<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Enterprise 2.0 Insecurities</title>
	<atom:link href="http://andrewmcafee.org/2006/11/enterprise_20_insecurities/feed/" rel="self" type="application/rss+xml" />
	<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/</link>
	<description>The Business Impact of IT</description>
	<lastBuildDate>Sun, 14 Mar 2010 01:50:57 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.1</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Jed Sundwall</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2894</link>
		<dc:creator>Jed Sundwall</dc:creator>
		<pubDate>Wed, 10 Sep 2008 17:52:46 +0000</pubDate>
		<guid isPermaLink="false">#comment-2894</guid>
		<description>The great takeaway from this, for me, is that the security risks attributed to E2.0 are typically overstated, and ignore the relative stability of the status quo (&quot;phones, faxes, copiers, USB drives, email, and IM&quot;).

And &quot;training and explicit policies about appropriate and inappropriate contributions&quot; have always been useful, but they are imperative now. We&#039;re still working to identify and codify best practices around public/online sharing, and I imagine we&#039;ll be learning (plenty of hard) lessons for years to come.</description>
		<content:encoded><![CDATA[<p>The great takeaway from this, for me, is that the security risks attributed to E2.0 are typically overstated, and ignore the relative stability of the status quo (&#8221;phones, faxes, copiers, USB drives, email, and IM&#8221;).</p>
<p>And &#8220;training and explicit policies about appropriate and inappropriate contributions&#8221; have always been useful, but they are imperative now. We&#8217;re still working to identify and codify best practices around public/online sharing, and I imagine we&#8217;ll be learning (plenty of hard) lessons for years to come.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dog lover</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2893</link>
		<dc:creator>dog lover</dc:creator>
		<pubDate>Tue, 28 Aug 2007 08:43:13 +0000</pubDate>
		<guid isPermaLink="false">#comment-2893</guid>
		<description>as suggested new social bookmarking sites have a private option in which only allowed individuals are allowed to view your bookmarks..</description>
		<content:encoded><![CDATA[<p>as suggested new social bookmarking sites have a private option in which only allowed individuals are allowed to view your bookmarks..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Puneet Gupta</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2892</link>
		<dc:creator>Puneet Gupta</dc:creator>
		<pubDate>Thu, 01 Mar 2007 19:20:35 +0000</pubDate>
		<guid isPermaLink="false">#comment-2892</guid>
		<description>&quot;Let me end this post by suggesting a thought experiment.  Imagine two competitors, one of which has the guiding principle &quot;keep security risks and discoverability to a minimum,&quot; the other of which is guided by the rule &quot;make it as easy as possible for people to collaborate and access each others&#039; expertise.&quot;  Both put in technology infrastructures appropriate for their guiding principles.  Take all IT, legal, and leak-related costs into account.  Which of these two comes out ahead over time?  I know which one I&#039;m betting on.&quot;

Prof. McAfee, we at Connectbeam are betting right along side with you.
However, for enterprises, we feel the choice may not be as binary as:
1. keep security risks and discoverability to a minimum
2. make it as easy as possible for people to collaborate and access each others&#039; expertise

We feel a combination of these is the sweet spot for enterprises. We are seeing this increasingly validated at Connectbeam.</description>
		<content:encoded><![CDATA[<p>&#8220;Let me end this post by suggesting a thought experiment.  Imagine two competitors, one of which has the guiding principle &#8220;keep security risks and discoverability to a minimum,&#8221; the other of which is guided by the rule &#8220;make it as easy as possible for people to collaborate and access each others&#8217; expertise.&#8221;  Both put in technology infrastructures appropriate for their guiding principles.  Take all IT, legal, and leak-related costs into account.  Which of these two comes out ahead over time?  I know which one I&#8217;m betting on.&#8221;</p>
<p>Prof. McAfee, we at Connectbeam are betting right along side with you.<br />
However, for enterprises, we feel the choice may not be as binary as:<br />
1. keep security risks and discoverability to a minimum<br />
2. make it as easy as possible for people to collaborate and access each others&#8217; expertise</p>
<p>We feel a combination of these is the sweet spot for enterprises. We are seeing this increasingly validated at Connectbeam.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John Tropea</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2891</link>
		<dc:creator>John Tropea</dc:creator>
		<pubDate>Mon, 11 Dec 2006 03:40:25 +0000</pubDate>
		<guid isPermaLink="false">#comment-2891</guid>
		<description>What about using social bookmarks like Jots, Magnolia, Connotea (I think), don&#039;t all these have group features, so only members from the group will see the entries.

