and also for floor space.  Operations and management also faced the same challenge, with every customization adding not only additional costs, but also introducing release drag by introducing new dependencies that needed to be considered with every release.

As I worked with Canadian organizations, I also encountered constraints on the demand side.  Clustered communities couldn’t take advantage of the business cadence of the other potential users (for example: An education-only community cloud has generally the same cadence.  Ditto for retail)

Organizations are building out business cases for their move to the cloud and they include a variety of elements in their analysis.  This generally includes all the traditional IT costs (hardware, licensing, personnel, floor space, energy costs).  Often overlooked are the costs associated with supporting bespoke services/solutions.  Creating organization specific documentation, training materials, education programs and configuration management should all factor in to the business case.  Non-standard configurations and services also introduces delays in incident management since the external support organizations wont necessarily be familiar with your specialized deployment.  Using standard public cloud approaches allows organizations to leverage the readily available training materials, standard templates and documents.

So if you’re planning to build your own cloud or looking to cluster with organizations like your own to build a community cloud, it’s important to revisit the Economics of the Cloud paper to appreciate the dynamics of scale that drive hyper scale cloud.

Categories: Uncategorized | Leave a comment

Growing jobs and innovation using a 3P approach

Hey, I’m over on the Microsoft in Government blog today.  I explore how governments can invest their dollars to best benefit startups. I asked entrepreneurs to weigh in, and they identified three guideposts.  These 3Ps won’t be what you expected. http://msft.it/3P

Categories: CIO Toolbox, Digital Economy, Entrepreneurs, Innovation, Uncategorized | Leave a comment

Learning from US TV

Like many Canadians, I grew up watching some, ok a lot, of US network television.  I admit that there wasn’t a great deal of educational value there.  Perhaps an episode or two of School House Rock that told me what conjunctions are, but not much more.  Now that Saturday morning cartoons don’t dominate my schedule, although I can’t pass on the Simpsons, those “educational” experiences are less overt.  But they still come up on occasion.

One such occasion happened a few years ago during the US mid-term elections.  It just so happens that the US network stations that we get here in the Nation’s capital herald from Detroit.  We Canadians were bombarded with campaign commercials from any number of candidates seeking seats on the US Congress or US Senate and perhaps even a few seats in important places.  Of course I can’t recall any of their names, nor tell you who won the important jobs.  I can tell you what struck me most was the commentary from the many autoworkers that lent their support testimonials in the TV ads.  Most of these people were supporting particular candidates for helping provide funds to keep their particular automotive plant open.  It struck me that perhaps these hardworking people would have been better served by funding training programs to prepare them in today’s evolving job marketplace.  The recent turmoil in the US automotive industry, personalized by the Oscar nominated HBO documentary “The Last Truck” suggests that perhaps more could have been done to better prepare these communities for the Digital Economy.  Let’s keep a close eye to make sure we really learned this lesson.

The second learning came more recently, well actually earlier this week when I saw another commercial.  Yes I only pay attention to the commercials.  This commercial from the Detroit Medical Center promotes a web-based real-time Emergency Room wait times at their five hospital facilities (http://www.dmc.org/ERwait ).  ER wait times are a key concern here in Ontario as well http://www.health.gov.on.ca/en/pro/programs/waittimes/edrs/default.aspx.  Before you jump to conclusions about the results on either site, stop.  There are too many differences between the measurements to even start to make any reasonable assertion.  What we can learn is that someone, someplace in Michigan has found a way to report useful data about the ER in what seems to be a real time basis, and that the data is useful for the community to help them make an informed decision should they have the luxury to plan their visit to the ER.  This is the lesson of making data more readily available to empower individuals to make more informed decisions.  And that’s one to grow on…

Categories: Uncategorized | Leave a comment

My $20

Canadian $20I’ve been thinking a lot lately about open government and greater citizen engagement in the machinery of government.  Local governments have had the most success in reaching out to their communities and getting greater involvement from businesses and individuals in local affairs.  This is partly because of the far larger number of daily interactions that we have with our city services.  If you think about it for a minute you appreciate that many of those things that you see during the day, like tap water, electricity, public transit, traffic lights, trash collection, public pools, local policing, restaurant health checks and more are all city services.  On any average day it seems that we take advantage of well over 10 city provided services.  It’s difficult to think of many provincial services over and above health, driver’s licensing and outdoors.  It’s even more difficult from a direct federal government interaction, perhaps passports, citizenship and RCMP.

So how do we get better citizen engagement across the three levels of government when the interaction between the jurisdictions is so different?  One common “service” across all governments is tax:  municipal, provincial and federal taxes.  Maybe there could some way that we could encourage greater citizen interaction in the allocation of taxes to government programs.  Maybe taxes could represent a catalyst for Canadians to give their 2¢ worth of input.  2¢ is hard to subdivide across multiple programs, so let’s up the ante a little and suggest that we use $20 as a baseline.  Since Statistics Canada states that average personal taxes amounted to $14,600 in 2008, (http://www.statcan.gc.ca/daily-quotidien/091218/dq091218b-eng.htm, $20 represents less than 0.14% of the total tax bill.  I’m sure CRA probably won’t mind that 0.14% is being put aside for this project.

Here the concept:  Give every taxpayer a notional $20 that they can allocate towards discretionary projects (that is, projects other than essential services (core policing, clean water etc.))  Over top of a regional map, let people select programs that interest them from a pull down list of government funded activities.  For each activity, allow people to allocate from $1 to $20 of their notional fund towards each project.  So tax payers could, for example, allocate $5 towards a coffee shop in Khandahar for the troops, $5 for maintaining their local outdoor rink and perhaps $10 for improvements to the 400 series highways.  At the end of the selection period, the governments could tally the value, truncate those activities that didn’t receive enough support to reach their minimum goals (it would be hard to build an off ramp with say $100).  The unallocated funds could be re-distributed in a prorated manner based upon support received to date.

 

http://www.surveymonkey.com/s/69GS2ZH

Categories: Uncategorized | Leave a comment

Create a free website or blog at WordPress.com.