Saturday, March 9, 2013

Design Engineering in Furniture

David Fletcher is UK based industrial/furniture designer.





...and some space saving cool intelligent furniture Design

Thursday, March 7, 2013

Unlearn, Unlead & Then Lead

Unlearning and un-leading (I just made that word up as I got spellcheck error) is unnatural for leaders especially C-level leadership.  Leaders are hardwired, fused with their learning/experiences of the past into their brains. The areas of business acumen, time tested management principles and process practices  they have acquired over the years are hard to let go. And it is hard to let go your experience & unlearn what you have already learnt. I believe with technology, evolution/erosion of business models and changing marketplace and design dynamics shifting rapidly its important to unlearn faster and keep a clear mind in absorbing how wisdom can show a different way. It may turn out to be a innovation or seizing a opportunity that creates a niche, or demolition and rebuilding can only come from unique insight. For CIO'/CTO's you want to be vulnerable with other business leaders inside your enterprise as well as outside to keep an open mind moving from being technology distributor to becoming a strategic counselor. I like this latter word because it means going out and conversing with other business leaders, listening and listening more and asking a lot of questions. Revealing up front you don't  know much but are willing to listen and unlearn and then learn again through unlearning. It almost shows that you are weak but believe me this is a powerful technique.

When its comes to subordinates, teams and the departments your lead - ,unlead first meaning listen and keep listening and make yourself vulnerable to the point of acting dumb. Almost opposite of giving orders and showing who is the boss!. The objective then is to move from just collecting and analyzing data to taking an outside-in approach. There are outside data available compare with internal data your staff is telling you about and then merge for effective decision making. Leading will follow. The prevalent popular ideas of big data and making sense of crunching large amounts of data it to get unique insights is nothing but I call the process of waiting and using wisdom for making decisions.  Finally the last part is to delegate and empower effectively so you can set aside time to dream, engage leadership to know their dreams and give insights to propel their vision. Unlearn, Unlead and then lead!!

Thoughts,

Sam Kurien


Monday, February 18, 2013

Vendor Management for Application Security - Best Practices


Managing enterprise risk in organizations is getting complex every day as 65% - 70% of software's used by an organization are from outside vendors. The ecosystem's of vendor-supplied software ranging from desktop applications to cloud solutions and in between all of the heterogeneous mix of applications used to manage the enterprise's network increasingly demands that CIO's  take care of Governance and Risk Compliance practices seriously. Yet the amount of man-power required and capacity in existing IT staff is less than ideal with all the stuff they are asked to do on a daily basis. We live in an age where vendor supplied applications run the operations of a business with heavy exposure for the organization towards security vulnerabilities, liabilities and risk.


A PWC study I read in 2012 said that less 1 in 5 enterprises conduct security assessment's on their vendors even when an average typical enterprise may carry 300+ vendor applications in their enterprise portfolio. Also right now as I go through the requirements of PCI DSS, SOX and HIPAA mandated privacy and security controls it is shockingly painful that organizations are liable to extend their security controls on vendor supplied applications for compliance and policy requirements.Ultimately as requirement states you are responsible not your vendor!

It is true enterprises have traditionally lacked the efficient methods of analyzing security of the applications vendors provide... but shouldn't there be a process put in place (as most organization's IT shops don't have IT staff or margins in time) to sufficiently whet vendors and applications before they are deployed in the organization. Some thoughts I have in terms of what can become best practices would be to manage vendors and put a process in place for security audit of applications better would be the following: (I am aware loads of this has been written on vendor life-cycle literature's but these observations come form possible improvements I am trying to make in my little world)

1. First of all  take an inventory of Vendor Applications in your organization. Streamline the vendors and minimize inter-dependencies. This way also minimize the number of vendors if possible.
2. Create a vendor matrix which assigns assurance levels based upon critical-ness  of that application and its need in the enterprise.  Some call this Assurance level of what are up times based upon the importance of the application. A simple example would be email - which means your exchange server needs to be up 100% of the time or if you are using an external cloud provider like Google mail - from a SAAS based provider what is assurance levels they provide. For major players this may not be a problem but if you are using smaller shops this may be a significant consideration as you construct your vendor matrix based upon high need of applications against it assurance levels.
3. A security policy team that invites members from other areas of the organization that have a primary say and know how's/why's of the software solutions they constantly use should be part of the vendor evaluation process.
4. Determine ahead of time what type of security testing your system admins' are going to do for deploying or procuring of the said software application.
5. Can the primary users of the software that form your evaluation team create a report from their perspective of  +'s and -'s of the software.
6 .Finally make notes of the track record of your vendor's  in terms of support maintenance, price negotiation and other value add information they give in a timely manner regarding licensing, new features, training security alerts etc etc.
7. Ask the vendors for test reports, vulnerabilities past, present and future, remediation, fixes made by the vendor development teams.
8. Evaluate all software vendors at least four months before your budget cycles and get long term commitments (3 or 5 years if possible).

These steps are not rules but some common observations I have made in terms of practice.

Thoughts,

Sam Kurien


Thursday, February 14, 2013

Disrupt or Be Disrupted!

