e-Management brings commitment, expertise and proven success to every opportunity.
Solutions

If You Like Taking a Vacation, You’ll Just Love CPIC!

July 29th, 2010

by Peter Dimov, e-Management

I remember the times when information technology (IT) was competing for admiration with NASA and IT folks were practically “magicians” or “wizards.” Oh, the good ole days. Since those prehistoric times, we have gone through the “Golden Age of IT,” the 90s. In fact, hundreds of thousands, if not millions of IT systems, have been created in all kinds and sizes, then re-created, patched, and upgraded. It all looked like a hot techno mess that wouldn’t ever stop. Alas, it has. And IT has become so pervasive that it is no longer an exotic advancement, but rather a work horse.

The Party’s Over—Enter CPIC!
As soon as IT became widespread, large corporations and the federal government started to talk about “efficiency and effectiveness” and we knew the party was over. Senators pushed forth the Clinger-Cohen Act of 1996, and declared “each Federal agency design and implement a disciplined Capital Planning and Investment Control (CPIC) process” to clean up your house and put everything in order. Soon after, the Office of Management and Budget (OMB) issued the legendary Circular A-11 and that’s how we’ve ended up here.

CPIC brings government closer to success.

CPIC brings government closer to success.

So What’s So Great About CPIC?
Simply put, CPIC is responsible IT spending by federal agencies. It is a two step process that aims to stop the “we need this” culture of IT spending, and transform it to “why we need this.” It asks meaningful questions as well as poses uncomfortable questions such as: What will it take to make it? Is this the best solution? What are the benefits of having this system? What are the risks?

First, OMB Circular A-11, Exhibit 300 requires a business case motivating the investment in a comprehensive form that tracks an investment over the years. Although executing the CPIC process is not a picnic, it does have some resemblance to our family vacation plans. When planning a vacation, many of us are faced with limited resources including time, money and options. Similarly, an agency faces confined resources, budget, and time.

What Are Our Options?
The first step to planning a great vacation is to draft a list of all the options we have, where to go, what to do, who to see, and who to avoid. We need to assess each option for time, cost, and fun value. Likewise, agencies should prepare an IT wish list, as well as assess each IT investment for cost, benefits, time, risk, and other technical factors.

What Can We Afford?
The second step is to decide what vacation options we can afford and which are out of reach. What’s the intersection between time, money, and fun? The choices that don’t fit those criteria are put on the future wish list. If the resulting list is longer than one page, you need to do a little bit more work. You need to re-examine the fun value of each qualified choice, or as you probably guessed it, the investment proposals are ranked in terms of their contribution to the organizational goals. One major difference between federal and commercial projects is that government does not aim to make money, but to serve the citizens.

CPIC is also like planning the perfect family getaway that fits your budget.

CPIC is also like planning the perfect family getaway that fits your budget.

A Word of Caution
Some investments just have to be done! Even though their contribution to the organizational goals may seem open to discussion, the impact of not picking them could have dire consequences. For instance, think of something like upgrading databases when the previous version is no longer supported, or not stopping to see Grandma when passing through Ohio. You’ll hear about these “missed” opportunities for years to come!

Your Wish List is Complete!
Whatever is left standing on the wish list after this soul searching and fits the budget of time and money, will be executed. Of course, we are on a budget and we need to watch it. CPIC asks us to use the same Exhibit 300 form to record what happened and to remind us what we have promised. This process aims to ensure that each individual investment is backed by solid needs and will improve the agency operations in some way.

It does not, however, require the linking of the agency’s vision with the IT investment. Additionally, it does not help create a coherent, non-redundant IT environment because it treats each IT investment piecemeal and does not promote an interrelation among the agencies’ systems. OMB recognized this deficiency and issued a directive for the development of enterprise architecture with the purpose to standardize, relate, and provide integrity of the IT environment. After all, IT has become like electricity, a must have infrastructure without which no organization can function.

CPIC is about Moderation
CPIC’s goal is to ensure that the IT environment is calibrated for the needs of the agency and to soak up no more and no less than the necessary funds. Today’s enterprise, private or government, employs hundreds of thousands of people; managing them does not leave any room for daydreaming. This is why OMB has started giving birth to more and more siblings to the CPIC process, such as strategic planning, enterprise management office, portfolio management, balanced score cards, and other processes aiming to close the loop on managing the IT assets acquired at the clip of $66B a year.

