Communicating Trends and Risks Found in. Robert E Stroud CGEIT CRISC Vice President Strategy & Innovation CA Technologies

Transcription

1 Is IT still relevant? Communicating Trends and Risks Found in thenew TechnologyLandscape Session 324 Robert E Stroud CGEIT CRISC Vice President Strategy & Innovation CA Technologies

2 SPEAKER BIOGRAPHY Robert Stroud, CGEIT, CRISC, serves as a vice president innovation and strategy as well as the service management, cloud computing and governance evangelist at CA Technologies. Stroud additionally serves on the ISACA strategic advisory council and was the chair of the INSIGHTS 2011 World Congress Task Force. He formerly served on the itsmf International Board as treasurer and director audit, standards and compliance, the itsmf ISO liaisons to multiple working groups. He is a social media leader, author, blogger and highly regarded public speaker In his role with CA, Stroud is dedicated to the development of industry trends, strategy and communication i of industry best practices. He acts as a strong advocate for the customer working closely with users, industry organizations, government agencies, and IT luminaries to develop and communicate IT best practices. He is a mentor to many organizations, advising them on their implementations to ensure they drive maximum business value throughout the process. Stroud also helps ensure that CA s solutions adhere to industry best practices.

3 Robert E Stroud CRISC CGEIT Vice President Strategy & Innovation Immediate Past International Vice President ISACA\ITGI ISACA Strategic Advisory Council 15 years Banking Experience Contributor COBIT, VALIT and RISK IT Immediate Past Executive Board itsmf Intl. Treasurer and Director Audit Standards & compliance Former Board Member USA itsmf Author, Public Speaker & Industry GeeK

4 Is IT still relevant? Communicating Trends and Risks Found in the New Technology Landscape Robert E Stroud, CGEIT, CRISC Vice President Strategy and Innovation CA Technologies After completing this session, you will be able to: Communicate the top industry trends in technology and communicate their impacts Understand where the ISACA guidance is located and how to use it Communicate the top industry risks with new technologies Apply ISACA guidance to one s role

5 How many controls are enough?

6 transformation must be the priority 2009 Today Rate of technological change New Normal Growing Alignment Gap Business Demand IT enabled business capability IT Budget Complexity Slows Productivity Capability for dl 50 80% of budget spent keeping lights on delivery

7 Rapid transition continues. 73% of workers will be mobile by % of IT organizations will have flat or reduced budgets 2 By 2015, 40% of the enterprise security controls will be virtualized, up from less than 5% in % of companies are using, or implementing SaaS solutions 4 There are still over 4,000 (approx) new rules/regulations issued each year by the US government 5

8 we cannot control IT any longer By 2015, low cost cloud services will cannibalize up to 15% of top outsourcing players' revenue 2013, the investment bubble will burst for consumer social networks, and for enterprise social ilsoftware companies in , mobile application development projects targeting smartphones and tablets will outnumber native PC projects by a ratio of 4 to 1.

9 we cannot control IT any longer 2016, 40% of enterprises will make proof of independent security testing a precondition for using any type of cloud service. End of 2016, more than 50% of Global 1000 companies will have stored customer sensitive data in the public cloud

10 Fact or fiction? More data in 1 day in 2011 than between 1995 to 2000 A child today can access more information than a physician 15 years ago $600 to buy a disk drive that t would store all the worlds music 40% projected global data generated vs. 5% growth in global IT spend

11

12 What is that spot on your arm? If you hate going g to the doctor, you ll be thrilled to hear that app developer Skin Scan wants to help you replace that initial visit to the dermatologist. The Romania based company behind Skin Scan: Your Pocket Scan Technology for Skin Cancer Prevention was recently awarded 50,000 from Seedmoney to continue work on its algorithm based diagnostic app. For my money the sale price of $4.99, for now

13 ethical issues

14 24 billion! Diagram Source:

15 Coffee maker talks to my calendar Source:

16 consumer driven IT IT Led Consumerization of IT Consumer Driven IT Dependant on IT to deliver IT Uses approved devices to run IT sanctioned/delivered applications Conforms to rigid rules for access to systems, applications and sensitive data Relies on IT for access to IT Demand to use personal devices and social media in the enterprise Require access to the same applications and infrastructure on new hardware Consumes services rather than IT applications, regardless of source Uses a range of devices to run whatever IT services are best aligned to their role Require highly flexible policies and procedures for accessing sensitive data and services

17 consumer driven IT IT User IT Consumer Dependant Work Style Self Service The office Location Anywhere M F, 9 5 Work Hours 24/7 Devices Needs Flexibility Scalability IT Users have matured to become IT Consumers

