Archie Reed’s Secure Observations Blog -

Key Management - The Standard is Coming

Security is one of those things that folks often accept as a necessary evil, but turn is sideways and consider it as a straight management problem, and it sometimes starts to make more sense... As an example, consider Key Management. Its taken some time...

Published 02-14-2009 12:16 AM by ArchieReed

HP and Identity Management - Strategy Update 2

Towards the end of May I posted a note that while HP was out of the software business in Identity Management, there was still a clear need for Identity Services across almost any business solution. Over the last few months HP has been refining its security...

Published 09-02-2008 4:52 PM by ArchieReed

NIST RBAC - What goes around...

...comes around. In Sep 2006 I sat on a panel at Digital ID World titled "Are NIST Based Roles the Right Answer?”. I blogged about the session and issues discussed here... I can even point to my 2001 book "The Definitive Guide to Identity Management"...

Published 07-11-2008 12:27 AM by ArchieReed

Filed under: NIST RBAC Identity Management burton group

Virtualization: Five Steps to Safer Virtual Servers

Chris Whitener is HP's Security Strategist. Last month Chris wrote an article in CIO magazine titled Virtualization How-To: Five Steps to Safer Virtual Servers . This was based on a lot of our insights drawn from our customer engagements, our research...

Published 09-03-2008 8:15 PM by ArchieReed

Filed under: virtualization virtual computing security

Virtualization - What's Missing? Part 1

With all the hyper-growth in virtual computing you expect a level of competition between the vendors, but be aware of the trade-offs you make when choosing one vendor over another. Is VMWare truly ahead of the crowd with their vSphere offering, or in...

Published 05-13-2009 8:48 PM by ArchieReed

Filed under: security, cloud, virtual computing, virtualization

Virtualization - Rethink Virtualization in Business Terms

I've been spending a fair amount of time over the last few months looking into the field of virtual computing, with a focus on secure virtualization. It's a huge field with a great deal of market(ing) opportunity, AND a great deal of expectation...

Published 09-03-2008 7:58 PM by ArchieReed

NAC (Network Access Control) - Future Directions...

I've spent some time over the last many months looking at NAC (amongst other things), and think there is a long way to go. The standards are still evolving, vendors are still jockeying for position if not acquisition for the smaller players, and folks...

Published 04-03-2008 8:14 PM by ArchieReed

New blog platform coming next week.

The HP blogs site will be migrating to a new platform over the next week. We expect to be back sometime in the around June 1, so even though I haven't been bloggin' much, I definitely won't be blogging next week, and comments on recent blog entries will...

Published 05-23-2008 10:03 AM by ArchieReed

"Just say no to 'GRC'" - say what?

Unfortunately due to a last minutes change in plans I did not make it to this years Catalyst Conference, so I am working my way through the slides online and chatting with those who did attend. One thing that caught my eye was Bob Blakley's Thursday...

Published 07-11-2008 4:48 PM by ArchieReed

Filed under: GRC identity management

RSA 7-11th Apr - I'll be there, along with the rest of HP's security folks.

Like many of you I'll be racing around the RSA security conference next week... I'll be at the HP stand a bit, ready to talk about NAC, IAM, security in general, and international beer tasting. HP has a large presence, and you should take a look at the...

Published 04-03-2008 8:05 PM by ArchieReed

HP and Identity Management - watch this space...

I didn't blog about HP’s Identity Management strategy at all recently because there are still things being worked on, but now that the first stage of HP's Identity Management partnering strategy has been announced ( HP and Novell Announce Migration Program...

Published 05-23-2008 9:59 AM by ArchieReed

Cloud Security - Key Risks for Cloud Computing

The cloud is a means by which global class, highly scalable and flexible services can be delivered and consumed over the internet through an as-needed, pay-per-use business model. This is one of HP’s core definitions for cloud computing. For more...

Published 05-28-2009 8:27 PM by ArchieReed

Filed under: security, cloud, identity management, GRC

NAC (Network Access Control) - Some Best Practices #1

A few thoughts (not comprehensive) as you review the NAC capabilities available today, and consider preparing for the changes and additions to NAC requirements going forward: Standards Choosing one single standard today is a challenge given the core variants...

Published 02-26-2008 4:09 PM by ArchieReed

Interop 2008 Las Vegas - Disconnects with the NAC Interop Lab

I spent time at Interop Las Vegas (Apr 27 – May 2) a couple weeks ago, including attending the NAC day on the Monday which I’ll comment on separately. One thing strikes me is that NAC is still a jumbled market with this being an obvious hook for many...

Published 05-15-2008 1:54 PM by ArchieReed

Cloud Security – HP’s CEO finds cloud computing – vague, unsecure, what?

HP's CEO, Mark Hurd, took the stage today as a keynote speaker at Gartner's Symposium . Out of the gate we see the headlines such as " HP's Hurd dings cloud computing, IBM " (CNET) and " HP's Hurd: Cloud Computing Has its...

Published 10-20-2009 11:01 PM by ArchieReed

Filed under: GRC identity management, security, cloud, GRC

Archie Reed’s Secure Observations Blog

Syndication

Recent Posts

Tags