I&#039;m sure you can leverage these tools to fit your scenario</description>
		<content:encoded><![CDATA[<p>What about using social bookmarks like Jots, Magnolia, Connotea (I think), don&#8217;t all these have group features, so only members from the group will see the entries.</p>
<p>I&#8217;m sure you can leverage these tools to fit your scenario</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrew Scherer</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2890</link>
		<dc:creator>Andrew Scherer</dc:creator>
		<pubDate>Mon, 04 Dec 2006 02:31:48 +0000</pubDate>
		<guid isPermaLink="false">#comment-2890</guid>
		<description>Dennis, I was reflecting having been burned, I guess it sounded too draconian - I still have faith. Our chairman actively wants to explore live chats, blogs and wikis in the full light of day. I think we have a great opprotunity and I want our lessons brought to bear on future implementations. 

I also need to encourage dialogue with the legal and compliance communiteies to show how these tools are little different  from the risk inherent in email - it&#039;s essentially unfettered from a technlology deployment perspective and has proven to be effectively goverened by our communication and confidentiality policies.

Cheers,
Andy</description>
		<content:encoded><![CDATA[<p>Dennis, I was reflecting having been burned, I guess it sounded too draconian &#8211; I still have faith. Our chairman actively wants to explore live chats, blogs and wikis in the full light of day. I think we have a great opprotunity and I want our lessons brought to bear on future implementations. </p>
<p>I also need to encourage dialogue with the legal and compliance communiteies to show how these tools are little different  from the risk inherent in email &#8211; it&#8217;s essentially unfettered from a technlology deployment perspective and has proven to be effectively goverened by our communication and confidentiality policies.</p>
<p>Cheers,<br />
Andy</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dennis Howlett</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2886</link>
		<dc:creator>Dennis Howlett</dc:creator>
		<pubDate>Thu, 30 Nov 2006 07:19:06 +0000</pubDate>
		<guid isPermaLink="false">#comment-2886</guid>
		<description>I&#039;m (sadly) with Andrew Scherer on this. It&#039;s important to remember that many companies have real regulations to deal with. It was one of the big spurts behind DM/KM. 

These were fierce projects that imposed a huge amount of control. In some industries, that&#039;s plain necessary - like pharma. 

Suddenly relaxing those &#039;rules&#039; based systems overnight could be catastrophic without extremely careful planning and execution.

So while I wouldn&#039;t go as far as Andrew, I would pilot somewhere I thought relatively safe AND behind the firewall AND with some degree of moderation but with a firm feedback loop engaging employees so that they gradually feel more responsible AND valuable. That itself requires planning, a series of milestones mapping out and rewards/sanctions in place that are clearly understaood and agreed by all.

In fact - go one better and get employees to figure that out as part of the implementation process. 

I think it&#039;s important to remember that the real value starts from inside the business so there is no need to be taking unnecessary risks. It explains why the likes of iUpload and Blogtronix are getting a lot of attention right now. They have that fine grainerd control.</description>
		<content:encoded><![CDATA[<p>I&#8217;m (sadly) with Andrew Scherer on this. It&#8217;s important to remember that many companies have real regulations to deal with. It was one of the big spurts behind DM/KM. </p>
<p>These were fierce projects that imposed a huge amount of control. In some industries, that&#8217;s plain necessary &#8211; like pharma. </p>
<p>Suddenly relaxing those &#8216;rules&#8217; based systems overnight could be catastrophic without extremely careful planning and execution.</p>
<p>So while I wouldn&#8217;t go as far as Andrew, I would pilot somewhere I thought relatively safe AND behind the firewall AND with some degree of moderation but with a firm feedback loop engaging employees so that they gradually feel more responsible AND valuable. That itself requires planning, a series of milestones mapping out and rewards/sanctions in place that are clearly understaood and agreed by all.</p>
<p>In fact &#8211; go one better and get employees to figure that out as part of the implementation process. </p>
<p>I think it&#8217;s important to remember that the real value starts from inside the business so there is no need to be taking unnecessary risks. It explains why the likes of iUpload and Blogtronix are getting a lot of attention right now. They have that fine grainerd control.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrew Scherer</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2889</link>
		<dc:creator>Andrew Scherer</dc:creator>
		<pubDate>Tue, 28 Nov 2006 15:43:28 +0000</pubDate>
		<guid isPermaLink="false">#comment-2889</guid>
		<description>Being in a global financial services organization that is at the doorstep of contemplating how to best leverage wikis, blogs and collaboration we can&#039;t help but wonder how to manage this balance. The regulatory environment is where we live, and for good cause. Yet the need to collaborate across the globe more effectively is greater than ever. 

