Archive for April, 2009

Episode 18 – Green Computing is Everyone’s Business

Tuesday, April 21st, 2009

Amrit Williams, CTO of BigFix, Inc. and Forrester Research, Inc. Analyst  Doug Washburn talk about the surprisingly slow uptake of green computing technologies in enterprise infrastructures. Washburn believes that many organizations lack awareness of the solid economic returns from green computing and believe that many initiatives such as virtualization, cloud computing, and consolidation require investments that are hard to justify in today’s hard-nosed economic environment. Washburn remains optimistic that even against relatively slow progress, next-generation “Green Computing 2.0″ approaches are emerging where computers help organizations realize savings in bread-and-butter operations–for example UPS’ use of computing to reduce the number of left turns made by delivery vans, saving energy and speeding deliveries.

Podcast

  • Share/Bookmark

Episode 17 – Crossing the IT and Physical Facilities Management Chasm

Friday, April 17th, 2009

Amrit Williams, CTO of BigFix, Inc. and Sean Goings, Business Development Manager of TAC Americas, a physical facilities engineering firm, discuss overcoming the barriers to cooperation between physical facilities and information technology professionals. The good news is that facilities and IT managers recognize that they have common goals in areas such as green computing-enabled energy conservation and integrating building physical and information security programs, but more work is needed to bring these disciplines together at strategic and operational levels.

Podcast

  • Share/Bookmark

Episode 16 – Waking Up to Web Application Security Risks

Tuesday, April 14th, 2009

Amrit Williams, CTO of BigFix, Inc. and Rich Mogull, Founder and Principal Analyst of Securosis  www.securosis.com) discuss Securosis’ recent research on managing security risks posed by web applications to enterprise IT. Mogull proposes a three phase process for organizations to a) determine where their applications are located b) their value to the enterprise and c) a risk assessment to ascertain their vulnerabilities and mitigation measures.

Podcast

  • Share/Bookmark

Episode 15 – Security Attacks Make News: What’s the Story?

Tuesday, April 14th, 2009

Amrit Williams, CTO of BigFix, Inc. and Patrick Peterson, Cisco Fellow and Chief Security Researcher at Cisco Networks talk about recently widely publicized security breaches and public, government and security expert research response to them. How can society make decisions in an information environment characterized by secrecy and special interest agendas?

Podcast

  • Share/Bookmark

Episode 14 – Getting Serious About IT Security Risk Management

Friday, April 10th, 2009

Amrit Williams, CTO of BigFix, Inc, and Alex Hutton of Verizon Business Systems Cybertrust, discuss what it takes to practice a truly sophisticated approach to IT security risk management. In particular, the risk management discipline involves calculating and adjusting an organizations risk exposures, mitigation capabilities, and management’s risk tolerance. In this regard, Hutton speaks from his professional involvement with industry standards such as ISO 27005 and Factor Analysis of Information Risk (FAIR) techniques.

Episode 14 MP3

  • Share/Bookmark

Episode 13 – Risk, Trust, Security and the Cloud

Tuesday, April 7th, 2009

Amrit Williams and RSA VP of Product Management and Strategy Sam Curry discuss how the IT community is coming to terms with an inexorable migration of computing services to the cloud. The basic dilemma revolves around the need to trust cloud-delivered services while relinquishing control over resources that host them, along with the roles of cloud services consumers, service providers, and information security technology vendors as the cloud computing migration plays out.

Episode 13 MP3

  • Share/Bookmark

Episode 12 – Of Firewalls and VPNs: Two Examples of IT Security Business Enablement

Friday, April 3rd, 2009

Amrit Williams, CTO of BigFix, Inc., and Sam Curry, VP of Product Management and Strategy at RSA, The Security Division of EMC, review the current debate on whether IT security is about keeping bad things from happening, or as a means to enable business value generation. Recounting their experience in the IT industry and as colleagues at former employers, Amrit and Sam cite the development of virtual private network (VPN) and personal firewall technologies as examples of IT security enabling new ways to conduct business and generate value on the Internet and other public networks.

Episode 12 MP3

  • Share/Bookmark