Thursday 29 November 2007

Jammy idea

I posted an idea about mail in Controlling the inbox, which is not Notes specific, but as we use Notes for email in EY I pinged Ed Brill (a prominent IBM blogger, amongst other things I'm sure - but that's how I know him) with the idea and he suggested putting the idea on IdeaJam.

I've been to the ideajam site before as Ed has mentioned it on his blog in the past, but this was my first use of it. It is absolutely brilliant. Almost every feature I have thought of is already there. The interface is clean and simple.

I want this inside EY to promote innovation.

Tuesday 27 November 2007

Event: Online Information 2007

I'll be attending the Online Information 2007 event next week. I'll be walking the exhibition on Tuesday the 4th and attending Track One on Day 3. Giovanni Piazza from Ernst & Young is giving the keynote for Track Two on that same day, but I get to hear him at EY on Wednesday afternoon.

Monday 26 November 2007

Playing loose with corporate identity

An interesting take on the impact that social networking will have on security in the enterprise.

» Social networking needs identity delegation strategies | Between the Lines | ZDNet.com
Many of these applications ask users to enter their credentials for some other service so that they can provide a Facebook interface. Unfortunately, users are all too willing to do that if the application offers even a small benefit. [...]

Let me give you another type of scenario: more and more organizations are going to online paystubs. You access them with your corporate authentication credentials. Suppose an employee’s spouse is the one who does the bills. Do you really think that your employees won’t share login credentials with their spouse so that they can access the online paystubs? Don’t be naive. [...]

Letting employees and customers share access appropriately without giving them incentives to give away the keys to the kingdom requires better ways of delegating access than sharing passwords. Delegation should be an anticipated interaction model in network applications that we design and build. Unfortunately, many organizations are struggling just to get single sign-on working let alone designing a complicated delegation system into everything. Sit down for a minute and try to design a reasonable, easy-to-use, secure delegation pattern for one application and you’ll see how complicated this can be.

SL - moving on

I blogged in SL - first impressions about my first foray into Second Life. I found this article on Between the Lines informative and resonates with my experience. Below are a few quotes.

I don't intend at this stage to return to SL, in part because I can't see any more to be gained at this stage. I still have my 'ideas' that I plan to explore internally in EY, and perhaps if some of these result in actual events I might pay them a visit. The other reason is that I have inexplicably received a bill for $11 dollars on an account that is supposed to be free. The Linden Labs support site has proven to be intractable and so I've given up. My character will be exterminated in 30 days.


» On getting a Second Life | Between the Lines | ZDNet.com
Many of the “real world” businesses that opened in Second Life are struggling... far, far down in the visitor rankings—deserted, in fact, most of the time. The sites that see the bulk of the traffic are “adult.”

What does seem to work in Second Life is one-off event hosting... But Kelly points out that SL’s very “physicality” (his word) creates as many problems as it solves. For example, if there are a bunch of “people” crowded around the simulated Scion (as might happen in the “real” world), you won’t be able to see it—whereas if you were on a website, you’d be able to see it clearly—along with millions of other people.

I encourage you to experience it for yourself (especially if you plan to pass judgment on it).

Friday 23 November 2007

Controlling the inbox

The benefits of an opt in approach to the information overload conundrum has been one of the arguments underpinning the use of feeds to replace emails. We have been successful here in EY in the UK at keeping the feed reader we rolled out exclusively under the control of the individual. No feeds are enforced and the rollout included only two feeds as samples.

The inbox remains a different story. You cannot control who sends you emails or when. Notes 8 has a nifty indicator that shows the level to which an email is directed at me - if I'm the only recipient, one of a few, cc'd or one of many. However, I still can't get away from those threads where I'm cc'd in and the discussion is of no relevance. Yet, like most mail clients, Notes can trace a threaded conversation.

I can easily create rules to shunt emails into trash (based on the subject), but I thought it would be nice to be able to right-click on a message and say 'Tune out of conversation'. This would create a rule (based on the thread id) that would move any such emails to a configurable location (trash or a folder, potentially marking them as read along the way).

Over time the number of rules may grow to such an extent that performance suffers, so rules of this nature could auto-destruct after a month or two, or when the list grows beyond a certain size.

