Smarter Gov Tech, Stronger MerITocracy
This page is not built out yet. If you are seeing this page, please contact an administrator.

Government IT Procurement – Storm on Plain Sailing?

Has government procurement lost its rudder completely? Stand aside the $500 hammer and golden toilet seat – seems IT procurement is all at sea.

Anchors Aweigh?

The Navy’s ahead of the wave. Fearful of protests by bidders forcing it to walk the plank, the Navy awarded its $5.3 billion Seaport-E to 3,752 companies. The sailors’ll be drowning in proposals, and the contractors’ll be thirsting for revenue.

All at Sea?

How does the Navy torpedo IT cost from $286 million to $2.1 million? NMCI/NGEN price for SPAWAR Pacific email – $286 million. Price shopped to DISA, $55.3 million – but looking through the telescope and not seeing a solution on the horizon this decade. Dell wins with COTS cloud commercial Microsoft hosted email for $2.1 million. Now that’s plain sailing. Evidence that cloud means a hole in the boat for IT contractor revenue?


Top 20 to Watch?

But let’s look past these two vessels to consider the full horizon – and beyond the horizon. BGOV and Deltek recently came out with their respective FY 2015 lists of the top 20 Federal IT programs. These are the aircraft carriers, although Deltek’s has a bigger landing strip at $206 billion vs. BGOV’s $136 billion. To be sure, these are no trifling sums. Place BGOV’s lightweight vessel next to national economies to put it in perspective. The Top 20 programs have a combined value that exceeds Bangladesh’s GDP, weighs in at just a hair less than Iraq’s, and comes in at more than half Israel’s.

Cloud in the Armada?

On a flight last weekend I took a look at the data. Here’s what I found. First observation – no explicit cloud programs, although they’ll likely sneak into many of the solutions. No place for cloud in mission-critical infrastructure or apps?

BGOV Boatload

But let’s focus on what’s here, rather than what’s not. Here’s the breakdown of the mega contracts. It’s green gov at the head of the fleet. No, that’s not eco-friendly. Marching at the head of the flotilla is the U.S. Army, with three programs worth $69 billion. No fatigue here. Then it’s a long fall back to the number-two contract – Defense Health Agency’s $20 billion D/SIDDOMS IV.

Stern to stern in the third berth are DISA and VA at $12 billion apiece. GSA sits next in the lineup with two programs valued at $9 billion. Then it’s DHS with three programs valued at a total of $5 billion, with the Air Force right on its wing tip – it has three programs with a combined value of $4.3 billion. Then it’s Navy, HHS, SOCOM – at $1 billion each, followed by the Army Corps of Engineers and DOT, with $0.9 and $0.8 billion, respectively.

Any Port in a Storm?

Mapping BGOV to Deltek is not exactly 20/20. Only six of the BGOV programs appear on the Deltek top 20. Interestingly, drilling down on those six programs, the two analysts attributed different values for the same contracts – to the sum tune of $8.2 billion. BGOV is more optimistic. It values Army’s ITES-3 at $25 billion, while Deltek values it at only $20 billion. BGOV puts VA’s whopper at $12 billion, where Deltek shorts it at just $9 billion. They trade places on Army Encore III – Deltek values the program at $12.2 billion, with BGOV placing it at only $12 billion. Further, BGOV attributes with greater fidelity, attaching Encore III to DISA and D/SIDDOMS IV to DHA. Deltek maps them both to DoD.

Lots of differences between the numbers but one thing is sure – there’s still lots of money in Fed IT. That said, this could be the calm before the storm. The 2014 bipartisan budget agreement smoothed the waters for 2014 and 2015, but sequestration took $1 trillion out of the budget over a 10-year period – that considered with clouds on the horizon – and it could be there’s a storm brewing over the horizon.

Feeling sea sick? Grab the Dramamine. You may need it. How do you see the future for Fed IT funding?

Happy Halloween: APTs Will Scare the #&!^ Out of You

Remember the old days?

Agencies protected networks and data by guarding their perimeter and that was enough. Agencies relied on anti-virus software. There was none of this insider threat stuff. No PLA. No APTs. Feds got a raise every year, no one knew what sequestration was, and flip phones were awesome.

Times have changed.

Zombie Attack
Cybersecurity isn’t optional any longer. Detection and remediation alone don’t cut it. APTs are coming at Federal agencies in waves.

“Detection represents a passive approach, and agencies that rely on detection and remediation alone – without an active prevention and resilience strategy – run the risk of having the weakest cybersecurity,” according to a new white paper. “That makes them ripe for attacks. Remediation efforts often rely on external and reactionary incident response teams that cost more. These teams become necessary when government focuses more on detection and not prevention and resilience. Detection and remediation are important, but they can’t represent an agency’s only defense strategy.”

Beware of the Goblins
Agencies are a prime target for aggressive nation states. That’s because agencies collect valuable data on everything from the electrical grid, to nuclear plants, industry data, and economic policy. Federal research also is an attractive target for other governments that would rather poach our intellectual property rather than spend the time and money to compile their own.

Even the Justice Department has shuffled its national security team to better combat state-sponsored hackers, according to the National Journal. Last week the department created a new senior level post for cybersecurity issues.

