Cloud Computing - web resources (draft)

• ENISA Security Risk Assessment
• 
  

Hidden incompetence...

When I will be a CIO I will ask for an anonymous poll to evaluate internal services because laziness and stupidity is hidden by colleagues that refrein themselves in showing the problems or the issues that exist with the processes or with certain colleagues. 

Everyone should report problems with no fear...

Provide a way to report inefficiency with anonymous privilege!

IT investment - basic principles

Some guidelines from the DBIS final seminar:

• each IT project should be analysed as an investment (in the Business Case);
• make a projection on at least 3 years; each new investment during these years is managed in the same way;
• Revenues - are the earnings generated by the project results; HARD to estimate in an IT project that aims to support a business process;
• Costs - are the one time costs (depreciated usually linear over the years + the occurring costs for corrective maintenance and support each year);
• Brut Profit (sometimes called Brut Income) - the earnings minus the costs; also used EBITDA (earnings before interests, taxes, depreciation and amortization) or the EBIT (earnings before interests and taxes);
• Net Profit (Net Income) - brut profit minus the taxes; if the Net Profit is negative then the taxes are considered as positive returns;
• The Net Present Value of the future Net Profits is calculated; the Cost of Capital is used - Weighted Average Cost of Capital (WACC) - that is the cost of the debt (interests) plus the cost of the equity (dividends);

Business Meeting - Lesson Learned 1

 Meeting F consulting company:

• RISK: if the project it's BIG then they will try to sell BIG -> don't play this card right away;
• use this: "We want to walk before we can run!"
• they say that their product allows you to develop agile: Bull**** -> not the technology allows you to be agile but the software development methodology that you use;
• When it's about a Document Management System always use the DM lifecycle: Capture - Process - Store - Deliver - Preserve;
• They mention "OUT - of - BOX" features are enough. Always ask 2 questions: How big is the box? and Can we live in the box?