Disaster Recovery Template Sarbanes Oxley
Sarbanes Oxley Compliance Tool Kit
 Information Technology Service  Management ITSM - Change Control, Help Desk, and Service Request
Security Template  Sarbanes Oxley
Sensitive Information Policy Personal Data Security

RSS News Feeds

Janco

IT Productivity Center

ejobdescription -

  psrinc

  IT-Toolkits

  Disaster Recovery Planning

 

 

 

IT Infrastructure - News

 


January 10th, 2008

Human side of DRP

The list of natural and manmade disasters with which businesses have had to contend early in the 21st century is long. Many organizations have felt the devastating effects of the September 11 terrorist attacks, acts of bioterrorism involving anthrax, and bombings in London, Madrid and Bali. The severe acute respiratory syndrome (SARS) outbreak, the South Asian tsunami and Hurricane Katrina also have had costly, far-reaching impacts on businesses.

Disaster Audit

Disruptions resulting from these and other disasters have rippled across supply chains, shaken entire industries and taken their toll on employee, customer and partner relations. Not surprisingly, organizations of all types and sizes are making crisis preparedness and response a key focus of their business continuity planning. Chances are, your organization is taking a proactive approach and continually looking at ways to minimize the impact that potential crises can have on your business processes and technology systems. Yet, even though your companyÂ’s business continuity plan most likely serves to protect your companyÂ’s physical assets, such as its data, network(s), core business applications and facilities, how well does it address the human side of disasters?

- more info 


December 31st, 2007

AOL Drops Netscape Out of the Brower Market

Browser Market ShareOn December 28, 2007 AOL announced that it stopped development of the Netscape browser, saying the respected brand that launched the commercial Internet in 1994 had little chance of ever regaining market share against its archrival Microsoft. AOL spent $4.2 BILLION dollars in 1994 to

acquire Netscape and has invested well over a billion dollars since then on that product since then. This is has to be one of the WORST investment decision made by any corporation in since the inception of the internet.

AOL will continue to release security patches for the current version (Netscape Version 8) of the browser, Netscape Navigator until February 1, 2008. After February 1, there will be no more active product support for Navigator 9, or any previous Netscape Navigator browser. This includes Netscape v1-v4.x, Netscape v6, Netscape v7 Suite, Netscape Browser v8, and Netscape Navigator/Messenger 9.
- more info 


December 16th, 2007

Vista is being accepted very slowly

Eventhough Microsoft owns the OS market in the commercial marketplace, the market share of Vista is still only a little over 9% after one year.  Currently almost 95% of all systems that browse the internet are some form of the Windows OS. 

In is
Browser and OS Market Share study, which is to be release on January 3rd, Janco found that most users are not really interested in the OS.  Rather they are interested in the way that they can use the systems to meet their needs.

Janco found they are basically two types of Vista users:

  • Early adopters - individuals and enterprises who must have the latest technology.
  • Developers - individuals and enterprises that develop products either for internal distribution or external sale.

Many users are waiting for Vista Service Pack 1 to be delivered before they will install it on more workstations.
Vista Market Share

- more info 


November 22nd, 2007

eMail is a security risk

eMail PolicyEmail today presents a serious risk to security, business productivity, and compliance with government and industry regulations. As the use of email for legitimate business purposes continues to trend upward, so does its use as a tool for unwanted, illegitimate, and occasionally dangerous, business activity. There are three predominant sources of risk that every organization faces: spam, information leakage, and compliance as it relates to email.

Spam currently ranks as the third-greatest threat to enterprise security. Professional spammers continue to clog up to 90 percent of unprotected mail stores and inboxes with unwanted emails that soak up bandwidth, upset end users with irritating or offensive content, and negatively impact employee productivity.
- more info 


November 13th, 2007

SOA Best Practices Cookbook

SOAService-Oriented Architecture (SOA) is creating a lot of buzz across the IT industry. Propelled by standards-based technologies like XML, Web Services, and SOAP, SOA is quickly moving from pilot projects to mainstream applications critical to business operations. One of the key standards accelerating the adoption of SOA is Business Process Execution Language (BPEL) for Web Services. - more info 


November 9th, 2007

Microsoft To Eliminate Click to Activate ActiveX in IE

IE SecurityBack in April 2006, Microsoft made a change to how Internet Explorer handled embedded controls used on some webpages.