“While our top priority will always be combatting terrorism, we must also sharpen our focus and increase our attention on the emerging threats of economic espionage and proliferation,” said Assistant Attorney General John Carlin, the head of the national security unit.

Outrunning the Monsters
Prevention and resilience are crucial, but too few agencies are embracing this proactive approach, according to the report.

Giving up on prevention makes an agency an easy target. Having a stronger cybersecurity posture than other agencies will cause the adversaries to overlook you in favor of the low-hanging fruit. In other words, don’t be the slowest runner in the race.

Less Trick, More Treat
So what can agencies do? It’s important to rely on a range of tools to recognize malicious patterns within their network. In a world of unrelenting APT attacks, these techniques are increasingly important, according to the report:

  • Sandboxing
  • White listing only authorized applications
  • Segmenting the network to ensure resilience, which limits exposure for any adversary who gets in and tries to move laterally
  • Using a platform-based approach, particularly for APTs and zero-days and comprehensive protection of network-to-data center-to endpoint
  • Selectively decrypting Secure Sockets Layer (SSL) traffic
  • Taking note of traffic going to unregistered domains
  • For mobile users, requiring a VPN to the government security platform and using the platform’s Mobile Device Management to protect the device and the network assets
  • Embracing Continuous Monitoring also represents an important new approach to improve cybersecurity

Read the full report here. Are there steps your agency has found useful to guard against APTs? Let us know.

alt

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Is Cloud an Anagram for Cold?

There’s an arms race going on like we haven’t seen since the Cold War: HP, IBM, Amazon, and Google.  They’re knocking together data centers quicker than the price of cloud computing can plummet.  The price of Amazon’s web services has fallen by about 50% every three years since 2006.  Where will it end?  Are the new entrants pushing the traditional players into mutually assured self-destruction?  What happens to the customer if the provider goes up in smoke?

What’s the price for dot.com stocks?

Anybody else afraid the emperor may be naked?  How quickly will Nero catch a chill if the cloud condenses?  Oh, and I know, cold is only an anagram for cloud if U are in it.

Comey Goes Prime Time

FBI Director James Comey took the Feds’ cybersecurity message to prime time TV – not a bad way to reach an audience. In the wake of the JP Morgan breach, Director Comey used 60 Minutes as a platform to warn of the growing “epidemic” of cyber crime.

Director Comey pointed his finger directly at the Chinese. He called them prolific hackers, but also characterized them as unsophisticated – like drunken burglars. So he has a sense of humor, but what about timing?

Lights, Camera, Action
Too bad the agency couldn’t leverage the prime time spotlight to deliver its cybersecurity message after the breach at Home Depot, which we learned about September 18. Or Community Health Systems (August 18). Or eBay (May 21). Or Neiman Marcus (January 10). Or Target (December 19).

Better late than never?

That’s Offensive
House Intelligence Committee Chairman Mike Rogers also spoke up about cybersecurity during a recent public forum, suggesting we go on the offensive – launch attacks – to protect data and networks.

His remarks weren’t on prime time TV, but Rogers said “you’d be surprised at how far we are to an offensive policy.” Feds would have to develop a policy outlining when attacks should occur and who attacks should target before initiating any attacks, according to the congressman.

alt

Unfinished Business
Congress can boost cybersecurity in other ways. Legislation to protect networks remains in limbo. Congress could approve FITARA and CISA, the information-sharing measure.

Agencies could speed up hiring to address the personnel shortage. The FBI and Pentagon alone want to hire 6,000 people with cybersecurity skills in the next two years. Lots of things have to fall into place to improve Federal cybersecurity. DHS wants to help, too, and now they have the freedom to scan Federal networks without asking.

Let’s Talk
At the next Cyber Security Exchange, numerous distinguished speakers will address the cybersecurity capability of Federal agencies and discuss:

  • What can agencies do to help monitor, analyze, and prevent cyber-attacks?
  • What platforms can help agencies reduce time-to-threat response?
  • What solutions have agencies put in place to minimize impact?
  • How can agencies protect their organization – from mobile workers to the core cloud-enabled data centers – from cyber-attacks

Government attendees can register here to join us. Feel free to share your thoughts by tweeting about it during the session. Use the @MeriTalk handle so all of our friends see your insights, too. Maybe we can get 60 Minutes to attend. And we can talk about Congressman Rogers’ proposal to go on the attack. Should we get more offensive? Would it work?
Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Why Go to Work?

Every day you shave or powder your face in the mirror, put on a smile, and head out to make the doughnuts. But, what if you could get paid for doing nothing? And not just get paid, but earn millions? That’s precisely what fraudsters are doing every day in America. And, who are the dummies paying these deadbeat crooks? Here’s the punch line – it’s you and me, my friend. Individuals and organized crime are cleaning up stealing from Uncle Sam – and all of us.

Calling in Sick?

As America ages, we’re addicted to ever more expensive healthcare. We spent 17 percent of GDP on tests and remedies – that’s $2.7 trillion – just last year. Uncle Sam spends $415 billion and $600 billion each year on Medicaid and Medicare, respectively. In 2012, Donald Berwick, one time head of CMS, examined the patient for fraud fever. His diagnosis, the disease adds $98 billion to Medicare and Medicaid – and $272 billion to national healthcare costs.

How? Everything from billing for phantom wheelchairs and pushing prescription drugs on the street to Lazarus’ ambulance use and good-old-fashioned overbilling.

