Archive | SharePoint 2013 RSS feed for this section

We have been victimized by a hacktivist 416 days ago!

The US Congress is dangling its toes in the water towards requiring companies to admit they have been hacked. The proposal regarding data breaches is a component of a larger draft bill being circulated in the House Judiciary Committee. In addition to raising the maximum penalty on cyber crime, it is suggesting that a business must disclose a security breach within 14 days from when it was discovered. In the case of a “major” breach, that window shrinks to a mere 72 hours, and involves the FBI or the Secret Service.

HP just released a report, HP 2012 Cyber Risk Report which stated that it takes 416 Days to detect a breach. Hmmm…somewhere the math doesn’t quite make sense. If 416 days is typical to identify a data breach, I guess reporting it within 14 days after the realization is not so bad.

Cyber crime, data breaches, and just plain old hacktivists are on the rise. The basic problem is there is no single law addressing data breach notification. For many industries they are regulated differently depending on the state they do business in. A similar situation exists in Europe, where E.U. officials have introduced their own draft regulation on data breaches, saying the mostly voluntary system it has now is “too fragmented” and leaves the region more vulnerable. Opponents have argued the proposal is burdensome because of its requirement that notifications take place within 24 hours of a data breach. If the European plan gets approved, it could boost the chances that the US Congress will pass something like it, although this isn’t the first time Washington has tried dealing with data-breach notifications and has done nothing.

I do get concerned that my data has been breached. It has happened to me several times now and I wasn’t notified for several months which I think is totally unacceptable. But on the other side of the coin, the state of Massachusetts has just ruled that zip codes are Personally Identifiable Information (PII).  The whole topic doesn’t appear to be as straightforward as one might think.

I do have a problem that a company doesn’t know that a data breach occurred in 416 days? Really?

Where do you stand?

Comments { 0 }

Successful SharePoint Stories or Tales of Woe?

Recently I read an article, ‘SharePoint Faces a Challenging Future’, posted on InfoWorld that references a new report from Forrester where SharePoint has come under fire as not all it’s cracked up to be. Interesting food for thought. This made me start thinking about ‘real live’ organizations many of which have their own SharePoint success stories to tell (or tales of woe). Just thought the points mentioned were worth thinking about. The article above references a new research report issued in February from Forrester. This report uses data from Forrester’s August 2012 Global SharePoint Usage Online Survey to analyze the current and likely future state of SharePoint adoption in enterprises.

Some of the observations concluded that SharePoint has a long way to go and is at a cross road. I must also emphatically state that it wasn’t all gloom and doom for SharePoint. But we are going to concentrate on the gloom and doom just for the sake of conversation. See if you agree with some of the points made by the authors.

“The gap in satisfaction between IT pros and business managers — SharePoint met the expectations of 73 percent of the former, and of 62 percent of the latter — is of concern, according to the authors.” (I actually don’t think these are necessarily negative stats. One point not made was the maturity level of the SharePoint installations – have they been up and running for years or still in some stage of deployment?)

“Dissatisfaction is centered on several areas, including adoption challenges, a dislike for the SharePoint user experience, a preference for other tools like email and skepticism over its business value.”

“At this juncture, CIOs and other IT executives should rethink the role of SharePoint in their organizations. For example, if SharePoint is used only for document collaboration, it is an expensive proposition for which more affordable options exist, according to the authors. It’s also a good idea to monitor how Yammer is integrated with SharePoint, and assess how comfortable the organization is with providing enterprise social collaboration via a cloud model. In addition, CIOs must keep a close eye on SharePoint’s mobile capabilities.”

“Dangerous competitors include IBM, Google, Jive Software, and Box. Despite its rousing success in enterprises, circumstances have changed, and SharePoint must prove its value all over again.”

So all you SharePoint aficionado’s – WDYT?

Comments { 0 }

Are you going to the SPTechCon in San Francisco?

Are you going to the SPTechCon in San Francisco? If you are going stop by Booth 607 to meet us in person. Concept Searching, a Gold Sponsor, will be demonstrating conceptClassifier for SharePoint the most powerful solution to manage all unstructured content in and outside of SharePoint. Ask us about our Smart Content Framework™ and find out how our clients are using conceptClassifier for SharePoint to deploy intelligent metadata enable solutions for search, records management, data privacy, text analytics, migration, and more! If you aren’t attending but would be interested in more information please email us at info-usa@conceptsearching.com. Hope to see you there!