Sunday 18 November 2007

Event: Microsoft PerformancePoint Server

I'm off to the MS office in Victoria to attend a launch event for the PerformancePoint Server. I am very sad to have missed the big launch event at which Professor Robert Kaplan was the keynote speaker. I'm considering what position this product has in our BI strategy.

Saturday 17 November 2007

SL - first impressions

Every now and then someone will ask about Second Life. Sometimes they're asking if we should be paying it any attention, sometimes what we could be doing. There's been lots written about it and clearly some companies have established a presence. Much like the early days of (external) blogging it is the tech companies taking the lead. Well, I decided the other day that theory only gets you so far and so I dived in to have a look round.

My purpose is not to make friends or to find something I lack in Real Life, I'm quite happy out here. I want to understand how or what businesses like EY can benefit from entering this virtual world. None of the people I was able to engage in conversation were there to do anything by have fun, meet people, chat and dance. Couldn't really find my groove.

I visited Cisco and IBM, amongst others. I was surprised to find that there is some sort of access control mechanism in SL. I haven't researched it, but it appears that objects and whole areas can be locked down so that only certain people can gain access. This in itself leads on to a number of possibilities as one considers the use of SL for business.

In this screenshot taken at the IBM Business Center I could not get to the point indicated by the vertical red laser beam because of the cordon that appears as an invisible wall marked with rows of text reading 'No Entry'.


IBM certainly has put a lot of work into building its SL presence, although I didn't it being used for anything - perhaps that was when the cordon was up. I later visited the same place and the cordon was gone. Wandering around I found some instructions, which I skimmed through, and picked out this quote:
If you are an IBMer, the most important thing to remember about Second Life is that it is not a suitable forum to discuss IBM confidential information. Your presence and interactions in Second Life can be recorded, so don't say anything that you would not say in a public place in real life.
Sage advice to anyone in SL.

This snapshot is the conference theatre at Cisco. Staging events is an obvious use for SL and has been used for many things including famously the performance by Susan Vega. I saw advertised a presentation of Unified Communications by Cisco, but haven't tried to attend.


Besides places and events there are also groups. I didn't really know what to look for so of course I searched for Ernst & Young. Interesting I found the Ernst & Young Consultants Alumni Association. I searched for the other "Big 4" and found a Deloitte Employees Interested In SL group, but nothing discoverable by search from either KPMG or PWC. Nothing I know of from EY leads me to believe the EY group is official or sanctioned, so falls into the category of this blog I guess.

What have I learned from this foray into SL? It's worth the experience even if you change little of your opinion formed from reading of other people's experiences. I certainly have a few ideas that I'll be sharing with people in EY about how we might dip our toe into this world. Have I been hooked? I don't know... time will tell.

Friday 16 November 2007

Hello, my name is Richard...

...and I work for Ernst & Young in the UK.

This isn't particularly relevant as this is my personal blog and I don't post here on behalf of the firm; the disclaimer is not just for show. However, this blog isn't about me, it's about stuff I'm coming across in the IT industry that catches my eye. Obviously, much of what catches my eye does so because of my job at EY.

I have an internal blog that has been running for nearly two years. It was the first internal blog, as far as I know, at EY (there are now many). So why post stuff externally? Well, blogs help to build ties, and, as McAfee recently posted, it is the weak ties that add the most value. By blogging publically I hope that I will build ties with people beyond the boundaries of the firm.

So how does EY feel about me doing this? Well, I guess I'll find out, however, there is no policy expressly forbidding me to do this. I'm making no gigantic leap as a simple search for my name will quickly lead you to my LinkedIn profile where all is revealed anyway.

Certainly, I will not bring harm to the firm by blogging because I am absolutely loving my job. Is there the potential that I will reveal something about what we are doing within EY? Sure there is. But I will choose carefully and continue to post internally when appropriate. However, I want to walk near to the edge of that cliff on the basis that revealing more will build better ties.

I can't claim to be the first blogger to declare openly that he works for Ernst & Young. Rod Boothby of Innovation Creators is one of whom I am aware, although he no longer works for the firm and his blog now says 'one of the big 4', although if you follow on to his personal blog it still says Ernst & Young.