Tax Return?

Not to be outdone, tax scammers are turning the IRS into an ATM. Hang onto your hat – or wallet – for these stats. Each year, the IRS receives 145 million tax returns – 75 percent want refunds. TIGTA estimated that the IRS paid refunds to 1.5 million fraudsters in 2011. The top five domestic addresses received 4,900 refunds. Heavens above, IRS paid 655 refunds to a single address in Lithuania. Between January and September of last year, IRS identified 170,000 fraudulent returns filed by prison inmates.

How? Identity theft – filing tax returns for innocent victims, and collecting the refund checks.

Welcome to Miami?

Miami is the healthcare and tax fraud capital. It generates fake tax returns at 40 times the national average. Is it the sunshine or the orange juice? Neither, Miami’s hot because of the old folks. Lots of medical bills, loads of folks who have a social security number but do not file a tax return, and yes, lots of dead people.

What’s This to IT?

The $80 billion Federal IT budget is dwarfed by fraud. Further, Capitol Hill understands and cares about fraud. Folks like Gary Cantrell, an investigator at HHS, have demonstrated the power of analytics to ferret out fraudsters – returning $8 for every $1 invested. But, in D.C. it’s not about RoI, it’s about Return on Political Capital – RoPC.

Rather than sell the cost savings of cloud, perhaps we should focus on the ability to level stovepipes and bring data together across the government to catch cheats? There is no national repository for Medicaid data, which lives in each state. Put Federal apps in the cloud and question farming will yield new insights and massive savings.

Stealing From Uncle Sam

Want to learn more? Attend our Stealing from Uncle Sam: Fraud, Waste, & Abuse forum at the Newseum on November 19 – don’t worry, this isn’t a how-to tutorial. Join Senator Carper (D-De), Chairman of the Senate Homeland Security and Government Affairs Committee; Gary Cantrell, Deputy Inspector General for Investigations at HHS; Dean Silverman, Director, Office of Compliance Analytics at IRS; and Marshall Presser, Field Chief Technology Officer at Pivotal.

Free for government – this program’s a steal. Register today.

What do you think the governement should do with the $272 billion stolen in healthcare cost?

*Special thanks to the Economist Magazine for the inspiration and many of the data points.

High Stakes

Life’s a gamble, but there’s no need to take a risk with IT networks.

Feds can double their savings by leveraging consolidation, virtualization, cloud computing, remote access, and infrastructure diversification. Now that’s hitting the jackpot. Despite the benefits, Feds have made only modest investments to modernize networks.

A report by MeriTalk highlights the critical role of the network and identifies changes agencies must make to maximize IT savings.

We break it down for you with our own one-armed bandit. Plug in your numbers to find out if your agency can do more.

Leaving Money on the Table
The potential windfall is dramatic. By fully leveraging all five initiatives, network managers believe they can save 24 percent of their IT budgets, or approximately $19.7 billion each year. However, two thirds of respondents say current networks are ill-equipped to support these initiatives.

Consolidate and Cash In
Feds say consolidation offers the greatest savings opportunity, but they are not even halfway toward reaching their potential. Only 16 percent of organizations have fully deployed consolidation methods. Reducing IT assets by using more efficient technologies will significantly decrease operating costs.

Betting on Virtualization
Feds are missing out on another $2.7 billion in potential savings: just 14 percent of agencies have fully deployed virtualization services. While virtualization improves network, server, and storage capabilities, only 47 percent of agencies haven’t even begun to implement virtualization. Our one-armed bandit doesn’t lie. Plug your numbers into the slot machine to see how much your agency is saving now and how much it could save.

Increase Your Odds with the Cloud
Timid cloud adoption is costing Feds an estimated $3.2 billion annually. Surprisingly, only 9 percent of organizations have fully employed cloud computing. Cloud computing helps agencies see new business opportunities, innovate faster, and increase the odds for a more efficient business plan.

Reap Your Winnings Remotely
Almost a third of organizations remain wary about remote access capabilities. But because of its smooth implementation, Feds have captured more than 70 percent of its savings.

Know When to Change Hands
While Feds agree additional vendor competition would reduce IT acquisition, service, and maintenance costs, few are fully diversified. Half of all respondents say their agency hasn’t diversified their infrastructure at all to this point.

A strong network leads to opportunities to save. But without an improved infrastructure, organizations have no foundation to improve capacity, connections, or reliability.

See whether leveraging consolidation, virtualization, cloud computing, remote access, and infrastructure diversification can help you hit the jackpot here. Don’t worry. We won’t talk. What happens in Vegas stays in Vegas. Let us know how you did and if these initiatives are working for your agency.

And read the full report here.

Slots may be fun, but poker’s a more social game. I think we need to get Steve over at My Cup of IT to play some Texas Hold ‘em. We need two more. Anybody in?

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Drew Doggett contributed to this report.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Cloud Rising?

2014 is a tipping point. For the first time, IT will serve more pages to phones than PCs. So, aren’t phones cloud devices? Sure we’ve wrestled with Hunger Games horrors, but most everybody’s dialed into the mobile cloud. Hold the phone. According to two new GAO reports, Uncle Sam is still struggling for cloud dial tone – although seems to be getting through in data center savings.

