The Seven Deadly ^Sins

Transcription

1 The Seven Deadly ^Sins Brian Killian President NorthPoint Technology Group 225 South Westmonte Drive, Suite 1170 Altamonte Springs, Florida

2 Agenda Discuss recurring problems we have encountered in businesses Discuss remediation options Review best practices Q&A session at the end But please speak up if you have a question 2

3 Technology Planning

4 Technology Planning Sin # 1 - Not having a technology strategy Every company needs a technology plan Every company needs CIO level direction Companies need to understand the technologies that are available and how they would impact their business Proper implementation is just as important as the selection Align your technology plan with your business not the other way around Implement a technology selection process Systems evolve - perform a technology assessment 4

5 Technology Planning Begin with the end in mind! - Stephen Covey 5

6 Technology Planning 6

7 Technology Purchasing

8 Technology Purchasing Sin # 2 Purchase decision based solely on price When we need a technology we shop and buy whatever is the lowest cost Not looking at total cost of ownership through the lifecycle Purchase cost Management costs Warranty costs Direct vs. Indirect costs Beware of the DANGER dollars! 8

9 Technology Purchasing Total Cost of Ownership Administration 9% Downtime 3% Operations 11% Hardware and Software 28% End User Operations 49% Source: Gartner Group June

10 Technology Management

11 Technology Management Manage through the entire systems lifecycle 11

12 Technology Management Sin # 3 Not having a systems management methodology Proactive vs. Reactive management Proactive hardware and systems monitoring System inventories, documentation, and diagrams You can t manage what you don t know you have Allows for faster productivity for new employees and vendors Needs to be a living document Standardize everything Software patches, updates, and upgrades 12

13 Technology Management Sin # 3 Not having a systems management methodology Have a well defined help desk Monitor trends Implement Service Level Agreements Address trouble areas Implement well defined change control Automate as much as possible Know when to outsource 13

14 Gartner Group TCO Study Unmanaged Windows XP Desktop Typically Managed Windows XP Desktop Well Managed Windows XP Desktop Windows Based Terminal Server User Hardware and Software Operations Administration Total Direct Cost $2,433 $2,290 $2,007 $2,111 End User Operations Annual Downtime Total Indirect Cost $2,954 $2,305 $1,234 $741 Total TCO $5,387 $4,595 $3,241 $2,852 Source: Gartner Group June

15 Technology Management What s a well managed PC? Locked down desktop environment Remove data browsing capabilities Give users everything they need to do their job but limit access to system files and configurations Prevent software install capabilities Virus / Malware Protection Internet content filtering Regular reporting routines 15

16 Security

17 Security Options Confidentiality Integrity Availability 17

18 Security Sin # 4 Poor security practices Implement a comprehensive Security Management Program Internal and external vulnerability scans Data security access reviews Internet content filtering Intrusion prevention / detection Endpoint Security - Prevent data from leaving Acceptable use policies Laptop and encryption Documented regular routine 18

19 Security 19

20 Disaster Recovery

21 Disaster Recovery Sin #5 Not having a functional disaster recovery plan Business Continuity Risk Assessment Business Impact Analysis Disaster Recovery Plan Disaster recovery is not just a tape backup Plan must include processes and required systems to get the business functioning Virtualization and Storage Area Networking What would downtime cost your organization? 21

22 Mobile and Remote Access

23 Mobile and Remote Access Sin #6 Not having secure remote access to business critical information There are many flavors of remote access PCAnywhere GoToMyPC, LogMeIn VPNs Microsoft RDP Citrix Secure Gateway Citrix Access Gateway 23

24 Mobile and Remote Access Mobile Access Web Access - Lock down with certificate for encryption Capable Phones BlackBerry Microsoft SmartPhone iphones Understand the risks of POP3 configurations Understand the risks of 3 rd party intermediaries Require passwords on cell phones Make sure you have remote wipe capabilities encryption 24

25 Technology Support

26 Technology Support Sin #7 Living with poor technology support Efficient implementations provide a foundation for efficient support systems Remote support is critical CIO to desktop support is required Rightsize your support Support is time sensitive - SLAs Know when to outsource 26

27 Technology Support 27

28 Technology Support Get the right people on the bus and the wrong people off the bus! - Jim Collins Good to Great 28

29 Questions?