Showing posts with label domain. Show all posts
Showing posts with label domain. Show all posts

Tuesday, January 10, 2012

The Shrinking Cyberspace Environment


As William Gibson, the author who coined the word in his science fiction, put it, cyberspace was the cool “consensual illusion” experienced by billions of users of the world’s online networks, an unthinkably complex “graphic representation of data abstracted from the banks of every computer in the human system.” 

His fellow author Bruce Sterling said, cyberspace was that mental plane where we go during a phone conversation. It was that strangely perilous and exciting realm where l33t hackers might be kings and revolutionaries, where new mega-fortunes would be won.

It seemed that way a decade and more ago, as multitudes started going online for the first time. 

Today, both the word and the ideals it represented have fallen on hard times, for better or worse. Cyberspace, which once sounded like the digital Promised Land, has become the fabled lost continent of Netlantis.

The story of what happened to cyberspace may say something about how metaphors and jargon help us to grasp the potential of new technologies — and how they become obsolete.

Shrinking cyberspace
These thoughts came to mind not long ago when I chanced across the word while reading and realized how long it had been since I’d last heard it. 

The word may have always seemed a little nerdy and embarrassing, but for a while during the late 1990s, it seemed almost inescapable in tech news stories and popular culture. 

Given how ubiquitous computing and online communications have become, could cyberspace really have fallen so far out of favour?

To check whether my sense of the term’s disuse was accurate, I did some unscientific surveys of the word’s occurrences over the past couple of decades, starting with Lexis-Nexis searches through back issues of various newspapers.
 

(I had hoped to do broader, more collective searches across groups and categories of publications but my Lexis-Nexis service wouldn’t tabulate more than 3,000 hits at a time, which truncated the results.)

The pattern was obvious and fairly consistent. After scarcely appearing at all, “cyberspace” started to explode in late 1993 and 1994, coinciding with the introduction of the Mosaic web browser — the software that made the Web accessible and the Internet much more useful for most of the public.

The word faded, though, with the dot-com era (it may have started to go even earlier: coverage of the dot-com stock bubble may have slightly juiced up its numbers around 2000). It has weakly persisted or been in slight decline ever since.

A similar search for the use of “cyberspace” in books using Google’s Ngram Viewer yielded a similar pattern.
 

Hypothesising that writers might have started using “Internet” or “the Web” as replacements for “cyberspace,” I compared their usage as well. 

The results don’t prove anything but they’re certainly suggestive: those other online terms grew robustly long after cyberspace dropped off.

 

Cyberspace’s bad fortunes at first seem perplexing. A billion more people are online today than at the word’s peak.

Second Life, massively multiplayer online role-playing games, low-cost virtual reality gear, and consumer-level motion-capture tech like Microsoft’s Kinect have made digital spaces into real places for tens of millions of people. 

Why would “cyberspace” lose traction when the concept has more relevance than ever?

Verbal mission creep
Cyberspace started out as narrowly signifying only the representation of users’ experience while interacting with computer systems and data structures.

It didn’t even necessarily connote something as sophisticated as immersive virtual reality; early proponents of the term were happy to accept type interfaces as manifestations of cyberspace.

But the slippery notion that it also represented a mind set — the place where the mind wandered while online — helped to guarantee the expansion of that definition. 

Over the objections of purists and with the help of bemused and dazzled journalists, cyberspace gradually became loosely synonymous with both the Web and the Internet for many people.

And with that expanded definition came pronouncements that made the rise of cyberspace more mythic and millennial.

For some, it stopped being just a metaphorical construct: it became a digitized domain of pure thought and potentially infinite freedom.

John Perry Barlow, founder of the Electronic Frontier Foundation, spoke for all of them in his “Declaration of the Independence of Cyberspace,” which begins:
Governments of the Industrial World, you weary giants of flesh and steel, I come from Cyberspace, the new home of Mind. … You are not welcome among us. You have no sovereignty where we gather.
The normal constraints and rules didn’t need to apply.

Read more of this article here: SmartPlanet

Friday, January 23, 2009

Getting on top - Dominate your Credit Risk

Until recently, when debt became more expensive and harder to come by, companies generally had a blasé attitude toward managing their trade-credit risk. Most corporations, big and small, don't have credit risk procedures any more sophisticated than the sub prime lenders did. In which case you are flying in dangerous territory with your defenses down.

A simple tip but one that's been largely ignored until recently: Be more wary before extending credit to new customers. Make them prove their creditworthiness. Currently, companies take more a of shy unassuming approach to trade credit by quickly granting it to every new client that comes across their threshold. Once aboard they hope for the best and follow the client's payment performance over time.