Why Be a Box Hugger?

GAO’s cloud report looks at seven civil agencies – gauging cloud progress since 2012. The numbers speak for themselves – while the branches have a total of 80 new cloud services, the uptick in cloud spending is just one percent.

Why so low? Two reasons. GAO tells us that agencies aren’t up for legacy migration – they’re only considering new build for cloud. That means 67 percent of the IT spend is off the table before you start. Second – and I’m adding this to GAO’s analysis – cloud is too hard to buy. Acquisition ache surfaced as a constant theme at the recent Cloud Computing Brainstorm.

Seems Terry Halverson’s falling in with these issues. Interesting to watch him strafe the DISA cloud last week – encouraging the agencies to go AWOL to get the cloud they need.

Caucus and the Cure?

That brings us to tomorrow’s Cloud Computing Caucus Hillversation. Join the Air Force, DHS, GSA, and NASA SEWP on the Hill for a lively discussion on cloud acquisition. We’ll also preview a new Independent Government Cost Estimator tool for the cloud. While the FedRAMP OnRAMP shows you what’s available, the IGCE takes you deeper – to understand how to buy FedRAMP-compliant cloud and how much it’ll cost. This gizmo’ll put some pep in your COTR’s Cloud step.

CIO Cloud Connection?

And, if you need more cloud in your life – and GAO says most Feds do – here’s an early flag for a gathering of CIOs on the Future of the Federal Cloud. November 18 – a half-day session, featuring Fed CIOs, with real dialogue about what’s working and what’s not in Federal cloud. Sorry this program’s government only. Feds register here.

Is FDCCI Dead?

Not to forget cloud’s twin sister, GAO put out an eye opener on Data Center Consolidation. While cloud’s dealing with hang ups, seems data center consolidation’s dialing direct to the bank. GAO looked at 24 agencies’ FDCCI efforts, 19 reported a total of $1.1 billion in cost savings and avoidance 2011-2013. Three – DoD, DHS, and Treasury – contributed 74 percent of that lettuce.

But, as you’ll remember, the goal for FDCCI was to save $3 or $5 billion by 2015. GAO looked downstream between here and 2015 – and further to 2017. Altogether 21 agencies plan to save $2.1 billion by 2015 – and another $2 billion by 2017. Which takes us to $5.3 billion in cost savings and cost avoidance.

So, seems FDCCI’s far from dead. That said, here’s a stat and a source for you.

As of May 2014, agencies reported a total of 9,658 data centers – approximately 6,500 more than reported by OMB in 2011.

All part of a successful consolidation push. And, people think I make this stuff up…

Hope to see you tomorrow at the Rayburn Building, Room 2168, on the Hill for the Cloud Computing Caucus Hillversation. And on November 18th for Cloud Connections.

Do you think cloud is rising or sinking? Is there enough cloud in your life? Is cost avoidance the same thing as cost saving?

Union Jacked?

Did you know that the Union Jack – made famous by the Red Coats, Reebok, and Austin Powers – is in peril? On September 18, Scotland goes to the polls to vote on independence from the “United Kingdom” – or, more accurately, England. This after a 309-year shotgun marriage. If the Scots lift their skirts to the Sassenachs, like the flag the notion of Britain as a united kingdom may literally come apart at the seams. The Saltire, the Scottish flag, is an integral part of the Union Jack – which is itself a compilation flag.

Here’s the before and after impact of the Scot’s pull back on the Union Jack.


Stick or Quit?

As I mentioned last week, I was in England this summer. As you can imagine, the Scottish independence referendum is a hot topic at the local pub. Will St. Andrew walk out on St. George? Like William Wallace and Edward Longshanks, the leaders of the pro- and anti-independence parties – Salmond and Darling – are at one another’s throats. Word is the stickers are a wee bit ahead of the quitters. But the latest polls are getting tighter – William Hill, the bookies, quotes 1/5 on sticking and 10/3 on quitting.

Cryptic Cameron?

Here’s the rub. Whatever Scotland’s decision – David Cameron, British Prime Minister, is caught between clans. He’s against Scotland’s secession from the U.K. – but he’s for the U.K. cutting loose from the EU. Business is piling on pressure for Scotland to stay – as banks, including the Royal Bank of Scotland, threaten to move their headquarters south is Scotland cashes out.

Irish Eyes?

If the Scots take back their haggis and highlands, what if the Welsh decide to let the dragon fly? Yes, Wales is a separate country that’s not part of England. And, that brings us to England’s oldest overseas colony – Ireland. If the tartan army takes off, does that elevate Ireland’s case for reunification?

Freedom?

Celts call the Union Jack the Butcher’s Apron – because England wrapped itself in the Union flag when it planned to do mischief. Seems the butcher’s apron itself is now on the block. We’ll know on September 19.

“Aye, fight and you may die. Run, and you’ll live… at least a while. And dying in your beds, many years from now, would you be willin’ to trade all the days, from this day to that, for one chance, just one chance, to come back here and tell our enemies that they may take our lives, but they’ll never take… our freedom!”

Should the Scots go for independence – what do you think?

Fighting Father Time

Some things get better with age. Wine. Blue jeans. Sofia Vergara.

But not everything improves as it gets older. Milk. Tattoos. Data centers.