So to fully introduce myself; I work in the Enterprise Architecture Office, which has been in existence for less than a year. The EA Office follows the pattern of a small core team with a wider networked team drawn from across the IT organisation. I feel very strongly that this model is important because it prevents EA from becoming an ivory tower and seen as an obstruction to be avoided.

In future posts I'll write in more detail about the things we have done in establishing EA; our framework, reference architecture and the different roles we perform. If you're on the same journey I look forward to hearing your story.

Tuesday 6 November 2007

Bad day

Being abstract about data

Data abstraction as a key tenet of SOA is a given. Linthicum writes about XAware, an open source product, and it certainly looks attractive. However, his support for Open Source is less easy to swallow; citing "typically much less expensive than... proprietary [tools]" as a reason.

I think Linthicum is dangerously simplifying the situation and, despite being a very keen advocate of open source products myself, I would sound a word of caution. The way I govern our technology standards is by creating an abstract architecture. This abstract architecture is a representation of the objects in the real world. I encapsulate and isolate as far as possible to reduce the complexity of the abstract architecture, and to understand the links between components. This abstract architecture is a representation of the capabilities that we have and underpins our service catalogue. It also tells me what skills are required to support, operate and maintain that capability.

I allow things that are not represented on that landscape IF AND ONLY IF they are isolated, black boxed, and totally invisible as an entity in the abstract architecture. If this can be achieved I don't need to know about it to maintain it, I only maintain its container. (This isolation can be achieved by using a service provider to support the product, effectively outsourcing the support, operate and maintain requirement.)

So look very closely at the open source product. What other components is it introducing into your landscape that you will have to support. As a rule open source will not isolate components, it will expect you to be able to support those elements upon which it is built.

Real World SOA | David Linthicum | InfoWorld | When Data Abstraction Meets Open Source | November 5, 2007 10:12 PM | By Dave Linthicum
XAware provides data abstraction tool that allows the architect to create a logical database before linking existing physical data stores to it. Thus, this allows the architect to work from the design to the implementation, and provides complete independence from the physical instances of data.

Monday 5 November 2007

The standard Microsoft stuff

My initial response on seeing the title and the link in the text to Google Gears was, "Oh no, here goes MS again making up their own thing while the rest of the industry tries to collaborate." But looking below that first flash scan this is clearly an evolution of a lot of work. I remember the SSE extensions to RSS being one of the new things to emerge when Ray Ozzie joined the company - hardly a surprise given his history sync back at Lotus.

I have to say this is a compelling bit of technology, but it scares me stupid. Doesn't anyone realise how disruptive P2P technologies are on the ability to do capacity/availability planning when they're brought in to the network. Where I work we have one P2P product that we use to distribute some large files. It works very well, but it can create some horrible storms. We have had to put in place seed machines in various locations.

» Microsoft delivers first test build of its online-offline sync platform | All about Microsoft | ZDNet.com
Microsoft posted for download on November 4 a first test build of what it’s calling the Microsoft Sync Framework, technology that will allow developers to take their Web services and databases offline.
UPDATE: Mary Jo-Foley just published another article that contains more details.

Dropping the CIO title

There's been a lot of writing about the changing nature of the CIO role and the convergence of IT and the business. Some advocate the redundancy of the role, others an evolution of the sort talked about by Rangaswami of BT...

» CIO Sessions: BT’s JP Rangaswami | Between the Lines | ZDNet.com
at BT we’ve done away with the CIO title at our levels. We call ourselves MDs [Managing Directors] because we’re fundamentally managing directors of certain businesses and the head of BT design overall is actually called a CEO which reflects what the person does. Part of the reason to get rid of the CIO title was effectively to say that we represent disciplines far beyond just was in IT in the past or in IS, that we represent networks, we represent products, we represent processes. What we represent is design so it made sense for us to come together and converge on that title.

Thursday 1 November 2007

Google opens networks

Google announced OpenSocial today and I think I agree with Boyd's assessment below.

/Message: Google OpenSocial: The Open Common Services Approach
What Google is doing is not completely open, since after all it is defining its own APIs -- in collaboration with a collection of interested participants who are collectively interested in countering Facebook's growing hegemony -- but it is more open that Facebook's, certainly.