18 Attitudes of year olds personal address & phone number personal financial information credit card info current location online backup Percentage of Respondents Q5. Thinking of all the activities and services you use online using any device, what types of data have you shared /stored with these online services? year olds n=285 Source: IDC s Custom IT Consumer Survey, sponsored by CA Technologies, April 2011

19 Expectations 60% Say it is somewhat or very important that companies support mobile technology as a way to purchase or use a product 52% Say it is somewhat or very important that companies use social media as a way to provide service or support 61% 63% 77% Say they expect to be able to use social media at work Say they learn about new technologies in their personal life and bring them to the office Say they expect devices they use at work to be at least as good as the ones they use in their personal life Q16_4, 16_3, 9_2, 9_6. 9_1 (all top 3 choices) for year olds n=301 Source: IDC s Custom IT Consumer Survey, sponsored by CA Technologies, April 2011

20 generation Z Source: z a sense of entitlement/

21 75% of Enterprises Have 'Bring Your Own Device' 'Policies i Employee Owned Devices 20 Source: of enterprises have bring your own device policies what that means charts/1025

22 focus on the user

23 Source:

24 termination of . Facebook has more than 600 million active users LinkedIn has more than 100 million registered users, spanning more than 200 countries Twitter has 200 million users, generating 65 million tweets a day "Social media has played a crucial role in the unrest in Egypt, with many of the protests organized through Facebook." BBC News

25 social is key! opinion matters smashed guitar YouTube song, United is listening (*) Last year, while he was flying from Nova Scotia to Nebraska on United Airlines, somebody broke his $3,500 guitar. But Carroll and his band, Sons of Maxwell, have told their tale with rhythm, harmony, rhyme, not to mention some wicked humor, and their four minute, 37 second complaint, United Breaks Guitars, above, is racking up views on YouTube. The Times The Times newspaper reported that within4 days of the video being posted online, United Airline's stock price fell 10%, costing stockholders about $180 million in value More information at

26 Security trends and implications Malicious hacking is a professional business, not a reputation building prank Optimizing online customer interactions is a business imperative Data protections need to move INTO the data Identity based encryption models Format preserving encryption models to protect data while it is in use/processing Technologies that enable better customer collaboration get priority & funding Reinvent business process leveraging new IAM and data protection technology Consumerization of IT is driving bring your own device The perimeter is disappearing with new cloud models The new endpoint is the application, not the device must protect data at the source Mobile apps create LOTS of web services (APIs) need API mgmt & security New focus for security is providing a security hub to secure the Cloud Connected Enterprise Provide for one policy that spans on premise and mobile users

27 cybercrime

28 cyber terrorism Sydney Morning Herald March 5, 2011

29 changing dimensions CEO Priorities Grow through innovation Drive growth and competitive differentiation through innovation? Attract and retain new customers Grow market share through a positive corporate image? Maintain cost efficiencies Continued cash and profit generation? CIO Challenges CIO Challenges Increase speed and agility Find new ways to serve business dli delivering i services faster and cost effectively? Mitigate risk Resolve risk and security issues transparently for your business? Deliver Value Embrace innovation for competitive differentiation and deliver value at appropriate costs?

30 Changing IT focus & structure Office of CIO IT Focus* Adoption of New Technologies 100% 2% Don t know 100% 100% 7% No & have no plans to create one 11% No, but considering it 23% Innovators 80% No, but plans 6% to create one 80% 80% 35% Leading edge 60% 60% 28% Transformers 60% 40% 74% Yes 40% 40% 54% Conservative 20% 20% 49% Running IT Operations 20% 0% 11% 0% 0% n = 614 n = 614 n = 614 Note * Respondents were asked to allocate 100% across each attribute Late

31 CIO s role is changing as the IT ecosystem evolves portfolio strategist financial manager sourcing manager vendor manger relationship manager

32 emergence of OCIO OCIO, O, empowering e IT for Value! aue! Portfolio Management Demand, Investment, resource, capacity & risk management Financial Management Cost, chargeback\showback, budgeting & planning Relationship Management Performance, benchmarking, contract, vendor & supplier decisions & management Effective Governance is critical to the OCIO Value is critical

33 control is important especially when you don t have it!

34 recommendations Technology ogy is evolving eo gat a rate we cannot comprehend and the role of IT is transforming IT will fundamentally change with IT becoming a Service Broker, aggregating services and managing the business relationship Governance, Risk Management becomes a value creator and security is critical Ail Agile, Dynamic Just tenough! Communicate!

35 embrace with knowledge

36 thank you Robert E Stroud CGEIT CRISC Robert.Stroud@ca.com Blogs

37 Collaborate Contribute Connect The Knowledge Center is a collection of resources and online communities that connect ISACA members globally, across industries and by professional focus - under one umbrella. Add or reply to a discussion, post a document or link, connect with other ISACA members, or create a wiki by participating in a community today!