Feds want their data and they want it now. Seems like a reasonable expectation, but it doesn’t always work out so well – especially as data centers get older.

That’s why reliability tops the list of concerns that Feds have about data centers, with 80 percent of Feds citing data center reliability as a top priority for their agency, according to a new MeriTalk report, “The Drive to Thrive: Ensuring the Agile Data Center.”

I’m Down (I’m Really Down)
We all lose a step as we get older, and data centers are no exception.

In the last month, 70 percent of agencies have experienced downtime of 30 minutes or more.

Nearly 70 percent say downtime of more than 30 minutes is unacceptable, and only 23 percent give their agency’s data centers an “A” for effectively delivering the right information and resources to the right users on a daily basis.

Looks like a lot of agencies aren’t making the grade.

Downtime also fires up Feds in the field – those who spend at least 50 percent of their time working remotely. In the last month 90 percent of field workers say downtime affected their ability to do their job, and 42 percent of field workers say downtime left them unable to support their agency’s mission.

More Data, More Problems
Feds can’t escape this data-driven dilemma. Data continues to grow at a record pace. Latency is IT’s new four-letter word.

So Feds want to invest in their data centers. Expanding bandwidth, increasing storage, and investing in security will improve data center agility. It’s like a fountain of youth.

Agile data centers boost productivity by sharply reducing downtime. When Feds have real-time access to information, it saves time and money – an estimated $32.5 billion annually.

Small budgets, outdated hardware, and outdated software represent hurdles that prevent agencies from making data centers more agile. Older isn’t always better. But it’s not that hard to keep data centers forever young. Read the full report here.

Cloud Computing Brainstorm

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

In August, Time to Shift Gears

With official Washington on a month-long siesta, it’s a good time to shift our attention to life outside the Beltway.

Feds have aggressively pursued policies that encourage telework and boost mobility, and they’ve come a long way. Employees like to work on the go, and they have the resources to be productive anywhere.

What about state and local government agencies? It’s an important question because so many more people are employed by government agencies at the state and local level – about 5 million versus 2.8 million Federal workers once you take away the teachers, public safety personnel, and others who aren’t eligible to work remotely, according to the U.S. Census Bureau’s March 2012 data.

Slower to Adapt
But it turns out workers are still driving in Dallas and commuting in Columbus.

Only 17 percent of those who work for state and local government agencies are eligible for telework, according to a new study from Mobile Work Exchange called “State and Local Mobility Map: Road to Mobile Readiness.”

Further evidence that state and local agencies have room for improvement – 58 percent of agencies say they are not prepared to go mobile. Concerns over security and inadequate budgets are cited as the primary hurdles.

IT managers said convincing senior leadership to increase technology budgets, update infrastructure, and increase the number of employees eligible for telework would make agencies better prepared to accommodate a mobile workforce.

Looking Ahead
But there are hopeful signs along this road to mobility outside the Beltway.

State and local IT managers understand the value of mobility and telework policies, and 65 percent of the 150 state and local tech managers surveyed said they expect the number of mobile government workers to increase in the next five years.

Road Map
But what can state and local government agencies do to make sure they take full advantage of telework and mobility?

I’m glad you asked.

Big Picture: Ensure IT teams understand the value of mobility. Take an enterprise approach to rolling out a mobile program and avoid piecemeal investments.

Invest: Establish an infrastructure that supports mobile work. Leverage flexible, scalable, and comprehensive technology solutions.

Address Security: Educate and train end users and implement VDI, enterprise management, and device management technologies to alleviate anxieties.

Work All Angles: Support legislation or incentives that promote telework and mobility.

Continuity Planning: Increase employee telework eligibility so agencies can maintain operations during a natural disaster.

Develop Training: Define what employees need to be mobile. Ensure all users understand and comply with protocols.

Don’t Let Them Drive You Crazy
Mobility and telework benefit employers and employees in important ways. Saves time. Saves money. Keeps people happy. Telework policies help agencies recruit new employees and allow agencies to maintain productivity once the snow begins to fall and everyone starts to freak out.

It’s all in the report. Consider it beach reading.

And enjoy these final days of peace. When Congress returns and schools resume the roads will be choked with traffic once again. Unless your boss allows you to work remotely.

Mobile Readiness Study

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Joe Hungate – Neat Stuff?

I’d give my right arm to be ambidextrous. If you look at what ails Fed IT, it’s not tech – you can distill it down to communications and finance. So what if you had a Fed exec who’s in touch with tech, bounces with a balance sheet, and knows how to get his point across? Let me introduce you to Joe Hungate, deputy CFO at HUD. It’s a name from Yorkshire in England – meaning water gate – not like Nixon – and Mr. Hungate’s carrying the water for government efficiency – and something a little stronger – read on.

I met Joe when he was CIO at IRS TIGTA – and blazing the trail on telework and mobility. He then served as a detailee investigator for House Appropriations. Now he’s pulling finance levers at HUD. So, I thought I knew Joe pretty well…

Turns out, in addition to his day job, Joe’s a Scottish whisky aficionado – Joe assures me dropping the ‘e’ is consistent to the Highland heritage of the hooch. Now, who doesn’t like a tipple every now and again? But did you ever buy your own barrel? Seems Mr. Hungate acquired a taste for whisky in the Highlands. But, as if a barrel wasn’t enough, he’s partner and CFO in the Virginia Distillery Company, a new whisky distillery in Lovingston – that’s 30 minutes south of Charlottesville. Check out the bottle – no ‘e’.

