A CIO's Voice

OCTOBER 18, 2010

Software development life cycle (SDLC) – Number of projects in each phase of the SDLC and average times in each stage. Some of the data elements are designed to identify significant problems that may go unnoticed by simply reporting averages. So in some instances I am capturing specific data points with a roll up.

SDLC 87

SDLC WAN Budget Training 87

ForAllSecure

AUGUST 31, 2021

This is the first step that Mayhem verifies and displays that your binary was compiled with four built-in checks and protections: ASLR, Fortify Source, StackGuard, and Data Execution Prevention ( DEP). This further indicates the value of running Fuzzing engines such as Mayhem and integrating it within your SDLC.

SDLC 52

SDLC Analysis Engineering Applications 52

Cloud Musings

DECEMBER 19, 2016

The brain-like abilities of DeepMind mean that analysts can rely on commands and information, which the program can compare with past data queries and respond to without constant oversight. · DeepMind can “remember” using this external memory and use it to understand new information and perform tasks beyond what it was programmed to do.

Cloud 70

Cloud IBM SDLC Analysis 70

ForAllSecure

SEPTEMBER 9, 2021

It is also the only DAST technology that’s able to instrument itself into the SDLC, delivering accurate results directly to the developers. There is a big difference between data, which is just data, and actual information. Fuzzing provides information: is there a real defect? We all know this problem is key.

SDLC 52

SDLC Applications Security Analysis 52

ForAllSecure

OCTOBER 27, 2021

In the age of SaaS applications and infrastructure, many architectures are designed around being API-first for managing data ingestion and retrieval. This architecture allows testing to be ingrained into all aspects of the SDLC.

Security 52

Security Applications Authentication SDLC 52

Social, Agile and Transformation

FEBRUARY 16, 2010

I cover topics for Technologists from CIOs to Developers - agile development, agile portfolio management, leadership, business intelligence, big data, startups, social networking, SaaS, content management, media, enterprise 2.0 Once you have a working SDLC and new working practice with the Business, start thinking about how you will scale it.

Agile 100

Agile Development Enterprise Enterprise 100

CIO Business Intelligence

DECEMBER 20, 2023

Gartner’s surveys and data from client inquiries confirm that developer productivity remains a top priority for software engineering leaders.” This has spurred interest around understanding and measuring developer productivity, says Keith Mann, senior director, analyst, at Gartner.

Software Development 123

Software Development Software Software Development 123

Social, Agile and Transformation

NOVEMBER 3, 2009

I cover topics for Technologists from CIOs to Developers - agile development, agile portfolio management, leadership, business intelligence, big data, startups, social networking, SaaS, content management, media, enterprise 2.0 Business minded, Agile CIO with strong Big Data, Business Intelligence, Search, and Social Networking background.

SCRUM 100

SCRUM Agile Social Project Management 100

A CIO's Voice

NOVEMBER 2, 2010

GOAL – Implement process to move email data offline and free up resources. Measurement – Measure growth of email data stores. Number of projects in each phase of the SDLC and average times in each stage (view of overall project pipeline, identify bottlenecks, etc.). Measurement – Security or data breaches.

Training 107

Training Budget Meeting Policies 107

Social, Agile and Transformation

MARCH 8, 2011

I cover topics for Technologists from CIOs to Developers - agile development, agile portfolio management, leadership, business intelligence, big data, startups, social networking, SaaS, content management, media, enterprise 2.0 Business minded, Agile CIO with strong Big Data, Business Intelligence, Search, and Social Networking background.

Agile 100

Agile Social SCRUM Software Development 100

CIO Business Intelligence

JUNE 20, 2023

By integrating security practices into the DevOps process, DevSecOps aims to ensure that security is an integral part of the software development life cycle (SDLC). According to IBM , a single data breach costs $9.4 million USD for an average business in the United States.

Applications 94

Applications Security SDLC Devops 94

CIO Business Intelligence

NOVEMBER 2, 2023

In the ever-evolving realm of information security, the principle of Least Privilege stands out as the cornerstone of safeguarding sensitive data. The supply chain attack zeroed in on a single component of the SolarWinds Orion IT management tool, used by over 30,000 customers, that sent small amounts of telemetry data back to the vendor.