Your Turn…
Why do you think CPIC is important for federal agencies? Do you think following the advent of CPIC in the federal government that things have gotten better or worse? Finally, do you think adopting CPIC best practices will help you and your family plan better, more cost-effective vacations?

iPhone, BlackBerry, and Android. Oh My!

July 13th, 2010

By Dennis Powell, e-Management

Before I purchased my Android smartphone, I could live definitely without smartphones. Today, not sure so much. What would I do without my movie show time app, my GoogleMap app, GPS, YouTube, Gmail, touch screen…and you know I could go on; but, I will spare you my app-obsession.

What would happen to your personal data if you lost your mobile phone?

What would happen to your personal data if you lost your mobile phone?

Whether you like it or not, smartphones are everywhere. The fascination with these convenient devices isn’t limited to my fixation. Remember the long lines for the release of the iPhone 4? Not surprising if you consider CommScore’s most recent estimates that more than 234 million Americans (ages 13 and older) are mobile subscribers. Among that number, more than 42.7 million people own smartphones.

Meet the Jetsons
Smartphones such as the iPhone, Android, Palm, or BlackBerry offer 21st Century convenience reminiscent of the classic TV show, The Jetsons. (Personally, I have never seen this show since I just celebrated my 21st birthday again for the 20th time. :-) ) But seriously, as a kid growing up, I never thought I would be able to use a futuristic device to get or store phone numbers, birthdays, or find my way to the closest dry cleaner or novelty shop in a city I have never visited. And yet, here we are—a future not much different from the videophones of The Jetsons.

Technology is great. Right? And, no one doubts if smartphones are good for us. But, if used improperly, they can easily become liabilities. Here are a few security tips that should keep you and your organizations safe from smartphone predators.

Don’t Lose It
A few months ago, I lost my mobile phone and I totally lost my mind. I panicked because so much of my life was housed in the phone. Lucky for me it was in the seat of my best friend’s SUV. Plus, I didn’t have sensitive data connecting me to work or home. Personally, I avoid having my social security number, credit card digits, notes regarding passwords, or financial data on my mobile device. Along with those best practices, be sure to back up data on your home computer, authorized and approved work computer, or in the cloud (online data storage services)—just in case you’re “unlucky” like me when it comes to mobiles devices. (Click here to read a link to Gizmodo that provides easy ways to back up your smartphone).

Keep in Mind Passwords Are Your BFF
So let’s say you are “unlucky” and lose your phone. What then? Well, you may be better protected if you have a password in place that allows access to your device’s information. Seriously, passwords are your best friends forever (BFF). Some smartphones use alphanumeric codes to grant access to users. Others, such as touch screen devices, may require patterns to unlock smartphones. Be sure to have a strong password or code to gain access to your phone. For alphanumeric best practices, check out Doug Pitcher’s blog posting that addresses creating strong passwords.

There’s a Scam for That!
All of the security issues you have with your laptop and/or desktop are relevant when it comes to your BFF…oops, I mean your smartphone. And while there are fun commercials claiming that “there’s an app for that,” buyer beware. If you plan to download apps, be sure to use the same caution you would with your personal computers. Specifically, avoid unfamiliar third party apps—especially the free ones from anonymous developers. These rogue apps could be spyware or malware that have the power to steal valuable personal information or even hack into your work network. Similarly, avoid clicking links included in text messages to unknown sites, or coming from strange sources. The Internet is loaded with con artists trying to take over your identity or steal your organization’s or company’s intellectual property, secrets, or workers. And yes, there truly is a scam app for that!

Have Your Smartphone Validated by Your Office Security/IT Team
Even company and government agencies are trying to figure out how to secure their sensitive data with smartphones, which are essentially minicomputers connected to IP networks. To reduce the risk of compromising your work network, be sure to have your smartphone approved by your organization if you plan to access its network. At the very least, you should use secure connections (e.g., VPN) to access company resources. Ask your security/IT team about using encryption technology to safeguard sensitive, confidential, or proprietary data.

Don’t Even Think About Jailbreaking
Some iPhone users aren’t happy with their exclusive mobile carrier. (True story.) So, they “jailbreak” or hack their own phones in order to take advantage of another mobile network. Unless you are a credentialed cyber security professional, jailbreaking may open your smartphone up to serious security issues. We advise you to find another smartphone that works on your network of choice. Hacking your phone is “not a good look.”

