@Paul - Big difference is the engagement of the top level executive leadership. A disadvantage can be that it is no longer free for all - you give up some freedom for the good of the organization. Organizational value for every dollar spent on IT and IT security is huge. The organization is powered forward strategically by IT.
We were having this discussion here a couple of months ago; someone was saying the CISO should report to the CEO, and should drive strategic decisions on new products and partnerships. That didn't quite make sense to me.
Thanks for the blog. In your assessment, how do you think this IT governance model differ from the others? In what specific area(s) do you think this model will suffer a disadavantage?
I agree with you sentiment completely. It'sa fabulous piece of innovation. I think this is the kind of Governance structure that is capable bringing up IT to leadership status. One good thing about this governance model is that itis fully integrated to the governance structure of the University/Enterprise.
Very impressive governance structure, Mansur. It is comprehensive and positions IT as a strategic asset.
I also like the client interface role. As IT begins to link the technology and the user, I think the technology asset will grow throughout the organization.
@mharden - Thanks. This type of model recognizes the strategic nature of information technology and information security - they are viewed as a mission driver and revenue source. The CISO role is evolving as we speak. I have always viewed it as a component of the CIO role which requires specialized attention - just as the CIO role is a component of the CEO role which requires specialized skills. I can only hope that some model of this type becomes more common.
Good article Mansur. What this boils down to is that a very effective way to structure IT Security within an organization involves having the CISO, or equivalent, reporting directly to the senior/executive level of the organization while having their full support, commitment and involvement. How common is this within organizations today? I remember a few years back when the CIO in some organizations reported to the CFO, but know with so much attention on security these days the CIO and CFO are peers which make helps in gaining top level commitment for the development of high standards and corporate governance.
@Alison - I do not think one size fits all. Nor is there an easy answer to your question. In both this article and the one about architecting IT organizations, I wanted to point out that governance and alignment with the mission is essential. This is a practical example of a large institution solving it very well. Indiana University has also done a good job with IT governance based on the same principles.
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
Social media has been with us for a decade -- but employer policies and the law are anything but firm about the most appropriate usage of this powerful tool.
Businesses often struggle to decide which domain to use. When it comes to purchasing a domain name, you have plenty of extensions to choose from, ranging from .com and .net, to .me, and even .mobi. But which one should you pick?
I've been writing about how the next evolution of the Internet might just be an advertising revolution, and how corporate IT can stay involved as the enablers and providers of the technologies that make this possible.
In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M.
New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
The automotive website uses propensity modeling to target ads and customer registration forms, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
Expert Integrated Systems: Changing the Experience & Economics of IT In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator. READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE! REGISTER HERE
Wanted! Site Moderators Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?
To save this item to your list of favorite Internet Evolution content so you can find it later in your Profile page, click the "Save It" button next to the item.
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