I’ll raise my glass to a Fed exec who’s triple distilled – tech, finance, and communications – and in touch with Hill appropriations. Here’s to Joe Hungate – hitting with all three hands, and far from your average Joe…

Disputed Territory?

Not as charged as Palestine and the Ukraine, Federal cloud is nevertheless disputed territory. Released three and a half years after OMB issued the “Cloud First Policy”, a new MeriTalk study “Cloud Confusion: Is Private Cloud Holding Feds Back?” provides a sanity check on Uncle Sam’s cloud progress.

$18.9 Billion Bonanza

Based on a survey of 159 Fed IT execs, the study opens with big numbers. The Federal government could save $18.9 Billion by migrating services and apps to the cloud.

Going Public

But, if you dig beneath the promise, cloud reality comes up short. And, it seems how you define cloud is disputed territory. Forty four percent of Feds report their agencies are missing out on savings by using private clouds versus public or community solutions. And, they tell us that 56 percent of Feds’ cloud adoption to date has been private cloud.

C is for Cloud

The majority of Federal IT managers give their agencies a “C” or below for cloud progress. Only 41 percent said their agency considers cloud as part of the overall IT strategy. Fifty one percent have used cloud strictly for a limited number of specific applications. That said, those agencies that fully embraced cloud in their overall IT strategy show much better savings performance. Cloud-centric agencies saved twice as much with their cloud deployments than box-hugger agencies.

Securing Savings

Considering the savings sweet spot moving forward in the next two years, agencies tell us they’ll migrate CRM, logistics, and procurement applications. Further, FedRAMP is important – 41 percent say that they’ll explore public, hybrid, or community clouds thanks to FedRAMP certification.

Check out the study and mark your calendar to attend the Cloud Computing Brainstorm September 10 at the Newseum in D.C. DISA CIO David Bennett is our keynote – his perspectives will be insightful. That much is indisputable.

Searching for the Right Fit

Federal agencies are struggling with their old IT networks. It may be time for a makeover. Put away the polyester. Burn the bell bottoms.

Old networks lead to complexity, and that makes it harder than ever for Federal agencies to do their jobs, let alone innovate, according to a new study from MeriTalk.

Complexity means IT networks are slow and unreliable. It means downtime and service disruptions. It means agencies can’t implement new technology, services, and capabilities easily. And it means lots of money.

Reducing complexity by half would save agencies $14.8 billion, in part by improving network reliability, speed, and security.

More than half of Federal agencies say network complexity has increased over the past year, and 68 percent believe it will get worse over the next three years.

A Bigger Burden
Growth is among the primary reasons behind network complexity. Networks grew too big, and that growth wasn’t properly managed. But they’re still trying to fit into those old jeans. Just because it’s vintage doesn’t make it cool.

Networks also support an incredible number of devices. Federal workers are able to log into networks from nearly anywhere thanks to progressive telework policies and mobility, but more devices can lead to more complications. Cloud computing, data center consolidation, and server virtualization also contribute to network complexity.

A whopping 81 percent of network managers believe network complexity can slow or halt IT performance objectives.

Clean Out Your Closet
Moving to open standards would allow agencies to take advantage of interoperability, which, in turn, would make them more agile and able to adapt to innovative new solutions like software-defined networking.

Network managers also said they can reduce complexity by adding bandwidth, increasing redundancy, and increasing resiliency.

Shopping Around
Agencies have more networking options than they used to have. Shopping around can help with the makeover, and it can lead to savings. More stores, better deals. Diversification can drive savings by reducing capital expenditures.

Today, 74 percent of network managers are concerned about the lack of interoperability among network vendors. Agencies want options. Now they have them. There’s no reason to wear hand-me-downs. And can we talk about your hair?

Read the full report here.
Amazon Web Services

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Social Shenanigans?

Ever wonder about the validity of social media? What’s the moniker – trust but verify? I’ve always had my suspicions about Facebook Likes. Not to mention those randos that follow you on Twitter, even though you have not tweeted in four years. I’m really not that popular in real life – ask anybody that knows me. Well, Derek Muller at Veritasium dishes on the lies behind the likes.

Here’s where I commit social hara-kiri – I’m going to recommend that you take nine minutes out of your day to watch a YouTube video. Not only is the content insightful – but the presentation style is worth your time investment. You have 1,440 minutes per day – 10,080 in a week. So, nine minutes is 1/160 of your day – or 1/80 if you sleep half the day.

I’ll make this cup a quarter pour. Give you more time to watch the video. Remember, all that glitters is not gold.

P.S. I Love You

Nothing excites this town like scandalous behavior.

The Library of Congress this month will unseal love letters written by President Warren G. Harding. The 29th president – generally regarded as one of the nation’s worst presidents – wrote the letters to Carrie Fulton Phillips.

President Harding and Carrie Phillips weren’t married. That may not seem so shocking now, but he wrote the steamy letters 100 years ago.

Unrequited Love
Not everyone has time to write passionate prose.

The House and Senate have fewer than 20 legislative days scheduled to tackle some important tech issues prior to the August recess. Don’t think their loved ones will receive romantic expressions in the mail anytime soon.