Time for you to chime in…
We want to hear from you. Have you ever lost your smartphone? If so, how did it affect you? Are smartphones overpriced toys? What smartphone is the best for security? Why? Do you have any smartphone security tips you would like to share?

Feel free to comment and/or share this blog thread with your social networks (e.g., Twitter, Facebook, Digg, Google, MySpace, LinkedIn).

Let’s Quit Social Networks! C’mon, What’s the Fun in That?

June 8th, 2010

How to Stay Safe and Still Connect

by Grant Sewell, e-Management

These days, it seems like everyone wants to stay connected. Think about it. We have our social networks, our smart phones, and dozens of our “friends” to keep in touch with. I’ll admit. I just have to stay connected. I have Facebook for my college buddies, I tweet on Twitter to get my daily news, I’m LinkedIn to build my  professional network, and you can find out where I’ve been each day on FourSquare. Oh yeah, I’m also on Digg, Delicious, Flickr, Last.fm, Posterous, Qik, Stickam and Tumblr. Okay, okay, I’m kind of addicted. Don’t judge me.  :)  

Is there a price for staying connected to our online “friends”?

Is there a price for staying connected to our online “friends”?

But is there a price to pay for staying “connected?” Checking the most recent statistics, Facebook has more than 400 million active users, of which 50 percent log in daily. The average user has 130 “friends”—can you even name 50 of your friends? Recently, concerns over information privacy have put Facebook under fire by technology activists, the government, and even the Facebook community.

With our privacy at risk, it’s important to reflect on the networks we’re connecting to, the people we’re connecting with, the information we’re sharing, and the risks we’re accepting with membership. Obviously, the easiest and full-proof solution to prevent identity theft or information loss from social networks is to not use them altogether. C’mon, what’s the fun in that? Here are a few other options for protecting your data that I’ve read (and don’t agree with):

I don’t accept “friend” requests.
Then you’ve completely missed the intention of connecting with people on these networks.

I use Firefox.
Good job - unfortunately 90 percent of social media information loss is due to social engineering attacks requiring action from the end user. Your Internet browser has nothing to do with it.

I only post fake information.
So why join at all? Do you connect with “fake friends” too? Just kidding, sorry.

Back to Reality!
The reality is we use social networks to find old “friends” and keep up with people with whom we contact rarely. If you’ve noticed, I keep using the word “friend” in quotes because it’s a commonplace term for social networks. We’re always friending, following, or linking; however, these may be people we only met once at a party or somebody we haven’t seen in 20 years. It could also be your family, colleagues, or even an enemy. In real life, they would merely be an acquaintance, but online, everybody’s our “friend.”

So with the standard ideas in mind, here are my Top 5 Realistic Tips for staying safe in social networks:

Are social networking sites the same letting a burglar know when you are not at home?

Are social networking sites the same as letting a burglar know when you are not at home and inviting them in?

Only post what you want to share (with everybody in the world).
I’m still an information security professional, so I like to err on the side of caution. Of course you’re not going to post your social security number, but decide whether you want anybody else to know things like your cell phone number, home address, or even a witty comment. Just like a rumor mill, the sharing network is exponential: your “friends” can see your information and possibly share it further.

If it looks phishy, it probably is!
A popular phishing attack these days is a fake Facebook friend request. They look surprisingly realistic, but a quick click of the mouse and typing your user name and password can give a bad actor access to all of your data—and all of your friends’ too. Just like your bank, your social network will never ask you for deeply personal information or request that you divulge your password to them. If you think this could have happened to you, change your password and notify the network right away.

Don’t “check in” at home.
Foursquare, Gowalla and Google Latitude are popular examples of geosocial networks that let you “check in” and share your current location with everybody. Websites such as PleaseRobMe.com have already pointed out that when you’re checking in somewhere, you’re obviously not at home. Social networks typically have excellent search features—it doesn’t take long to gather a lot of information about one person across many websites. Although a home address might be easy to find in public record searches, criminals are looking for the easy targets (most of the time). Don’t “check in” at your house, somebody else’s house, or where your kids go to school.

Don’t save your password, and change it often.
As an IT administrator, I remember a lot of passwords. In my head. Today’s count is around 30 or so. Most popular web services don’t require a frequent password change like you would have to do at the office. I would also venture to say that a typical home user lets the browser remember the password for them. Take initiative with your personal affairs—type your password every time you go to the website and change it at least twice a year. Take a look at one of our previous blog posts for some good info on strong passwords.

