Collaborative Strategy Guild » collabstrategy

Welcome!

collabstrategy — Mon, 23 Mar 2009 20:51:58 +0000

The Collaborative Strategy Guild™ comprises independent analysts and thought leaders. For more about our individual work, please click on the links to our individual websites below.

Karen Hobert, Top Dog
Diana Kelley, SecurityCurve
Pete Lindstrom, Spire Security
Peter O’Kelly, Peter O’Kelly’s Reality Check

We’re a collective of seasoned professionals, each with decades of experience in our discipline. We have extensive backgrounds working with the largest end-user enterprises and top-tier vendor solution providers. We “get” collaboration. We “get” information management. And we “get” security and risk.

We’ve been go-to experts for Fortune 500 organizations and top technology media such as the Wall Street Journal and New York Times for years. Now we’re bringing our experience together – in the Collaborative Strategy Guild. We offer a rich set of customized offerings and access to some of the most innovative and effective thinkers in the business.

Collaborative Strategy Guild brings together domain experts and focused problem solvers to collaboratively advance your strategic agenda.

Collaborative [kuh-lab-uh-rey-tiv] -adjective: Working together, especially in a joint intellectual effort

Strategy [strat-i-jee] -noun: A plan, method, or series of plans for obtaining a specific goal or result

Guild [gild] -noun: An organization of persons with related interests and goals

Source Material Adapted From: www.dictionary.com

Get Shareaholic

Bringing Cloud Computing Security Down to Earth

collabstrategy — Fri, 20 Mar 2009 15:48:15 +0000

from an upcoming article series by Char Sample, Senior Scientist, BBN Technologies and Diana Kelley, Partner, SecurityCurve

Hi All – Char and I are working on a set of CC Security articles – here’s our current abstract. Comments on what you’d like to see in the article are welcome!

Cloud Computing is generating a lot of buzz right now – and for good reason. Cloud Computing promises seamlessly integrated services without the high costs traditionally associated with large integration efforts. Cloud computing and software-as-a-service transfers a large portion of the infrastructure set-up and on-going data center management costs from the end-user enterprise to the provider in the cloud. The providers can leverage economies of scale and robust high availability at their massive data centers, passing the savings on to customers.

Although this cloud does have a silver lining, enterprises need to understand the security and business implications of going into the cloud. Without proper assessments and requirement definitions, up front, organizations could find themselves caught in a “storm” of data exposure, uncertain liability, or costly fee structures.

In this multi-part series, Char Sample and Diana Kelley provide a down to earth de-mystification of security concerns and the Cloud phenomenon. Each article begins with an overview explanation of specific cloud security concerns and concludes with a short discussion of countermeasures.

In Part One, they cover infrastructure, management, and routing – with special focus on DNS spoofing and “evil twin” clouds. Part Two discusses host security concerns and data placement considerations. Part Three addresses whether or not enterprises should consider creating their own clouds and how reputational services can help increase overall cloud security.

Get Shareaholic

A Bigger Microsoft Cloud

collabstrategy — Fri, 20 Mar 2009 15:32:25 +0000

from Karen Hobert’s Connecting Dots by Karen Hobert

Since its announcement of the Software+Services strategy in 2006, Microsoft has been steadily refining and growing it’s online offerings. Over the last two years Microsoft has unveiled it’s strategy at regular intervals. Thus far we’ve been taken from the S+S strategy in the summer of 2006 through the general availability of US-based consumer and business grade hosted messaging, communications, and collaboration services in November 2008. Last week Microsoft’s cloud got bigger with the general availability of worldwide Microsoft Online Services for any sized company. According to Microsoft’s press release:

…the Business Productivity Online Suite, part of Microsoft Online Services, is now available for trial to businesses of all sizes in 19 countries. In addition, Microsoft will release Microsoft Office Communications Online, for instant messaging and presence, and the Business Productivity Online Deskless Worker Suite, an extremely economical e-mail, calendaring and collaboration service for the occasional user.

This steady cloud formation is formidable and steps up the competition in the emerging cloud-based platforms market. There’s lots of ground that still needs to be covered, especially when it comes to supporting enterprises, however. Microsoft is still not likely to suck the air out of the enterprise hosting room until it can make the entire platform (e.g., messaging plus all of its supporting services) affordable and secure. Cheap mailbox services are a good selling point but enterprises tend to look at (and need) more than just better mailbox service costs. The cloud maturity model looks more complex than one-stop shopping solutions when you get to the enterprise. Flexibility, adaptability, and risk mitigation are the keys to enterprise hearts. The cloud is still too squishy and moist for many.

Microsoft Online Services Available Worldwide: Microsoft signs agreement with GlaxoSmithKline to deploy Exchange Online, SharePoint Online, Office Communications Online and Office Live Meeting for employees worldwide.

Get Shareaholic

Just Passing Through the Cloud

collabstrategy — Fri, 20 Mar 2009 15:25:49 +0000

from Spire Security Viewpoint by Pete Lindstrom

As noted by many, the phrase “cloud computing” is ambiguous enough to encompass everything (and therefore nothing). I think at the very least we should be discussing the cloud in terms of connections that terminate there. That is, we should think of cloud computing as providing services for either the connection source (e.g. virtual desktop infrastructure) or a connection destination (target servers).

If the service happens in the cloud, but operates on traffic that is just passing through the cloud, I don’t think it should be a part of “cloud computing.” That means that proxies and other inline security functions are not “cloud” proper since the termination points are still very traditional.

This is not really a strong position, so I would be curious to hear reasons against this position.

Get Shareaholic