This was frustrating to users of IE and did not really offer any addition security that was not already in place.

Some sites required users to click to activate before they could interact with the control.

Microsoft has now licensed the technologies from Eolas, removing  the click to activate requirement in Internet Explorer. Because of this, Microsoft is removing the click to activate behavior from Internet Explorer!

It is important to note that this change will require no modifications to existing webpages, and no new actions for developers creating new pages.

Microsoft is reverting to the old behavior. Once Internet Explorer is updated, all pages that currently require click to activate will no longer require the control to be activated. They will all just work.  

 

Before April 2006

After April 2006 IE Active X update

After April 2008 Removal

Controls Injected Via JavaScript

No Click to Activate

No Click To Activate

No Click To Activate

Controls loaded Direct In HTML (<object>, <embed>, <applet>)

No Click to Activate

Click To Activate Required

No Click To Activate

 

- more info 


November 5th, 2007

Best Places to Work

IT Hiring KitBest Places for Business and Careers

(Forbes) The news on the economy in recent months has been uninspiring. The subprime lending mess threatens to accelerate the housing slowdown. Gas prices are at their highest in eight months. Gross domestic product growth this year is expected to be less than 3% for the first time since 2003. But one part of the country consistently manages to produce strong economic growth and still keep costs down. For the second straight year the Southeast placed 5 metros in the Top 10 of our Best Places for Business and Careers. While most economies in the West have also outperformed their peers in the Northeast and Midwest over the past four years, living costs there have risen dramatically. Housing prices in Phoenix, spurred in part by easy lending, are up 57% in the past two years, knocking it off our Top 10.

The overall rank for the best places to live according to Forbes is:

Rank

Metro Area

Cost Of Doing Business

Job Growth

Educational Attainment

Population (thou)

1

Raleigh NC

27

35

12

978

2

Provo UT

67

17

30

465

3

Boise ID

19

19

84

560

4

Des Moines IA

49

64

50

531

5

Knoxville TN

14

49

88

662

6

Albuquerque NM

34

56

53

813

7

Durham NC

33

124

6

462

8

Fayetteville AR

11

8

140

417

9

Nashville TN

42

47

82

1,438

10

Olympia WA

113

21

40

233

11

Ogden UT

58

33

96

499

12

Gainesville FL

52

67

13

243

13

Naples FL

79

3

46

317

14

Richmond VA

26

72

64

1,193

15

Lincoln NE

15

114

24

284

16

Edison NJ

174

93

25

2,323

17

Tallahassee FL

81

68

16

339

18

Mercer County NJ

156

46

20

368

19

Omaha NE

69

113

60

821

20

Spokane WA

47

60

97

447

21

Charlotte NC

44

91

54

1,563

22

Tampa-St. Petersburg FL

104

26

129

2,691

23

Asheville NC

10

70

127

398

24

Winston-Salem NC

7

121

110

455

25

Atlanta GA

119

100

36

5,064

The best places to do business rankings are:

Rank

Metro Area

Cost Of Doing Business

Job Growth

Educational Attainment

Population (thou)

61

Greensboro NC

1

168

111

682

38

Wilmington NC

2

20

108

324

93

Kingsport TN

3

160

185

303

167

Hickory NC

4

198

196

358

29

Springfield MO

5

41

138

402

105

Fayetteville NC

6

39

169

347

24

Winston-Salem NC

7

121

110

455

109

Fort Smith AR

8

111

197

288

133

Shreveport LA

9

74

157

387

23

Asheville NC

10

70

127

398

8

Fayetteville AR

11

8

140

417

146

Roanoke VA

12

165

148

294

94

Fort Wayne IN

13

131

143

408

5

Knoxville TN

14

49

88

662

15

Lincoln NE

15

114

24

284

160

El Paso TX

16

99

182

737

44

Cedar Rapids IA

17

175

83

249

58

Oklahoma City OK

18

103

105

1,165

3

Boise ID

19

19

84

560

39

Eugene OR

20

65

81

339

72

San Antonio TX

21

77

122

1,945

102

Clarksville TN

22

44

180

246

26

Virginia Beach VA

23

69

114

1,653

108

Chattanooga TN

24

109

158

495

90

Davenport IA

25

140

154

377

The greatest job growth is in the following locations:

Rank

Metro Area

Cost Of Doing Business

Job Growth

Educational Attainment

Population (thou)

68

Cape Coral FL

75

1

142

562

136

Las Vegas NV

108

2

166

1,777

13

Naples FL

79

3

46

317

40

Sarasota FL

96

4

92

689

186

McAllen TX

129

5

198

697

128

Port St. Lucie FL

106

6

156

391

110

Riverside CA

143

7

184

4,017

8

Fayetteville AR

11

8

140

417

100

Ocala FL

92

9

194

311

55

Phoenix AZ

121

10

89

3,976

32

Orlando FL

122

11

98

1,986

57

Deltona FL

66

12

173

502

49

Fort Lauderdale FL

134

13

90

1,809

47

Lakeland FL

62

14

187

550

60

West Palm Beach FL

153

15

58

1,298

50

Bremerton WA

112

16

86

244

2

Provo UT

67

17

30

465

69

Savannah GA

86

18

119

321

3

Boise ID

19

19

84

560

38

Wilmington NC

2

20

108

324

10

Olympia WA

113

21

40

233

118

Reno NV

77

22

113

403

63

Charleston SC

109

23

94

601

182

Bakersfield CA

172

24

193

770

194

Merced CA

180

25

200

247

 

- more info 


November 2nd, 2007

PCI Standard Flounders as Punishment is Lax

Security StandardsThe Payment Card Industry Data Security Standard (PCI DSS) methodology aims to improve the security of cardholder data among banks, service providers and the merchant community. The industry self-regulation standard is more prescriptive and detailed than earlier regulatory regimes (such as Sarbanes-Oxley) but still leaves plenty of room for interpretation. Although voluntary, at least in theory, those subject to a breach who aren't able to show they've followed best practice by signing up to PCI DSS risk having their ability to process cards taken away.

Security AuditMerchants and service providers need to validate compliance against an audit by a qualified assessor.

But there are major holes in the process of becoming compliant, and even greater challenges in staying compliant as networks are evolving. Hundreds of qualified assessors attempting are audit hundreds of thousands of merchants creating a potential gap in the system.

DRP AuditAlthough the high profile credit card security beaches have stolden the headlines, problems at small merchants present a severe risk. For example the link between scanning devices through to the software application on the PC in a small store is often unencrypted, even though the data is encrypted is placed in an encrypted tunnel after it leaves the computer. A keystroke logging planted on such machines presents a severe security risk.

The problem is that small shops do not know PCI DSS exists and, if they do, they do not take the process seriously enough.

Small merchants using self-assessment will be tempted to just tick boxes saying they had set up a firewall or secured their network. Part of the problems is that assessors act more like consultants than health inspectors. Nothing will happen unless you take away merchant accreditation.

Many merchants wonder why they should invest in PCI DSS compliance when it does little to help them sell more products.

Some say SOX compliance is a wasted effort from a security perspective because it failes to outline tactics for achieving strategic directions. PCI DSS is better because it outlines best practice, such as using a firewall and a secure wireless LAN, but does not go far enough. DSS and it tells the merchant what they have to do, but it does not actually tell them how they are going to do it - more info 


October 23rd, 2007

Intel Looks to Lower Prices With Job Cuts

IT Salary Survey

Intel Prepares to Slash 2,000 More Jobs

Savings from Intel's work force cut are unlikely to lower desktop and notebook prices.

