Reaping the security dividend

Digital disruption is driving boards and executives into realising the value and importance of cyber security, Cisco claims.

Boards and executives have finally got the message about security John Stewart, Chief Security and Trust Officer at Cisco.

For most of the computer era security has been seen as an inhibiter to innovation and speed to market, but now with most businesses finding they face a three year time frame to transform in face of digital disruption Stewart says corporate managments now see security of their products as being a valued feature.

Stewart bases his view on an online survey, Cybersecurity as a Growth Advantage, where Cisco polled 1,014 senior executives with extensive cybersecurity responsibilities in 10 countries and 11 in-depth interviews with senior executives and cybersecurity experts.

From this, Cisco found a third of businesses now sees security as being a competitive advantage.

Digital disruption drives the shift

Stewart puts this down to boards and senior executives realising how widespread digital disruption is, “it’s highly unlikely Weight Watchers saw the disruption coming from Fitbit,” he muses. “In fact it’s hard to see how anyone could have seen that coming.”

As a consequence of these widespread and often unexpected disruptions, corporate leaders are trying to shore up their existing positions against unforeseen competitors by shifting to digital platforms as quickly as they can.

“We have to do digital and if we are going to do digital we have to have strong cybersecurity controls,” says Stewart in explaining why cybersecurity is an important part of this strategy.

Security as a cornerstone

“By making cybersecurity a cornerstone of their businesses, security-led digital organizations are able to innovate faster and more effectively, because they have significantly greater confidence in the security of their digital capabilities,” Stewart says.

Certainly managers are worried about the risks of going digital with Cisco reporting many businesses have put projects on hold due to concerns about security risks, “a lack of cybersecurity strategy can cripple innovation and slow business, because it can hinder development of digital offerings and business models.”

According to Cisco’s findings, seventy-one percent of executives said that concerns over cybersecurity are impeding innovation in their organizations. Thirty-nine percent of executives stated that they had halted mission-critical initiatives due to cybersecurity issues.

Encouraging moves

While the possibility that corporate leaders are taking cyber security seriously is encouraging, that change is yet to be seen in the marketplace, particularly in the consumer Internet of Things market where being first trumps security, design considerations or even basic safety.

The real test for how important cybersecurity really is remains in the marketplace — will customers pay more for secure products?

One sense that in Cisco’s marketplace of enterprise customers where security failures could have expensive, embarrassing and possibly catastrophic consequences, customers will pay more for trustworthy devices. In the consumer field it may well be different.

Probably the most important finding from Cisco’s survey is that businesses are now understanding security has to be designed into products and processes rather than being bolted on as an after thought. If that is true, then we have come a long way.

Similar posts:

  • No Related Posts

Amazon Web Services and the new rules of business

Amazon Web Service CTO Werner Vogels lists the lessons from a decade of AWS operations. These could be the new rules of business.

The one company that has driven both the adoption of cloud computing and the current tech startup mania is Amazon Web Services.

Later this week AWS celebrates its tenth birthday and Werner Vogels, the company’s Chief Technical Officer, has listed the ten most important things he’s learned over the last decade.

The article is a useful roadmap for almost any business, not just a tech organisation, particularly in the importance of building systems that can evolve and understanding that things will inevitably break.

Importantly Vogels flags that encryption and security have to be built into technology, today they are key parts of a product and no longer features to be added later.

Most contentious though is Vogels’ view that “APIs are forever”, that breaking a data connection causes so much trouble for customers that it’s best to leave them alone.

Few companies are going to take that advice, particularly in a world where changing business needs mean APIs have to evolve.

There’s also the real risk for businesses that their vendors will depreciate or abandon APIs leaving key operational functions stranded, this could cause major problems for organisations in a world that’s increasingly automated.

Vogel’s commitment to maintaining APIs may well prove to be a competitive advantage for Amazon Web Services in their competition with Microsoft Azure, Google and an army of smaller vendors.

Werner Vogel’s lessons are worth a read by all c-level executives as well as startup founders looking to build a long term venture, in many ways they could define the new rules of business.

Similar posts:

Cutting customer support

Uber cuts customer service, a worrying move for consumers

One of the greatest mistakes made by companies is cutting customer support. Nothing shows more a management focused on KPIs and financials than reducing its service staff.

According to Buzzfeed, this is what Uber is doing as the company struggles to contain costs and compete in China.

The ironic thing in Uber’s actions is the startup was so successful because in many cities the incumbent taxi operators had a culture of dire customer service.

It may be that having seen Uber win the battles, the poor consumer is about to lose the war for better transportation services.

Should that be the case, then Uber’s customer service woes shows the new generation of tech startups isn’t so immune to the old rules of business after all.

Similar posts:

  • No Related Posts

Collapsing unicorns and business basics

The first tech unicorn to collapse, Britain’s Powa technologies, reinforces business basics for tech startups

UK e-commerce service Powa Technologies, once valued at £1.8 billion went into receivership after the lead US investor called in the £200 million loans it had made to the business.

It turns out most of 1200 corporate clients the company had claimed as clients were actually expressions of interest in the service rather than firm orders.

Powa now has the distinction of being the first of the tech unicorns to go broke – although it’s almost certain 2016 will see many of the companies with private billion dollar valuations join them.