Rocky Relationship
A Senate panel on Tuesday marked up a key cyber security information sharing bill behind closed doors, and that bill could move to the floor soon. Privacy advocates want big changes to the Senate version, so you can bet they aren’t writing love letters to Congress.

Revelations of a cyber attack on power grids might convince all sides to kiss and make up so they can improve cyber security. Symantec Corp. said one hacking group targets “energy grid operators, major electricity generation firms, petroleum pipeline operators, and energy industry industrial equipment providers.”

Spurned by VanRoekel
FITARA’s fate is tied to the National Defense Authorization Act, the 2015 Defense appropriations bill. The House passed the bill in May. The Senate, which advanced a separate FITARA bill, has not completed its work on the Defense spending measure. The administration still isn’t in love with FITARA.

It seems odd that so many people believe Feds need to change how they buy IT, but the administration and CIO Steve VanRoekel can’t bring themselves to embrace the idea.

Lots to do, and so little time. Someone’s bound to have their heart broken. At least we have our summer reading to look forward to – and those scandalous letters from President Harding to the other woman.

Amazon Web Services

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Independence Day?

You may think that 238 years ago, your ancestors sent my ancestors packing. On the 4th, I like to remind folks I’m Irish.  All this independent spirit inspired MeriTalk to question the tyranny of yesterday’s IT in D.C.

Well, Yankee Doodle, stick a feather in your cap and check out our newest study – Consolidation Aggravation. Yes, if we’d considered the timing, we would have called it Data Center Independence Day. We’re doing the patriotic thing and rebelling against despicable data – and its damaging effect on FDCCI, the cloud transition, and the future of America. It’s like one of those box office action movies –“Men In Black 4: The Data War.”

Benedict Arnold?

Okay, back to the small screen. Net up front, is your data working against you? Fed IT managers tell us Uncle Sam can save $16.5 billion in the next decade by dumping duplicitous data. More than one in four agencies waste 50 to 88 percent of storage capacity stockpiling copy data. In 2013, 27 percent of agencies’ storage budgets funded duplicate data. That’s $2.7 billion in 2013 – and $3.1 billion in 2014. That’s more than a lot when you consider Jefferson only paid Napoleon a hair over $11 million for the Louisiana Territory…

Stars and Stripes Forever?

Fed IT managers tell us that 40 percent of Uncle Sam’s data assets exist four or more times.  Further, one in three agencies do not vary the number of data copies based on the significance of the original copy or the likelihood it will be used again. How many stars and stripes do we really need?

Manifest Density?

Is the number of data centers inevitable? Drilling down on FDCCI feedback, 72 percent of Fed IT managers tell us they have the same number or more data centers than they had when the FDCCI program launched in 2010. Only six percent gave their agency an “A” grade for FDCCI. What would Teddy Roosevelt make of this?

Tea Party?

So, the logical question is why isn’t FDCCI going better? What stops agencies from rising up – or at least taking out the trash? Fed IT managers flag overall resistance, data management challenges, and data growth.

Give Me FDCCI or Give Me Death?

Like the founding fathers, Fed IT pioneers are leading the charge to virtual and software-defined everything. Server virtualization has proven its mettle on the battlefield. Now it’s data virtualization, SDN, and even software-defined hardware on the ramparts.

Didn’t Benjamin Franklin tell us that the definition of insanity is to assume the same behavior and expect a different outcome? Check out the study for a manifesto on change.

And, before you throw me on the firework pile this 4th – English or Irish, I’m an American now.

DISA Takes the Long View

David Bennett, CIO of the Defense Information Systems Agency, has been thinking about cloud a lot lately.

DOD rolled out DISA’s milCloud in March.

Bennett, who took over as DISA CIO in October 2012, said in April that the Federal government is comfortable with its approach to cloud computing – essentially they keep as much data and as many applications as possible in government data centers.

But he said they are increasingly uncomfortable with the cost, and Feds need to consider whether it’s time to make a change. With companies including Amazon and Microsoft building cost-effective cloud offerings that meet government standards, DOD and other Federal agencies are wise to rethink their cloud options.

Cost isn’t the only factor, though, and that makes it even harder to decide whether to migrate to a commercial or hybrid cloud, Bennett said. Data security and the potential latency of data and applications stored off premises are also important factors.

David Bennett will provide the keynote address at the next Cloud Computing Brainstorm.

The Brainstorm will be held September 10, 7:30 a.m.-2:15 p.m., at the Newseum’s Knight Conference Center in D.C.

Register at meritalk.com/ccx-brainstorm-2014-register.php.

Cloud Computing Brainstorm

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Death. Taxes. DC Traffic.

The joke’s on us. Interstate 66. Metro (I’m looking at you, Red Line). The 14th Street Bridge. Route 50. The Baltimore-Washington Parkway. At some point they will ruin your day, and everyone has a commuting horror story.

Every time we step into a Metro car, it’s like flipping a coin.

Every time we pile into our cars we run the risk of getting stuck in traffic.

Mobile work looks better every day.

Workers not only want to work from home, they are increasingly mobile, demonstrating their ability to be productive even when they aren’t tethered to the office.  Feds see the practical benefit of telework initiatives, but it often seems like they’re stuck in the slow lane in terms of adoption.