I want to but can&#039;t agree about the inherent ability of people to behave themselves. I&#039;ve seen too many things go wrong when a laissez faire approach is taken, I&#039;ve had to take down systems and seen colleagues disciplined for the actions of their reports. Perhaps there&#039;s a tipping point where scale requires a greater degree of control or focus to keep order about the house?</description>
		<content:encoded><![CDATA[<p>Being in a global financial services organization that is at the doorstep of contemplating how to best leverage wikis, blogs and collaboration we can&#8217;t help but wonder how to manage this balance. The regulatory environment is where we live, and for good cause. Yet the need to collaborate across the globe more effectively is greater than ever. </p>
<p>I want to but can&#8217;t agree about the inherent ability of people to behave themselves. I&#8217;ve seen too many things go wrong when a laissez faire approach is taken, I&#8217;ve had to take down systems and seen colleagues disciplined for the actions of their reports. Perhaps there&#8217;s a tipping point where scale requires a greater degree of control or focus to keep order about the house?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Innovation Creators</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2895</link>
		<dc:creator>Innovation Creators</dc:creator>
		<pubDate>Mon, 27 Nov 2006 23:35:33 +0000</pubDate>
		<guid isPermaLink="false">#comment-2895</guid>
		<description></description>
		<content:encoded><![CDATA[]]></content:encoded>
	</item>
	<item>
		<title>By: Raj Kumar</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2888</link>
		<dc:creator>Raj Kumar</dc:creator>
		<pubDate>Mon, 27 Nov 2006 19:42:59 +0000</pubDate>
		<guid isPermaLink="false">#comment-2888</guid>
		<description>The concept of Â‘emergenceÂ’ eloquently describes the evolution of intelligence on the internet. There was nothing to begin with. Then Web 2.0 brought about a cumulative intelligence that works because of the size of the net. In the enterprise we are aware of a higher form of intelligence in operation Â– collective intelligence. It has to be developed on each event. Nonaka conceived the spiral of knowledge (http://www.dialogonleadership.org/Nonaka-1996cp.html) to evolve the intelligence. The collective memory (as created by accessible repositories) and cumulative intelligence (as returned by search engines) are its components. Creative Destruction in context would be another name for the spiral.

AARF has made great progress in using IT for cumulative intelligence and the collective memory. It is difficult to believe the spiral is possible with SLATES. Till IT can make the spiral possible the virtual space of the enterprise will remain virgin. 

Is Security negotiable? Likely not. IT has to protect the space else its creation will be incomplete.</description>
		<content:encoded><![CDATA[<p>The concept of Â‘emergenceÂ’ eloquently describes the evolution of intelligence on the internet. There was nothing to begin with. Then Web 2.0 brought about a cumulative intelligence that works because of the size of the net. In the enterprise we are aware of a higher form of intelligence in operation Â– collective intelligence. It has to be developed on each event. Nonaka conceived the spiral of knowledge (<a href="http://www.dialogonleadership.org/Nonaka-1996cp.html" rel="nofollow">http://www.dialogonleadership.org/Nonaka-1996cp.html</a>) to evolve the intelligence. The collective memory (as created by accessible repositories) and cumulative intelligence (as returned by search engines) are its components. Creative Destruction in context would be another name for the spiral.</p>
<p>AARF has made great progress in using IT for cumulative intelligence and the collective memory. It is difficult to believe the spiral is possible with SLATES. Till IT can make the spiral possible the virtual space of the enterprise will remain virgin. </p>
<p>Is Security negotiable? Likely not. IT has to protect the space else its creation will be incomplete.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Niall Cook</title>
		<link>http://andrewmcafee.org/2006/11/enterprise_20_insecurities/comment-page-1/#comment-2887</link>
		<dc:creator>Niall Cook</dc:creator>
		<pubDate>Mon, 27 Nov 2006 10:15:22 +0000</pubDate>
		<guid isPermaLink="false">#comment-2887</guid>
		<description>Andrew, these are real risks to companies but you are right to make the case for a laid-back approach. I think that&#039;s fine when there are no suitable alternatives, but in this particular case they are plenty of commercial and open source options that would have allowed AARF to get the benefits from tagging AND keep their tags private. Just because a service is popular in the consumer space, doesn&#039;t mean you shouldn&#039;t look at other options in the work space.</description>
		<content:encoded><![CDATA[<p>Andrew, these are real risks to companies but you are right to make the case for a laid-back approach. I think that&#8217;s fine when there are no suitable alternatives, but in this particular case they are plenty of commercial and open source options that would have allowed AARF to get the benefits from tagging AND keep their tags private. Just because a service is popular in the consumer space, doesn&#8217;t mean you shouldn&#8217;t look at other options in the work space.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
