As we get closer to the holiday season, we find ourselves considering the distinction between want and need in our everyday lives. It brings to light decisions that budget owners need to make through-out the year. How do I get more value from my FIM or SCM program? What new innovations in the security space could help me deliver more value, and which are merely shiny new objects? Do they actually solve my problem? Do they improve my ability to deliver foundational security controls?

Here are some things that you might want to consider:

  • You’ve made an investment with your current incumbent; has the investment in the relationship been sustained on both sides? If not, why? If you do not know who your Account Manager is, then reach out through your support contacts, and they can connect your with the right individual. I know that you are likely paying maintenance on the product, and being asked to chase your Account Manager might seem ludicrous, but a 10-minute phone call could prevent a costly rip and replace, and it is a worthy bit of diligence.
  • Are you staffed to fully utilize the capabilities of your existing solution? You may find that outsourcing the day-to-day management and infrastructure responsibilities to service offerings like ExpertOps will enable you to leverage more advanced capabilities and focus on automating the workflow associated with change and adherence to policy.
  • Timing is important. Do you have an upcoming audit or some other near-term event that should push out a technology, staffing, or outsourcing decision?
  • As an amateur horologist (I enjoy mechanical watches), I can’t tell you the number of times that I’ve re-assembled a watch movement to an exacting standard only to find out that I missed some small detail that really matters. However, after working on (Read more...)