(eWeek) Intel plans to cut an additional 2,000 jobs from its payroll to cut costs, executives announced Oct. 16 after an earnings report that showed both income and margins up in the third quarter of 2007.

CEO Paul Otellini and executives told analysts and reporters during a conference call Oct. 16 that the Santa Clara, Calif., company expects to save about $1 billion in 2008 on payroll cuts and a switch from the 65-nanometer processors to the new 45-nanometer processors, which are cheaper to manufacture.

The strategy of reducing and saving began in 2006, when Intel's employee roster stood at about 94,000. It now stands at 88,000.

- more info 


October 18th, 2007

Mobile Phone to be Allowed on EU Planes

Mobile Security

Will US air carriers follow suit?

(Reuters) - Mobile phone users might be able to make telephone calls on UK-registered aircraft from 2008 under new proposals published by telecoms and media regulator Ofcom.

Ofcom suggested that aircraft could provide an on-board base station as part of its proposals, developed jointly with other European Union countries, aimed at encouraging companies to develop innovative technologies to use radio spectrum.

To ensure that mobile phones did not interfere with other terrestrial mobile networks, they would still have to be switched off during take-off and landing.

But Ofcom said once the aircraft had reached a minimum height of 3,000 metres, handsets could use the aircraft's network to make and receive calls, which would be routed via a satellite link to the network on the ground. Calls would be billed through passengers' normal service providers.

Ofcom, which is calling for industry comments by November 30, suggested amending the aircraft operators' existing Wireless Telegraphy Act 2006 licences to enable a service that already operates in countries such as Australia.

Some airlines already offer in-flight outbound telephone services via their own network. However, Ofcom's proposals will enable passengers to use their own handsets.

- more info 


October 13th, 2007

Smart Phones Drive New Security Policy Requirements

Security TemplateMobile Devices are a key driver in security policy requirements


Execuritives and managers are increasingly realizing the productivity benefits of mobile devices such as Smartphones and converged PDA/phones. While this mobile revolution is an advantage to those who use it well, it is creating a tremendous security management challenge for enterprises of all sizes.  This with demands of Sarbanes Oxley, ISO 17799, HIPAA, and the PCI standard are of concern to all. 

 

Proprietary and confidential data is now moving outside of the secure perimeter of the enterprise and onto mobile devices that can be located anywhere in the world. Janco has created a Security Policy Template that address these requirements.

- more info 


October 3rd, 2007

IT-Toolkits.com Launches Excel Based Secruity Audit Program

Secruity Audit ProgramJanco Associates (www.e-janco.com), in conjunction with IT-Toolkits.com (www.it-toolkits.com) announced the availability of its awaited Security Audit Program. The CEO of Janco said, The Security Audit Program is one more component of the Business and Information Technology Infrastructure that we have developed as a primary tool set for every CFO, CIO, and CTO. The audit program contains over 400 unique tasks divided into 11 areas of audit focus and 38 separate task groupings. He added, The audit program is one that either an external auditor, internal auditor can use to validate the compliance of the Information Technology and the enterprise to ISO 17799, Sarbanes-Oxley, HIPAA, and PCI-DSS.

The eleven areas of the security audit focus are:

  • Corporate Security Management,
  • Systems Development and Maintenance,
  • Information Access Control Management,
  • Compliance Management,
  • Human Resource Security Management,
  • Information Security Incident Management,
  • Communications and Operations Management,
  • Organizational Asset Management,
  • Physical and Environmental Security Management,
  • Security Policy Management, and
  • Disaster Recovery Plan and Business Continuity.

The audit program comes as a Windows Excel (2003 and 2007 format) worksheet which include the detail task, summary graphical presentations and a sample copy of a completed audit.

In addition Janco and It-toolkits has teamed up to provide an update service for the Security Audit Program. The update service is for 24 months from the date of the purchase. This service also provides its subscribers with membership in Janco's Elite Subscriber Service. The Elite Subscription Service provides its participants with copies of Janco's and IT-Toolkits White Papers, Surveys, and selected new products before they are released to the general public.