As competition in the free market increases every day - business models and business strategies continue to evolve. Innovation will drive disruption in business models from players that will disrupt the current practices of existing business's in order to create a niche in the marketplace. The challenge for existing business's is to continue to disrupt or die in this game. Famous examples of a disrupter was Netflix who with its innovative web content streaming for movies, TV shows and a robust supply chain resulted in the closing down of traditional movie rental shops like Blockbuster and Hollywood Video. However players like Amazon, Hulu, Google have entered in as disrupters in this space threatening the very disrupter (Netflix) and stopping their march of web-media delivery domination. It seems like it is a familiar pattern the disrupter comes into the market with an innovation, flys high for a while and then gets disrupted with evolving market and technological changes. As a CIO I feel the pressures of evolving strategies, changing the game plan from time to time (though it makes your internal staff and management discomfortable) I believe it comes with role to warn colleagues of "conventional thinking. CIO's have to recognize when competitive strategies (tested and proven) can become inherent weakness. This inherently becomes a pattern of thinking that develops over the course of time as management gets into the practice of "this is/was always the way its done here". This creates myopia and inertia that brings the organization's to complete stand still. CIO's who confine their interests and practices only to leading technology and improving business processes will surely not make any significant impact in their tenure. They need to constantly have an entrepreneurial spirit, have the ability to tinker and experiment, know the heart beat and pulse of your customers and stakeholders and reduce unhealthy interdependencies. The four things I just mentioned need to be taken apart one by one:

Entrepreneurial Spirit: This is the ability develop a peripheral vision where if we can help the bottom line by distinguishing yourself with a innovative product or service that brings value add you will survive and thrive. For example when Walmart couldn't enter the financial services market as a regular bank they joined hands with American Express to create Bluebird credit cards.

Experiment: Top managers who allow for experimentation encourage innovation. The Post It note innovation at 3M, or the ad's appearing in Google Mail are examples of management allowing for experimentation. It is to recognize that most of them will fail but some will succeed. It's about allowing for a culture of trying out different things and then measuring what worked and what didn't.

Know the heartbeat of Your Customers & Stakeholders: When you have middle players or vendors that separate you directly from your customers or stakeholders either build mechanisms that give you good feedback or eliminate them so you can avoid not knowing what your customers or stakeholders. You cannot afford this.

Eliminate Interdependencies: If you have business partners who are in the same field avoid the interdependency. For example Netflix has all its content delivered through Amazon cloud services, now that Amazon has entered the same space the interdependency is not good. Google had to delink from Apple because they want to be major dominant player in the mobile space. Avoiding interdependencies in your supply chain is also very important if a supplier is threat or in direct or indirect competition.

Thoughts for today,

Sam Kurien



Friday, January 4, 2013

Three takeaway's - maybe 4!

Last night was revisiting a talk by Seth Godin on Tribes. Some important takeaways for the new year as I post this first post of 2013.

The new way of leading is about:

1. Challenge the Status quo - Why are we doing this?
2. Create a Culture (Tribe). People want you to step up and lead.
3. Commit to a philosophy in believing in people and empower them to achieve. The few strong believers you have in your (idea/philosophy/mission/vision)- they will take it forward!

Lastly - Figure out the people part and the technology gets a whole lot simpler.

Thoughts,

Sam Kurien

Saturday, December 15, 2012

The floks at NASA know how to rock out in Gangnam Style!



Friday, November 9, 2012

Data Artisan's

I like the term "Data Artisans"

George Mathew, president and COO of Alteryx, predicts one of the hottest jobs in the future will be the "data artisan," a hybrid role that mixes data analysis with business savvy. "Data artisans will be asked to pull from structured and unstructured sources to drive the most important decisions within an organization -- like where it should open its next retail location, whether to pursue a new market, and which products to push,"


There's a lot of talk about big Data! and data artisans will be the new breed of thinkers that are strategically going to make management revolution by utilizing the technology around them. Though these are fancy new terms and not new for manager's who have always used data driven approach, yet the software tools that are available have grown leaps and bounds. These tools allow Data Artisans for handling large volume's of data, along with speed at which this data is being collected in real time to make substantial decisive actions.

A recent article on Big Data in HBR summarizes that data driven decision are better decisions as it enables the manager to look at evidence rather than intuition. It comes easy for companies that were born digital like Amazon and Google who are masters on big data. To know buying behavior and having key insights on what a consumer thinks that affects the bottom line changes the very fate/profits and direction of your organization.

Some key points I want to record here:

1) Big Data does not replace insight
2) Big Data does not replace vision
3) Big Data cannot replace value but can definitely help in understanding, inferring how our people are doing on core value.
4) Big Data coupled with insight will give you an edge in speed of decision making.
5) Big Data coupled with insight will help you minimize cost by allowing you to refocus your strategies.
6) Big Data has several kinds of information descriptive that may be (financial, demographic, pschyographic and social data), it could be Behavioral (response rates, likes, dislikes, activity, purchase rates etc etc. and finally Attitudinal (loyalty, satisfaction,  behavioral affinities etc.)
7) Tools that can close the loop on feedback and refine complex information in each of the mentioned areas in point #6 in simplistic manner (specially visually) help communicate and further your Organization better.

Thoughts,

Sam Kurien

What is a Vector Database?