Companies too often get into the habit of not asking for any financial information from their customers in favor of speeding up a much coveted deal. Suppliers have been doling out credit based on what little information may be available on their privately held clients, despite the fact that private firms have a higher rate of bad debt. Even after a credit account has been granted, the supplying company may shy away from asking for financial data because they don't want to offend a brand-new client. Clearly the banks have a part to play in all this because they too have been willing to extend credit lines far beyond reasonable doubt.

Companies should ask for customer and bank references up front. Although, that information may be biased and unreliable because of the struggling financial institutions. Will the bank and lenders be there in the long term for their customer? Are they going to provide financing or will they make a quick exit and leave the company with a liquidity shortfall, which may or may not cause the demise of the company? Are the financial institutes responsible for the ongoing viability of their clients, i.e. the corporate companies. What support and backup can they provide a struggling company when they themselves are in difficulty. These and many more, are all questions vendors need to ask themselves when looking over a customer's bank information.

Companies should request that all customers, new and old to fill out a one-page credit profile every year. The sheet should include the company's cash position and the most up-to-date contact information. A type of credit probe which may or may not provide the correct level of information in the right format, in a timely manner. This will lead to more overhead in the accountancy dept or with the business analysts, but if addressed properly, it may provide early warning of difficulties.

If there is any good news to be had during this economic downturn, it's that everyone is in the same boat. Your customers are asking their customers for more financial information. It's now become perfectly acceptable to ask about a client's financial status because everyone is being scrutinized by every supplier. Its a big global circle of accountants, checking each others assets.

If it's impractical to demand financial information up-front, then come up with a triggering number for when your company will demand it. A simple threshold or framework will suffice. If clients cross the established and agreed amount, then they must provide their trade creditors with financial statements to validate their credit. The type and level of the threshold can vary depending on client, industry, item value, uniqueness, development costs, credit exposure, etc. Its not a numerical value, its a way of thinking about and controlling your risk exposure.

Another way to improve your credit /risk management is to conduct a detailed assessment and calculate each customer's probability of default. With such precise knowledge you can price your services accordingly, and by showing your client the calculations, you can easily justify a premium rate. Cash has always been king and currently it is even more critical to companies health and financial welfare, but many companies have no idea who they're selling to, never mind who owns the company or their cash position. Its never been more critical to know your customer.

Moreover, suppliers can no longer rely on traditionally held views that big-name companies are safe from sudden and dire financial problems even if they don't have strong cash flow. Many of these companies have lived on extended credit lines for years and are not asset rich. Other companies can have negative cash flow and positive net worth. They're sitting on land or occupy buildings that no one's willing to buy. If their credit is pulled and they end up going bankrupt, the asset value won't cover the debts.

Experts also suggest sales and credit departments improve their communications between salespeople and the collections side. Your salespeople are trying to maintain the vendor /customer relationship at the same time as maximising their commission payments. This is a tightrope, and is a very dangerous situation for the company to ignore. It must be very, very tightly controlled. Don't allow salespeople to grant extended payment terms, without justification and authorisation, before checking in with their credit counterparts. Companies should use these negotiations to get more financial information out of their privately held clients and reprice future services if possible.

Moreover, salespeople may be able to offer the credit department more insight into a customer's financial situation. Therefore it is imperative that they have the influence, motivation and the time to actually get involved in credit and collections questions. Its a team effort and everyone better be on the team or the game is over.

Sunday, January 18, 2009

Project failure starts at the begining

We are all familiar with countries, towns and destinations that are difficult to reach, either by road, rail or public transport and yet people exist there and thrive. It is not in another dimension or another planet, where predictable 'difficulties' are numerous e.g. expensive ad hoc rocket ship service, an atmosphere of sulphuric acid, temperature variations in the region of 'scorchingly off-the-scale', etc. No, our difficulties in reaching our earthly destinations are because we do not start from the correct location.

This is a lesson I learned when lost in Dublin and forced to ask for directions. It was made clear to me that to get to point B I should have started at point A and not the point that I was currently at, which was currently unknown and would henceforth be referred to as X. Thus, making the logic more mathematically predictive.

The start point and the end point, part of the defining structure of a project and thus lifting it away from the realms of a simple action or activity, are critical in the initiation and definition of the project and the associated project plan. You will never reach the end destination if the start is left to serendipitous happenstances.