Backup 126

Backup Information Security Security Operating Systems 126

Future of CIO

OCTOBER 26, 2013

Governance as components of the EA , includes business rules, legal requirements (such as data protection), operational requirements rules, financial compliance - so governance in this instance is items that influence the architecture relationships or other components options. * The same relations are between EAG and EA Frameworks.

Architecture 40

Architecture Government Enterprise Enterprise 40

ForAllSecure

JANUARY 21, 2021

Product justifications often focus on qualitative data. However, we find quantitative data to be equally critical for ensuring a full 360 degree examination of a selected technology’s impact across an entire organization. This is the second post in the Fuzz Testing ROI Framework series. Regression testing.

Open Source 52

Open Source Licensing Applications Analysis 52

ForAllSecure

JANUARY 21, 2021

Product justifications often focus on qualitative data. However, we find quantitative data to be equally critical for ensuring a full 360 degree examination of a selected technology’s impact across an entire organization. This is the second post in the Fuzz Testing ROI Framework series. Regression testing.

Open Source 52

Open Source Licensing Analysis Applications 52

ForAllSecure

AUGUST 14, 2019

The company's website was defaced with a leering Yoba face, and the attackers claimed to have stolen some 7 1/2 terabytes of data. The allegations hold that Equifax's failure to take reasonable steps to secure its network led to a data breach in 2017 that affected approximately 147 million people. states and territories.

Security 52

Security Applications Development Financial 52

ForAllSecure

JULY 8, 2021

under a single solution, where it is able to apply data cross-correlation logic (ASOC).delivering Despite being largely outside the SDLC and the last technique to be adopted within appsec programs, he placed his bet on fuzz testing. Mayhem, for example, is able to: Conduct binary analysis of applications (DAST).with

Applications 52

Applications Security Analysis SDLC 52

ForAllSecure

AUGUST 14, 2019

The company's website was defaced with a leering Yoba face, and the attackers claimed to have stolen some 7 1/2 terabytes of data. The allegations hold that Equifax's failure to take reasonable steps to secure its network led to a data breach in 2017 that affected approximately 147 million people. states and territories.

Security 40

Security Applications Development Financial 40

ForAllSecure

AUGUST 14, 2019

The company's website was defaced with a leering Yoba face, and the attackers claimed to have stolen some 7 1/2 terabytes of data. The allegations hold that Equifax's failure to take reasonable steps to secure its network led to a data breach in 2017 that affected approximately 147 million people. states and territories.

Security 40

Security Applications Development Financial 40

ForAllSecure

SEPTEMBER 29, 2020

It's all about, well, how do we know that the device is actually sending out actual data of the sensed environment versus some tertiary way that an adversary is able to trick sensor into falsely transducing information. That’s a lot of sensor data, and therefore plenty of opportunity for mischief. There's going to be a problem.

Research 52

Research Engineering Examples System 52

ForAllSecure

SEPTEMBER 29, 2020

It's all about, well, how do we know that the device is actually sending out actual data of the sensed environment versus some tertiary way that an adversary is able to trick sensor into falsely transducing information. That’s a lot of sensor data, and therefore plenty of opportunity for mischief. There's going to be a problem.

Research 52

Research Engineering Examples System 52

ForAllSecure

SEPTEMBER 28, 2020

It's all about, well, how do we know that the device is actually sending out actual data of the sensed environment versus some tertiary way that an adversary is able to trick sensor into falsely transducing information. That’s a lot of sensor data, and therefore plenty of opportunity for mischief. There's going to be a problem.

Research 52

Research Engineering Examples System 52

CIO Business Intelligence

AUGUST 3, 2022

In today’s data economy, in which software and analytics have emerged as the key drivers of business, CEOs must rethink the silos and hierarchies that fueled the businesses of the past. They can no longer have “technology people” who work independently from “data people” who work independently from “sales” people or from “finance.”

Architecture 139

Architecture Software Software Cloud 139