1 / 48

Welcome to AIC 2007

Welcome to AIC 2007. SAFETY ANNOUNCEMENT. Ladies and Gentlemen, your attention please.

talen
Download Presentation

Welcome to AIC 2007

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Welcome to AIC 2007

  2. SAFETY ANNOUNCEMENT • Ladies and Gentlemen, your attention please. • There are no tests of the fire alarm system scheduled for today, so if you do hear the fire alarm, which is a siren, or announcements asking you to leave the building, please leave immediately by the nearest available exit. • Staff in High Visibility Jackets will direct you to the assembly point. • Please take a moment to locate the exits around you now. • Thank you.

  3. Matt Deacon Chief Architectural Advisor Microsoft UK

  4. Ed Gibson Chief Security Advisor Microsoft UK

  5. Lord Erroll

  6. Lord Erroll - Merlin Member of the HOUSE of LORDS - an Independent Peer Select Committee on Science & Technology – Personal Internet Security PITCOM Parliamentary Information Technology Committee EURIM European Information Society Group (Director) LASSeO Local Authority Smart Standards e-Organisation APIG All-Party Internet Group (Secretary) E-RA E-business Regulatory Alliance (President) ISSA UK Information Systems Security Association Advisory Board Nominet UK Policy Advisory Board All-Party Group for Entrepreneurship (Vice Chair) Knuru.com www.SecretSommelier.com CRC

  7. Preconceptions What did you expect me to be like?

  8. Merlin

  9. A LORD

  10. I was in Software Development There are 10 kinds of people in the world: • Those who understand Binary • And those who don’t ===================================================== Now I’m in Business Development

  11. Me at my desk in the Lords

  12. What happens to your castle if you get on the wrong side of the Executive Old Slains, blown up in 1595

  13. What I’m going to cover Influences on legislation • Where I’m coming from • Priorities & Issues of Concern • Transformational Government • Globalisation • Professional Qualifications • 4

  14. Influencers and Regulators • EU • CEN TC 224 WG15 PUKE • MSS – SAG • Parliament • Select Committees • EURIM • AP Internet Group • ICT Conferences • MS Architect Insight • Govt. Department • Home Office • DTi • Regulator • OFCOM • Industry Body • Intellect • E-RA

  15. Parliamentary Groups • Select Committees • All-Party Parliamentary Groups • PITCOM, EURIM • APIG (ISPA, ITSPA, EURISPA) • APPG on ID Theft • Parliamentary Office of Science & Technology • Receptions & Presentations • Direct Access

  16. Legislative Process • EXECUTIVE • White paper – Consultation - Draft Bill • PARLIAMENT • Bill goes through both Houses • EXECUTIVE • Statutory Instruments • (Negative or Affirmative Resolution)

  17. WHERE I’M COMING FROM I’m a Crossbench (Independent) Peer c. 760 Lords, nearly 1/3rd Independent, not salaried! ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Sensible regulation is required, - but - I am concerned about • Over-regulation • Increasing power of the Executive 9

  18. Life is to be lived Puritanism is the haunting fear that someone, somewhere may be enjoying themselves Risk Takersvs.Safety & Security Entrepreneurvs.Corporate

  19. The Citizen & The State “We must help citizens - for their own good” ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- LIGHT TOUCH REGULATION -------------------------------------------------------------------------------------------------------------------------------------------------------------------- • Regulations are for your enemies • Laws often fail to prevent what they forbid • It is pointless passing laws that can’t be enforced

  20. Rules cannot control a Complex System • A complex system is not deterministic • An identical set of circumstances will have different outcomes on subsequent occasions • Rules only affect a few nodes and links • The law of unintended consequences • Define boundaries to behaviour • Common Law (British Law)

  21. YOU – I.T. ARCHITECTS YOU HAVE A SERIOUS RESPONSIBILTY You must protect the individual DPA Chinese Walls Abnormal access Unauthorised access Social engineering

  22. GOVERNMENT CONCERNS But first: Who do you mean by “The Government”? Parliament (the legislature)? The Executive (civil service, regulators)? EU (80% of laws stem from EU directives)? 16

  23. Transformational Government Data Sharing Identity Management Shared Services (procurement) Prevention of Crime

  24. Other Issues • Personal Safety on the Internet • Critical National Infrastructure • CMA – Hacker Tools & Pen Testing • RIPA part 3 - Keys • Data Retention (ATCSA) ------------------------------------------------------------------------------------ • Internet Governance • TV Without Frontiers (TVWF) • IP & DRM

  25. Compliance • Sarbanes-Oxley • Basel II • Rome 2 • ISO 27001 • Will there be a SOX equivalent in the EU? How do you make provision for uncertainty?