Be social! Stay active in your networks.
Wait a second? I’m telling you to actually use these super-dangerous websites I just revealed horrible realities about? Absolutely. In the information security community, one of the keys in a secure environment is awareness. If you’re going to use social networks, you need to know who’s writing on your wall, which applications you’re using and who’s tweeting about you. If your account is compromised, being proactive and catching it early will reduce the damage. Nobody is de-friended by me quicker than someone who just spammed me about Viagra. Now on the other hand, if you don’t think you use your profile enough, close your account. I’m not talking about not logging in—delete your account and all the information with it. If you’re on the fence, many services allow you to suspend your account and hide all your data, with the option of coming back at a later time.

Ten years ago, you would find people hesitant to even use their real name on a website. Today, people are overly confident in how and where they share personal information. It’s easy for someone to say “don’t use social media, it’s too dangerous!”, but the fact is that it’s only as dangerous as you make it. Awareness will always be the cornerstone to staying safe in social networks. I’m staying active—feel free to look me up on Facebook, FourSquare, LinkedIn, or Twitter if you’re in need of a new “friend.”

Let’s chat!
What are your favorite social networks?  Has privacy been a major issue for you? Have any of your social network accounts been compromised? If so, how did you resolve the issue?

Adventures of the “Younger” Colleen (Part II)

May 25th, 2010

by Colleen Schuler, e-Management

Hey, thanks for coming back! To recap from Part I, my family is just about ready to start a vacation with two adults, five kids, and a dog with a 7-year-old station wagon pulling a 19-foot trailer. Whew!

We’re living in the Upper Peninsula in Michigan—about 25 miles from the Canadian border. We’re on our way to the World’s Fair in Montreal. The day of the trip looms bright and early—but not early enough for my dad. We need to get a move on! We finally pull out of the driveway. But before we cross the border, my dad wants to stop at the bank and exchange some currency. As we see him disappear into the bank, we notice steam slowly coming out from underneath the hood. Oh boy.

The U.S. Pavilion at the Word’s Fair (Expo ’67) in Montreal.

The U.S. Pavilion at the Word’s Fair (Expo ’67) in Montreal.

We find a garage that can fix the car (a leaky radiator hose) that day but by the time it’s done, it’s early afternoon. And there’s no way dad can make it to the campground before dark. So he decides that we’re going back home and starting all over tomorrow! As you can imagine, we’re all pretty upset about it and my two younger sisters are crying their eyes out all the way back to the base.

Next day, we do get an earlier start since the trailer’s already packed. But unfortunately, when we reach Sault Ste. Marie, Ontario, we’re smack dab in the middle of an Airstream trailer caravan—about 300 or so of them. They’re pouring out of every side street! (Airstreams have a distinctive aluminum body with a sausage-like shape.) My dad is just a tad bit nervous—Airstreamers are seasoned travelers and my dad is just a novice. This is his first time hauling a loaded trailer! 

We make it ok to the campground the first night. But parking the trailer was a bit tricky…it wasn’t a drive through spot—my dad had to back the trailer up. To make matters worse, the ground  was muddy, the tires were slipping, and my dad has to drive it over a slight hump in front of the parking spot. Oh, and the rear edge of the parking spot has a 5-foot drop to a creek. Thankfully, there were no mishaps.

The road conditions weren’t that great—a two-lane gravel road for most of the journey. On the second day, we’re going downhill around a curve when we hear a thumpety-thump noise. Oh boy, the right rear tire is flat. So now, we (mostly my dad and brother) have to unhitch the trailer and unload the back of the wagon in order to get to the spare. Dad can’t get off the road completely because it’s very narrow with hardly any shoulder, so my mom takes my sister’s red sweater and traipses back up the hill to wave people to slow down. My dad said that the only people who stopped to offer assistance were those hauling trailers, too. (Let’s hear it for the community of RVers!)

We make it to the campground about 30 miles away from the fair. The first two days are fine. We’re enjoying the fair, having a blast. On the third night returning to the campground, the engine shuts down (Oh boy). No warning, no nothing, it just stops. Dad can’t find anything wrong with the car. But miraculously it starts up again. We eventually take it to a local garage; but “Bessie” will keep quitting on us periodically for the rest of the trip. Guess what happens the fourth night? Just as we’re pulling up to the trailer…whoosh! Another flat (Oh boy).

