Emerging technologies are poking holes in security

Change management will never be the same.

By David Geer
Sept. 13, 2016

Accelerated change challenges change management, security DevOps and emerging technologies that enable business innovation and opportunities demand fast, frequent change from the enterprise. The speed and regularity as well as the kinds of change challenge change management and ultimately security.

To secure the enterprise in environments of unwieldy change, the business needs to know how each new technology affects change management and the organization’s security defenses.

Organizations can then begin to evolve change management and security to close those gaps and avoid impacts on security.

Emerging technologies such as DevOps, IoT, automation/intelligent software, information technology service partnering, cloud computing and BYOD all straighten out the curves in the race to make changes that propel the enterprise forward.

DevOps merges software development and operations in order to speed deployment of software that immediately works in production. While this is great for usability, change management and security take a hit from adopting DevOps. An example from the payment cards industry shows how much the management aspect of change management can disappear in a DevOps shop.

“One of my clients,” says David King, senior manager, UHY LLP, “literally sends out two to three releases per day, authorizing those in person with the lead programmer holding up their hand and saying 'authorized' and 'deploy' to a decent sized team of developers all sitting in one room. You can imagine that being able to document those approvals is really just a nightmare, let alone trying to manage the information security protocols that go behind that.”

The IoT market is driving swift change by demanding that the industry ramp up the number of internet connected devices very quickly. “As companies move to design new systems and get them to market, they often don’t pay adequate attention to change management requirements,” says Barry Mathews, managing director at Alsbridge.

In the automation or intelligent software space, robotic process automation tools, autonomics tools, and cognitive computing solutions create change inside organizations. Automation impacts change management by forcing the enterprise to figure out what the change will be and how it will affect people, processes and technology, says Mark Davison, director at Alsbridge.

Information technology service partnering, cloud computing, and BYOD all demand fast and frequent change in the enterprise. According to Joanie Walker, principal consultant at TayganPoint Consulting Group, while information technology service partnering adds federated change management requirements, cloud computing adds change management complexities in ITSM and architectural change, and BYOD requires change to address endpoint management strategies for employee and business partner devices.

According to Walker, information technology service partnering challenges change management by requiring the enterprise to ensure that all information technology support staff work under a common change process. Cloud computing, says Walker, challenges change management by demanding that the organization manage all the infrastructure and applications that exist under different architectural models under a common ITSM change process in a coordinated fashion.

1  2  3  Next Page