Comments are closed

Where’s the missing link in government?

Although this blog focuses around government it highlights an interesting paradox. The first article details the US federal Chief Information Officers Council update on the list of core competencies for training and hiring policies so they can hire personnel that are capable of addressing new technology challenges facing government. The council recently released an updated Clinger-Cohen Core Competencies and Learning Objectives and recommended that every federal agency should include staff with experience in social media, open government, and cloud computing.

The document also includes new “competencies” in IT governance, IT program management leadership, vendor management, cybersecurity, and information assurance strategies and plans. According to the article, “Federal chief information officers should ensure that the knowledge, skills and abilities represented in each competency in this document are resident within their organization for overall staff productivity,” the document said. So far all’s well and good and a step in the right direction.

Switch to another scenario. In an editorial by Steve O’Keeffe, from MeriTalk, he discusses the GAO Report released in late January. What struck me as I read both articles back to back is the apparent lack of integrated agency operational plans and the lack of accountability. Some highlights from Mr. O’Keeffe’s article that are recommended in the first article are noted below.

  • Rampant systems duplication – with 777 supply chain systems, they now need a supply chain system to track their supply chain system inventory
  • Agencies spend 73 percent of “defined” IT budget on maintaining old systems
  • IT Dashboard says almost $12.5 billion in IT projects at risk
  • $3 billion worth of IT projects are without governance
  • Data center diaspora and dollar discrepancies. Only three of 24 agencies submitted data center inventories and only one has a complete consolidation plan
  • Failed IT programs total 2.6 billion

I wonder in a ‘real’ organization how often the best laid plans of mice and men often go astray? Although if you add up IT government agency spending it would probably make our eyes pop (luckily for us no one knows what that amount is), but even on a smaller scale how many companies state corporate direction and then it all falls through the cracks? The government is not alone. It is probably more than we think.

 

Comments are closed

What the heck? Tell me what to call it.

Since I am in marketing I can’t seem to pin down what to call ‘social networking’ as a good ‘umbrella’ term. It appears that I am not alone – please see below what professionals are calling themselves.  But back to the ‘correct’ term. Here’s what I’ve come up with so far:

  • Social networking
  • Social networking tools
  • Social automation
  • Social computing
  • Social business
  • Social media
  • Social collaboration
  • Enterprise 2.0 and Web 2.0
  • Knowledge Management

The last bullet is an odd ball as it is no longer considered a relevant term and is in disfavor by many, but I have seen the term when referring to “social ?” (I’m quite sure I left some out). Now at a granular level we can probably find differentiators for each term. I have one colleague who still doesn’t know what Enterprise and Web 2.0 are, no matter how many times I explain it to him. He constantly tells me that real people don’t know what that means, oh well.

Oddly enough, coinciding to writing this blog, it seems that ‘social’ professionals are now jumping on this bandwagon. In a blog by Brittany Ballenstedt she wrote, “In January 2013, the number of Twitter users with “social media” as part of their bio has grown significantly, to 181,000, up from a mere 16,000 in 2009. “Maven” and “ninja” were nearly tied for being used the most – nearly 22,000 times. Other popular titles were “evangelist” (20,829), “guru” (18,363) and “consultant” (9,031). “At this rate, everyone on Twitter will soon be a social media guru,” Ad Age’s B.L. Ochman writes.”

From a business perspective, what do you think is the best umbrella term to incorporate the various components? Or should there be unique distinctions in terms and not one ‘umbrella’ term. What does your organization use?

And, if you are an expert in social media, what title do you prefer?

Comments are closed

Protecting Unstructured Content from Exposure

Corporate risk is increasingly becoming a priority for senior management. The demarcation of who is responsible for the protection of data is becoming blurred. It can no longer be the responsibility of one person, and must encompass all stakeholders and end users to identify and secure privacy assets to protect an organization. Regardless of whether a breach is contained within an organization or, worst case scenario, exposed to the world, 76% of organizations will face investigations, forensics, law enforcement, and actions to protect the victim from harm (Ponemon Institute).

Our approach to the protection of privacy and confidential data includes the proactive identification and protection of unknown privacy exposures before they occur, as well as identifying in real time organizationally defined vocabulary and descriptors in content as it is created or ingested from any source and removing it from unauthorized access. (Read more).

At what point and how do you handle potential data privacy exposures? Or do you?

Comments { 0 }