While the focus on Powa’s demise will be the deceased unicorn aspect, the company’s story illustrates some business basics.

The key one is that sales only count when the money is banked, all too often cashflows, profits and valuations are inflated by booking income long before it’s received – if ever.

Another aspect is valuations are not cash in the bank, Powa may have been valued at £1.8 billion but it only had raised £250 million in capital along with a similar amount in loans. This was not enough to keep the business going at what must have been a spectacular burn rate.

While tech startups have unique aspects, the basics of business remain constant; Cashflow is king and adequate capital is essential. These are aspects managers, investors and employees need to watch closely.

Similar posts:

Disrupting professional services

Stripe’s US business registration service shows how professional services companies are under threat

As Irish immigrants, the founders of San Francisco payments company Stripe, John and Patrick Collison, know too well the difficulties of setting up a US based corporation.

So the company establishing Stripe Atlas, a service to help foreign entrepreneurs set up their US presence makes sense and the payments services bundled into the package may also generate business for the brothers.

The Stripe Atlas service also illustrates the challenges facing professional services businesses as the service automates many of the bread and butter tasks that were good earners for lawyers and accountants.

Until recently it was thought those ‘higher level’ occupations would escape disruption, now it appears software will eat the professions as well.

Similar posts:

Thinking differently about Cyber Security

We need to think differently about cyber security in order to protect our networks says a former British intelligence officer.

“I get quite frustrated with the cybersecurity industry” says Andy France, Deputy Director of Cyber Defence Operations at British Intelligence Agency GCHQ. “We have to think differently.”

France was speaking at the Telstra Cyber Security Forum at the company’s Sydney experience centre yesterday where he outlined how organisations are rethinking about protecting their data.

“What we haven’t realised is just like the Bronze Age, the Stone Age, the Industrial Age and the Internet Age, we have to think differently about what that means to in terms of security and privacy. We have to think differently about how we build systems.”

The biggest problem France sees in the industry itself are the lack of skills to build those secure systems, a situation he believes is partly created by the sector’s credentialism gaining certifications is several orders of magnitude more bureaucratic than becoming a fighter pilot.

In contrast the bad guys who France splits into five groups – script kiddies, hacker collectives, crime syndicates, hackers for hire and nation states – have no such concerns about certificates and accreditation.

“You have serial collectors of letters after their names,” he states. “We’re putting an artificial bar against the people with the new thought processes that are going to help us address this problem.”

“It feels like the criteria has been set up to create a nice little market so we can control day rates,” French says, “in a world where we’re screaming out for talent and need people to come along who are interested and challenged by the subject.”

Apart from the trap of credentialism, the real concern for businesses and users should be the integrity of data in France’s opinion. We need to be certain information is accurate, a problem that will be exacerbated as businesses processes are automated around data streams being connected by the Internet of Things.

France suggests three principles should underlie an organisation’s data defences; having systems in place to spot early indications of a problem, obey the five ‘knows’ and understanding your network.

Understanding your network, what France calls the ‘defender’s advantage’, is the most essential task of all for someone protecting their organisation’s data. “Is someone knows your network better than you then that should be a criminal offense,” he states. “To get the defender’s advantage in place you need to understand your network.”

“Technology in itself with not keep you safe.” French says and describes security as being subject to Pareto’s Law where most vulnerabilities are mundane background noise, “we need to have a balance where technology looks after the 80% and we have the people and processes in dealing with the unexpected 20%.”

“It’s certainly not going to get any better,” French warns about the trends for cyber security in 2016. For most companies and system administrators it’s going to be a matter of being alert and having the processes in place to deal with the unexpected.

Similar posts:

  • No Related Posts

Planning a business succession

Dealing with management succession can be struggle for many companies

What happens when your Managing Director of five years standing announces he’s decided to move on?

This was something Xero’s senior management had to deal with when Chris Ridd, the company’s Managing Director for Australia, announced that after five years he had decided to move on.

In interviewing Chris and his successor, Trent Innes, last week for The Australian it was striking just how well the succession process had gone for Xero in dealing with the management change, “It has worked out well, it was our preference to go with an internal candidate,” the outgoing GM told me. “From my perspective it’s always good when you can do that but it doesn’t always work out that way.”

Much of this comes down to Chris putting together a cohesive management team, something he’s quite proud of, “Xero has a huge bench, we have a really talented leadership team. I feel really good about leaving now given that the business has gone from six staff to 295 people, three and a half thousand customers to 265,000.”

“I achieved way more than what I thought I’d be able to do in that role and after five years it seemed like the right time frame to go into something else,” he continued.

Part of his confidence in moving on was his confidence in his successor, “Trent and I go back twelve years at Microsoft,” he told me.

The other part of his confidence was that the company has a clearly defined strategy and business plan that neither he or Trent see changing.

Many companies struggle with changing their senior management and much of that is because the board and executives are in denial that people – even those at the top – will move on to new ventures.

A stable management team, a solid business plan and a realistic view about leadership succession are the keys to successfully managing a change at the top, so far it looks like Xero have managed to pull off a change that many other struggle with.

Similar posts:

  • No Related Posts