  • Plan the beginning of your project meticulously
  • Involve as many of the stakeholders as possible
  • Hold a workshop with all the allocated resources
  • Seek out Subject Matter Experts (SMEs)
  • Do your research, technical, business, historical, etc
  • Assess the Risks (qualitative and quantitative) and
  • Look where you are going

The dark matter of Projects failing

IT projects suffer from a similar force to that of the astronomically evasive 'dark matter'. A force that is not so much negative in its manifestation as it is in its effect, especially on other matter. It has an ability to occupy space without contributing anything, interacting with 'light matter' only to drain its energy and restrict its ability to move freely.

'Dark matter', and its ability to absorb and retain energy without contribution, is a universal anomaly for physicists. A puzzle yet to be solved. A question unanswered but not for project managers and team leaders. We know this effect and understand the consequences very well. It is a similar force to the one that will cause your project to fail. It is your greatest adversary. Its invisible. It can be detected but not controlled, without the right tools and level of experience.

Corporate Defense Domain

The Corporate Defense Domain is a convenient way of describing the sum total of numerous secure approaches, tools, processes, etc. that incorporates the entire environment security of an organisation, from end to end or perimeter to perimeter.

The concept of Corporate Defensive Domain is an aid to perception evolving from a vision of Physical Risk through IT Risk, Operational Risk to Governance, Compliance, Legal and Reputation Risks.

Corporate defense
Corporate security is purely defensive. There is no moral imperative that allows positive attacking action against threats and those that attempt to, or unequivocally, inflict damage on your organisation. Some but not all, of these attacks can be very determined and sophisticated because they are goverment funded and are either commercially or politically motivated. Most are just motivated individuals that can be classed as intellectual vandals.

As with all the good guys, you must work within the framework of the law and this only allows vigilance, defensive action, and possibly post-event retribution and compensation. The subsequent capture and imprisonment of a perpetrator may become a public spectacle. An apparent show of the success of your strategy and hopefully it will act as an example to others but in reality it is of limited effect and brings little solace to the organisation.

Showing your hand
There is also a view that public trials act as a learning curve for other attackers. The attacker creates an action on your perimeter and you display a measured reaction. Thus revealing some of your defensive strategy, processes and tools.

Security realms
There are many realms that exist in the land of security e.g. physical, electronic, virtual, etc. and there are many ways to look at and examine security. It can be viewed as a) a physical obstacle b) a process inflicted on reluctant personnel without explanation or c) an acceptable mindset that is instilled in the environment with the full involvement of the personnel. This latter approach should produce the best results, giving staff a sense of involvement, empathy and a real feeling for the potential consequences.

Secure personnel
It is critically important that your staff buy into securing the corporate domain because they are typically, the weakest link in the security of organisations.

Staff issues
  • They are not so easily or reliably programmed,
  • They don't always retain or apply knowledge appropriately,
  • They are swayed and diverted by social engineering techniques,
  • They have good and bad days,
  • Their attention is inconsistent, etc.
  • Their human!
Threats & Vulnerabilities
There are many ways to examine Threats and Vulnerabilities in an organisation e.g. by geographical location, business type, resources used, historical or political instability, etc. Do you know and understand what criteria and imperatives are being used to drive changes in your defenses? Are they appropriate, operationally maintainable or cost effective.

Analyse the Risk

Organisations are are driven to respond to threats and are compelled to adopt more and more complex defense strategies to address and defend their security needs. Security policies and strategies dictate that a full gambit of approaches should be adopted, from standard process implementation to strict and intricate application frameworks but this has an operational and business cost implication.

The questions that are not always being asked are;
  • What is the real cost of defending your business?
  • How much are you likely to lose?
  • Where will the danger come from and in what form?
  • How will it impact us?
  • What is our response capability?
  • What is the overall Risk profile?
Feal the fear and hold your ground
With the constant threat of intrusion and compromise, regular and detailed testing and re-examination of all your defenses are necessary but before you can realistically and effectively apply what you have learned, you need to conduct a detailed analysis and assessment of the Risks, the potential business impact and your response options .

7 Points to build stronger, more secure Corporate Defenses
  • Create executive level authority and responsibility for Corporate Defense, policy and implementation
  • Assess your strengths and weaknesses using mature Risk management methodology
  • Examine the interdependencies between your tools, processes and defensive positions. Strengthen the perimeters and communications
  • Map and review your Corporate Defense Domain strategy, continuously, in a structured and determined manner.
  • Determine, test and examine areas of Convergence, for overlap and gaps. Establish strong boundary defenses and stringent hand-over criteria
  • Develop a single hardened core entity, an authoritative cross functional discipline, incorporating Governance, Compliance and Risk
  • Lock the perimeter gatesways, give the spare keys to your organisation to the central hardened core and prepare yourself for the next attack