On our return trip, Dad decides to go the southern route through Lower Michigan than chance the graveled roads of Ontario. But even on a level highway, my dad could never get the car going past 55 mph. And during on stretch, we almost ran out of gas, the fuel consumption was high, and the gas station were far between.

That was the start of many family vacations with the trailer (much shorter distances, though!). However, my dad said that one of his happiest days happened when he sold the trailer for $500 and saw it towed out of our driveway! Bessie, our ’60 Chevy wagon, not only survived the trip but lasted another 5 years and went with us to Guam. (It will be some months following our World Fair’s trip—and several part changes before the car gets fixed.)

My family still takes the occasional vacation together…and we still get along with each other!

Have you ever taken a trip where everything that could go wrong did? Did you have a great time despite all of the drama? What was your favorite summer adventure or road trip? What are some of your tips to help others avoid some of the mishaps my family experienced during our big adventure to the World’s Fair in Montreal?

Photo courtesy of Alamedainfo.com

The Adventures of the “Younger” Colleen (Part I)

May 19th, 2010

By Colleen Schuler, e-Management

Ah summer…it’s just around the corner and that time of year again…to take the dreaded family vacation!

Well, let me tell you about mine when I was in middle school. Back then they called it junior high. But before I tell you about my family vacation, I have to set the stage.

My lovely family…
At the time of the vacation, my dad was a military officer. And no, he was not a stern taskmaster. Really, at heart, he is a marshmallow and it’s gotten much worse! Although he did, and still does, have a penchant for being on time. One thing the military taught him, though, was to plan. A few days before the trip, he got out his Rand McNally atlas, ruler, paper and pen (pre-historic GPS!) to calculate how far he could drive before having to get gas, stop for lunch, etc. He even budgeted time for pit stops! It was always 10 minutes. I don’t think we ever made it in that time, but it did accomplish the real purpose: no lollygagging. Oh, did I mention there are five kids in this scenario AND a dog? That my dad’s pulling a 19-foot trailer? That  we’d have to set up camp, preferably when it’s light out? My dad had to bring some sort of order to our chaos!

Our family took many vacations in our 1960 Chevy station wagon.

Our family took many vacations in our 1960 Chevy station wagon.

My mom is the quiet backbone of our family. How she planned for this vacation with five kids is beyond me. I mean, I just have trouble figuring out what to pack for a 3-day weekend, forget planning meals and what pots and pans to bring! And let me tell you, my mom can cook, whether it’s on a stove top, gas grill, or hibachi pot. She was famous for her dinner parties with homemade ravioli and cannoli (filling and the pasta), tomato sauce, garlic bread, even the salad dressing… Oh, dear, I’m getting hungry just writing about it! Sadly, the majority of those genes did a flyby over me!

I have four siblings…three sisters and a younger brother; we span 10 years in age. My brother at this point is starting to get taller than me, which really helps when it comes to setting up camp. We had a tent to supplement our sleeping space. My dad relies on my older sister and brother to help him with that…I just try to stay out of the way! Hey, my brother was always good at putting things together…like airplane models and a Honda banana-seat scooter. So why not put his skills to work?

My two younger sisters are different but two peas in a pod…and both were cute as buttons, usually dressed in outfits my mom made them (yep, another gene flyby). They would usually land in the very back of the station wagon since there wasn’t a third seat. This was before seat belts were required for all passengers—can you imagine?! They entertained us with songs they picked up on the playground (You know, real uplifting songs like, “Comet, it makes your mouth so green, Comet, it tastes like gasoline…!” ). What can I say about my big sis? We could fight like cats and dogs but I looked up to her, wanted to dress like her and she was my protector. Oh, and by the way, all of my mom’s genes landed on her.

Our dog was a poodle. He would do a funny thing when we’d get in the station wagon after a pit stop: he’d hop from the front seat to the back seat to the very back and then reverse it….counting noses I guess, to make sure we were all there.

Oh, and one last “family member”: Bessie, our 1960 Chevy station wagon. She plays an integral part in this story…

So what adventures could two adults, five kids, a dog, and an old station wagon pulling a 19-foot trailer on a two-lane road possibly have? Stay tuned for Part II next week!

But in the meantime, let’s talk about you! What’s it like to go on vacation with your family or friends? Do you have a “lollygagger” in your midst? What do you do or where do you go on your vacation? To visit family, a fun place, or event? What was your most memorable family vacation? Share your story now and be sure to come back next week for Part II!

Photo courtesy of Stationwagon.com