  26. POLITICAL PRIORITIES Identity is on the political agenda E-Crime is climbing steadily --------------------------------------------------------- Which is more important? 20

  27. What is the purpose of I.D.?-------To help you and keep you safe.To facilitate business. Central Government – CONTROL – Unique I.D. Local Authorities – DELIVERY – Federated I.D. Internet – ASSURANCE – InfoCard certificates

  28. People can be Seduced • Money • Ideals • Social Engineering

  29. GLOBALISATION Web 2.0 & Software as a Service • Location of data store (Patriot Act, RIPA pt3 keys) Mobile working & de-perimeterisation • Flexibility will give competitive advantage • Unavailable Corporate Knowledge is useless 23 Cross-Border data transfers (DPA, MOUs) Walls no longer bound the company

  30. Professional Standards Who decides who should be qualified? • BCS • IISP • ISC2 • ISACA • IET • COMPTIA • ISSA It’s hard to define the qualifications If it’s not the industry, it might be a civil servant

  31. The Citizen & The State They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. (Benjamin Franklin) Timid men prefer the calm of despotism to the boisterous sea of liberty. (Thomas Jefferson) BALANCE

  32. THE ARCHITECT Your Insight will determine the acceptability and success of the interface between • the Citizen • the SME • the Corporate • and Governments Globally 27

  33. Or Merlin Hayor Merlin Errollor Lord Errollor The Earl of Erroll ? e@hay.org 0700 540 2121 www.LordErroll.com www.SecretSommelier.org

  34. Architect Insight Focus Groups The role of the architect

  35. Call yourself an architect? • Can we define what makes us architects? • Can we detect it? • Consistent job titles • End “job title inflation” • Differentiate architects from other senior roles • (eg Technical Consultant and Software Engineer) • Identify future architects better Why?

  36. IEEE 1471-2000 Includes Architects

  37. Organisation and Role Types Strategic Architect Solution Architect Operations Architect Data Architect Web Architect Enterprise Architect Infrastructure Architect Business Architect Network Architect Security Architect

  38. Organisation and Role Types Corporate Strategic Architect Solution Architect Enterprise Architect Infrastructure Architect Consultancy Vendor

  39. Architectural Role Types Strategic Enterprise Infrastructure Solution Corporate Generic IT Architect Consultancy Vendor

  40. Architectural Role Capabilities Strategic Enterprise Infrastructure Solution Generic IT Architect Corporate Consultancy Vendor

  41. Focus group agenda • Session 1 (now) • Questions? • Meet & greet • Start discussions! • Session 2 (Day 1: 18:40 – 19:10) • Continue to focus...  • Session 3 (Day 2: 08:30 – 09:00) • Status quo • Cross-pollination of ideas • Session 4 (Day 2: 14:00 – 14:50) • Quantify, Conclude and Deliver Feel free to meet throughout the day!  (BTW, this is voluntary)

  42. Room Facilitators Room 1 Room 2 • Matt Deacon • Andy James (Solidsoft) • Charles Young (Solidsoft) • Jeremy Palmer • Andrew Macaulay (Capgemini) • Sam Lowe (Capgemini) • Andrea Westerinen • Iain Mortimer Room 3 Room 4 • Mike Lloyd (Carbonflame) • Paul Cross • Richard Godfrey • Ron Jacobs • Beat Schwegler • Simon Thurman

  43. Thank you! • Session 1 (now) • Q & A • Meet & greet • Start discussions!

  44. Thank you! • Session 1 (now) • Q & A • Meet & greet • Start discussions!

More Related