- more info 


September 24th, 2007

Security Software Now Free to Many

Security(Forrester) Fueled by growing concerns about security on the Internet, North American online consumers are stepping up their use of tools like antimalware, personal firewall software, and spam and pop-up blockers. Why? Because an increasing number of computer manufacturers and Internet service providers are bundling security into their offerings. Now that these "free" products have popped up in distribution channels, consumers are less willing to pay for the protection. Instead, they look to obtain their security software either via a free download or bundled into another purchase. Unit volume may be up, but increasing price pressure spells trouble for tech marketers responsible for consumer security products. To survive the squeeze, they will have to speak more specifically to consumers' concerns and conjure up creative bundling strategies of their own. - more info 


September 21st, 2007

IT Should Balance Operational Metric With Outcome Metrics

Information Tecnology and enterprise help desks/service desks most frequently use operationally oriented metrics such as:

  • First-call resolution rate: percentage of issues handled on the first call
  • Number and length of system outages (network downtime, dead printers, phone systems)
  • Overall number of phone calls answered and abandoned to support desk by agent, day, hour, system
  • Overall number of tickets opened with the support desk by employee, day, hour, system

These and related metrics track how many problems customers are encountering and how quickly they are getting the answer they need. Graphing numbers on a weekly/monthly basis helps track service levels and agent productivity. Adjust schedules and staffing to fit the peaks/valleys for support, which is more complicated as large companies consolidate help desk operations and one help desk must service employees in multiple time zones. Metrics also allow reporting on root cause analysis and trends like hardware failures.

Balance these operational metrics with metrics that point to the mission of the service desk to prevent or cure interruptions in employee productivity such as:

  • Number of incidents per employee
  • Average minutes of downtime per employee
- more info 


September 18th, 2007

Google Drives New York Times to End Paid Internet service

IT Service ManagementNEW YORK (Reuters) - The New York Times Co said it will end its paid TimesSelect Web service and make most of its Web site available for free in the hopes of attracting more readers and higher advertising revenue.

TimesSelect will shut down on Wednesday, two years after the Times launched it, which charges subscribers $7.95 a month or $49.95 a year to read articles by columnists such as Maureen Dowd and Thomas Friedman.

The trademark orange Ts marking premium articles will begin disappearing Tuesday night, said the Web sites Vice President.

The move is an acknowledgment by The Times that making Web site visitors pay for content would not bring in as much money as making it available for free and supporting it with advertising.

- more info 


September 13th, 2007

Europe Short of IT Professionals

IT Hiring(c/net news.com)  Europe is losing out on billions of dollars in investments because of a shortfall in qualified technology-oriented human resources. The European Commission is warning that 40 percent of European citizens suffer from digital illiteracy and that the skills shortage is slowing down the implementation of new projects. The European commissioner for information society and media, Viviane Reding, said it is no longer possible to waste the talents of millions of Europeans by leaving them out of the information society.

Shortfalls of qualified ICT (information communications technology) practitioners slow down new ICT applications in the economy and draw away billions of euros of investment funds to dynamic emerging economies, where hundreds of thousands of new engineers are qualifying each year. The Commission has called upon member states to tackle the deepening digital-skills crisis and will support a number of initiatives, launching its e-Inclusion initiative in 2008, which aims to halve digital illiteracy by 2010 by promoting better use of e-learning.

- more info 


August 31st, 2007

Electronic Record Retention Now Mandated for Many

Compliance to record retention impacts most enterprise

Record Retention

 

Regulation

Industry
Impacted

Retention
Implications

Penalties

Sarbanes-Oxley

All publically-traded companies

Audit records must be maintained for 7 years AFTER the audit

Fines up to

$5,000,000 & imprisonment up to 20 years

Section 17a-4

Financial Services

eMail records must be kept for 3 years, trading records thru the end of the account plus 6 years

Case by case

HIPAA

Healthcare

Hospital records must be kept for 5 years, medical records for the life of the patient plus 2 years

Fines up to $250,000 & imprisonment up to 10 years

- more info 


August 25th, 2007

Spam is still a major issue for most Internet users

Partnership with IT Toolkits

In its annual state of the Internet for 2000 Consumer Reports finds that:

  • Spam - The incidence of heavy spam is still high for many people.
  • Viruses - The frequency is at the same high level as last year's.
  • Spyware - The danger is still high. In the past six months, infections prompted 850,000 U.S. households to replace their computers.
  • Phishing - The incidence is still very high. There were about 23,000 attacks in April 2007.

