@Victor - that is one of the worries we are actively looking into tools that will help us increase our visibility into remote devices. Wish to say we were "there" but we aren't
Security is certainly up there on concerns list. But again, it's part of something that increases every year with the needs, along with compliance, yet my budget and staffing don't
Gary, @Nicole "Gary, what's your policy for employees using Droids?" Saw response to this, and was trying to add to it. Especially if I have a rooted Droid???
And the bigger question is do you monitor that the these devices are patched and up to date, like IT does for the PCs?
Re: compliance issues - I certainly think Financial Services & Health Care are the 2 industries hit hardest with compliance. Makes it harder to "make a profit" that's for sure!
@Gary -- In this case it was after-hours so blcoking wasn't really an issue. Makes me wonder if it's a suitable application of gamification for learning?
@Kim - I think a lot of compliance things are somewhat mandatory annually, but not sure about information security (yet) - but I think it soon will be.
@smkinoshita - I'm one that likes an environment where people can "play" with technology - it gets people more comfortable with it. That's why I hate blocking things that I don't absolutely have to.
Gary, are any specific regulations for financial firms harder to comply with than others? Do the regulations vary in complexity and "issues" caused for IT?
All bank compliance, including info security, is taken online annually by all employees. Different courses for different roles, but Info Sec is required for everyone.
@Gary -- OK, this is a off topic, but I once introduced a manager friend of mine to Real Time Strategy games. He was fascinated by its resource management and its "Fog of War" game play mechanics, probably due to work parallels.
ALL employees sign an annual "Acceptable Technology Usage" document. Wireless/remote users have a separate one that depending on level of access may require additional approval.
@Kim - we have, but rarely (please don't make me jinx us). Never for a MAJOR incident. We have had some phishing, and thankfully got servers taken down rather quickly (even when in Europe) so as much 'lucky' as a good plan - but regardless, we at least knew what we wanted to do without thinking through the "fog of war"
Droids - they need to Administrative Officer approval and to sign an Personal device wireless agreement. Also need to allow us to enforce lockup interval and potentially wipe device if lost or employee terminated.
Online Banking - covered by our CORE provider (FISERV), and they help us with 2nd tier support. Our 8-5 call center at the bank is pretty good with basic issues.
Keeps me up - wondering if we are the specific target of a PHISHING attack or Data Breach. You can never be 100% secure, so we try to have a good incident response plan in place - but hope we never have to use it!
RE: Open Networks - we are probably more liberal in what we allow (probably driven by me) as I feel the more you see and interact with, the more ideas and opportunities arise. We try to use "abuse" as a Management or Performance issue as opposed to overt blocking for all. we do block the basics (porn, gambling,etc.) Did that cover your point?
RE: Basic IT education - that is one of our targets as well. For the last few years we've been adding mandatory "Info Security" classes and details to our "End User Acknowledgement" to cover those thngs. Education is tough as we also feel compelled to educate our CUSTOMERS who are using online banking or mobile - as the bank typically gets hit even if it's user caused.
@smkinoshita, I think those topics would need to be covered in an orientation class so a company doesn't assume people know about them and regret not training people later.
OK, let me rephrase then: when I say "Basic I.T.", I think at a bare minimum all business people need to be aware of phishing, strong passwords, social media policies & the fact that anything published online is there and public forever, the importance of respecting and protecting the privacy of company and clients.
@nicole - I came from shops where the IT organization was as big as the entire bank, and the stress was much higher... that's one of the things that drove me to the community bank, a bit better "quality of life". So actually the days got better just by being here!
Gary: I read the other day that the new federal CIO said the first 40 days he was in office were his worst days on the job ever. Did you have a "worst ever" period when you first assumed the role?
@Kim, Agreed, but it's really important for people to have a holistic view of the business both for decision making and respectful interaction with other departments.
@smkinoshita, Basic IT can mean different things at different companies. There should be onboarding classes for proprietary software or other classes to help people succeed.
Government uses Blackberries, but someone told me that they may be going to a different smartphone. Still those who have Blackberries are few and far between, and only the higher ranking gov personnel.
@CFWalters, Outsourcing can be anything not done inhouse. It can be hiring an advertising agency rather than having an inhouse staff, or IT consultants to do a software implementation.
It occurs to me that this is something we've seen with enterprise legal services for years: a small inhouse team primarily concerned with engaging and running outside contractors (law firms).
I've heard (via All Analtyics, a sister site of IE) that fraud detection can be done using social network analytics. Gary, do you have any thoughts on that?
I'm actually interested in using the Internet to outsource. I've heard of several people around me locally who work for companies 2-3 hours away remotely.
My question is in firewall administration and security. Can you describe what MutualBank does to ensure servers are scanned and remediated to satisfy Payment Card Industry standards? What triggers remediation?
New York's Metropolitan Transit Authority is conducting a pilot test of digital kiosks to guide subway users to where they want to go more efficiently and at lower cost.
The whole Amazon.reader debate is a double-stupid. It's stupid to think that there's any e-book buyer who doesn't know Amazon's URL, and it was stupider to let ICANN launch the whole free-form TLD initiative to start with.
While NFC's original goal was to enhance mobile commerce applications, it is finding its way into a number of other uses, which is creating both opportunity as well as challenges for IT departments.
Enterprises would like to move to cloud computing but are hesitant because they are concerned about providers’ ability to secure company data. Here are some tips that help to ensure that if breaches occur, the business is not left holding the bag.
Edmunds separates customers into segments based on the info it collects on its site and from partners, and uses that to push out custom content, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
The automotive website uses propensity modeling to target ads and customer registration forms, said Brian Baron, director of business analytics for Edmunds.com, at Predictive Analytics Innovation Summit.
Ushering in a new era of cognitive computing systems, IBM announced today the IBM Watson Engagement Advisor, a technology breakthrough that allows brands to crunch big data in record time to transform the way they engage clients in key functions such as customer service, marketing, and sales.
Expert Integrated Systems: Changing the Experience & Economics of IT In this e-book, we take an in-depth look at these expert integrated systems -- what they are, how they work, and how they have the potential to help CIOs achieve dramatic savings while restoring IT's role as business innovator. READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE! REGISTER HERE
Wanted! Site Moderators Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?
To save this item to your list of favorite Internet Evolution content so you can find it later in your Profile page, click the "Save It" button next to the item.
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
M2M: Rise of the Machines? Not Yet David Weldon In the 1970 science fiction thriller Colossus: The Forbin Project, two giant supercomputers from the United States and Soviet Union secretly join forces to take control of the collective nuclear might of the two countries. In the film, the two machines discover each other's existence, communicate back-and-forth, share their collective data, and cut their human creators out of the process. It is the ultimate example of machine-to-machine communications, or M2M. CLICK FOR MORE
