Select Articles
This page is a collection of links to 3rd party articles that reference empirical evidence or data focused content that aligns
with the scope of ITPI research and benchmarking.
| Article | Date Posted | Source |
| Accurate Configurations – Why Technology Alone Isn’t the Answer | 03/01/07 | Confguration |
| Description: Fundamentally, what many IT organziations don’t realize is that their challenge isn’t with Configuration Management. It is with Change Management. Change Management is the process by which an organization implements the necessary procedures to control changes to production and thus manage risk. | ||
| Interesting list of Causes of Human Errors | 02/15/07 | Human Error |
| Description: Another good article from our Visible Ops author George Spafford. The fourth annual CompTIA study on security breaches shows that 60% can be attributed to human error. If we want to help safeguard the organization and its goals, then it is essential to understand what causes human error. | ||
| Treasure Trove of articles from EDPACS | 02/10/07 | Audit Control |
| Description: Last month Dan Swanson became the editor of EDPACS. Until March 5th they have removed the subscription access controls so everyone can review what a subscriber to EDPACS actually receives. This includes access to 10 years worth of articles at: | ||
| Visible Ops author George Spafford clarifies link between Change and Config | 02/07/07 | Change |
| Description: If production is changing and nobody knows about it, then this is a change management failure — not a configuration management failure. | ||
| Risk Control Group impact on IT | 02/06/07 | Risk |
| Description: Risk control groups (RCGs) are a powerful voice in many organizations reacting to change in the risk landscape with recommendations for both corporate policy and IT. | ||
| Interesting way to address the "human" side of phishing and security | 01/30/07 | Security |
| Description: Some recent research has shown that 60% of security issues are caused by employees and their [bad] habits. With all the increasingly nasty phishing schemes - that is not a suprise. However, I haven't seen many creative and inexpensive ways to address this - until I read this compelling article. Could this simple approach be applied to "training" IT folks that are caught making changes outside the change process? | ||