Spam

Viruses

Spyware

Phishing

National Incidence

1 in 2 experienced high levels of spam

1 in 5 had a major, often costly problem.

1 in 11 had a major, often costly problem.

1 in 81 lost money from an account.

Average cost per incident

not applicable

$100

$100

$200

Total Damage

not applicable

$3.3 Billion

$1.7 Billion

$2.1 Billion

 

 

 

 

 

 

 

 

 

- more info 


August 11th, 2007

ITL v3 Polices and Metrics Released by Janco

 

ITIL v3ITSMNow, more than ever, with the release of version 3, the IT Infrastructure Library (ITIL) sets the world standard for IT service management. Most companies have embraced, and expect compliance with, the IT management disciplines that are documented and detailed in ITIL. And anyone who's delved into the depths of the ITIL library knows that the information, while well organized and sensible, is daunting due to the sheer volume.

This is where we can help! The ITSM for SOA Template complies with ITIL. This kit is a complete collection of polices and procedures that will help you and your organization quickly understand and implement ITIL disciplines. It will help you assess where your organization currently stands in regards to ITIL standards and arm you with the information you need to fill in the gaps.

MetricsITIL and ISO 20000 are driving many international enterprises to evaluate the Service Desk function of their enterprises. Metrics are the key to this process and the just released version 3.1 of Jancos Metrics template directly address that issue.

M V Janulaitis the CEO of Janco said, We have found that the focus of many enterprises now is in the area of service delivery in addition to cost control. In response to that need Janco has updated its Metrics for the Internet, IT, and Service Management HandiGuide and increased the content of its IT Cost Control - Metrics - SLA - ITSM Kit with a Platinum Edition. The platinum edition includes: Metrics HandiGuide, IT Service Management Policy Template, Network Event Viewer, Service Level Agreement Policy Template, Summer 2007 IT Salary Survey, and 204 Internet and IT Job Descriptions in Word. Janco has also added an update service for the new Platinum edition. With this addition to the IT Cost Control - Metrics - SLA - ITSM product line, Janco now offers 4 versions of the kit which range in price from $899 to $1,999.

- more info 


July 30th, 2007

Web Attacks - Defense Is Critical

The best security against traditional viruses and worms is to use up-to-date antivirus software on all your computers, patch all your computers with the latest OS and application security updates, and install a quality firewall between your computers and the Internet that blocks all inbound Internet traffic except that which your company specifically needs (e.g., inbound email or Web traffic to your Web server).

 

As more and more organizations adopt the security fundamentals of firewalls and antivirus protection, however, attackers look for new attack vectors to infiltrate their victims. Internet access management becomes a crucial third component in an effective organizational security strategy; an effective Web-filtering solution enforces acceptable use policies and delivers perimeter protection from Internet-based threats in HTTP, IM and P2P traffic.

- more info 

 

 




Other News Links

CTO Toolkits.com
e-janco.com
IT Productivity.org
IT-Toolkits.com
ejobdescription.com
psrinc.com
psrorders.com
newsgroupworld.com
ntcity.com
disaster-planning-template.com
disaster-recovey-planning.org
disaster-recovery-planning.com
disaster-recovey-planning-template.com
 

 

IT Salary SurveyIT Hiring IT Job Descriptions IT Salary SurveyMetrics Internet ITJob Descriptions IT Salary DataIT Business Strategic Alignment

© 2009 Janco Associates, Inc. - ALL RIGHTS RESERVED -- Revised: 06/16/09.