What gives?

Just 56 percent of Federal IT managers believe their agency takes full advantage of mobility, according to the new Mobility Progress Report: Are Federal Agencies Passing the Test?

So there’s a substantial amount of room for improvement. The hurdles to broader adoption include:

  • concern over the security of mobile devices
  • budgets
  • culture
  • and procurement

“Security will be a key consideration driving future mobility devices,” VMware Public Sector Vice President Doug Bourgeois said. “As the number of diverse mobile devices in the Federal government continues to rise, data security and mobile device management will lead the conversation. IT and HR managers agree that security concerns are holding their agencies back from taking full advantage of mobility, which in return is also affecting employee retention and recruitment efforts.”

There are positive signs, according to the smart people at Mobile Work Exchange, which produced the new report. Forty percent of HR managers at Federal agencies say they could continue operations in the event of a natural or manmade disaster because of their telework policies. If all Feds were able to telework, productivity would rise by $60 million a day.

The folks at Mobile Work Exchange uncovered another interesting metric to quantify the benefits of telework for Feds. Agencies could save $15.1 billion annually through extending more telework opportunities and getting rid of unoccupied real estate created as more employees work from home, according to the report.

The full report is here.

Mobile Work Exchange and VMware, which sponsored the study along with Carahsoft, will dig into the details of this new report during an in-depth webinar on July 24 to discuss what’s holding up broader adoption of mobility/telework policies, the return on investment of the Telework Enhancement Act of 2010 and the Digital Government Strategy, and other topical issues surrounding mobility. Register here to participate and get much more info.

And feel free to share your commuting horror stories with us.

alt

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Hat Trick, Heaven or Hell?

Is it me, or is it slow in Fed IT? Maybe it’s because everybody’s watching the World Cup? Worldwide viewership is four times that for the Olympics – and global productivity will drop four percent this month.

A hat trick of humor – and perhaps a tear in my saucer this week.

Cloud Country?

Big howdy to Dr. Ron Ross at NIST. He’s a real country fan. Gave me a smile by observing that cloud is like Kenny Chesney’s famous song – “Everybody Wants to Go to Heaven, But Nobody Wants to Go Now.” Now, I don’t know much about country, but guess that’s better than “I Hold On.”

Not Cricket?

What’s the world’s second largest sport? Baseball? Basketball? Guess my delivery gave it away – watch out for the googley. Yes, it’s cricket. If you think football’s boring… Kenny Chesney’s Seven Days is pretty close. It takes five days to play cricket properly – and that’s without commercial breaks.

Three Lions

Okay, I know you lot don’t have much time for football – sorry, the real football. But, when England plays in the World Cup – it’s damned close to a religious experience for yours truly. This month, the Three Lions took me from Hillbilly Heaven to ***** Tonk Hell. How can England have so many great players and play so rubbish? How can you invent the world’s game and get a red card in the first round? I’ve Got Tears in My Ears From Lying on My Back Crying Over You.

And, if it’s bad for the Three Lions, consider the Indomitable Lions. Cameroon had a player sent off – then two of its team got in a dispute, and one head-butted his own teammate. And yesterday, Uruguay’s Suarez bit one of the Azzurri – whole new meaning to Italian food.  Why you gotta be so mean?

The whole football world order is out of balance – Davids have felled Goliaths all over Brazil. Form book thrown out of the window. A goal bonanza. Big shout out to the U.S. team. My tip, Brazil or France for the cup – My Cup, anyhow. Please, anybody but the bloody Germans – I’ve Never Wanted Nothing More.

The World Cup and Cyber Crime

What do cyber crime and soccer have in common? Both are big and getting bigger.

When the World Cup begins tomorrow, Spain, Germany, and Brazil will have the best odds of winning. They have dynamic players and play good offense.

But when it comes to cyber security, you have to play good defense, and most countries still struggle with that.

Global Phenomenon
Monday, the Center for Strategic and International Studies (CSIS) released a cyber security report sponsored by McAfee that tries to quantify the global impact of cyber security. Two takeaways from the report: cyber security costs the world economy more than $445 billion globally each year and (this is alarming) cyber crime is a “growth industry.”

Just like soccer.

Home Team
In response to a direct question at Monday’s press conference, the report authors said they do not know the financial impact of cyber crime to the U.S. government, but they had lots of thoughts – and criticism – about the role of government in slowing down cyber security threats.

In short – our defense needs to improve. Governments generally don’t do enough to stop cyber crime, find cyber criminals, or compile and distribute good data across the public and private sectors about cyber attacks, according to CSIS.

Big Goals
Having good data is important because under reporting cyber crime might result in a failure to grasp the extent of the problem, and that could prevent law enforcement from catching the bad guys.

“The more that governments understand what those costs are, the more likely they are to bring their laws and policies into line with preventing those sorts of losses,” said Stewart A. Baker, a co-author of the report.

Yellow Card
Jim Lewis, a co-author of the report, said bad guys are able to operate with impunity. That’s in part because it remains a low risk, high reward endeavor.

Countries view cyber crime through the lens of acceptable risk, according to the report. The report says “if cybercrime and cyber espionage cost more than 2 percent of GDP, we assume it would prompt much stronger calls for action as companies and societies find the burden unacceptable.”

Losses to the U.S. economy are 0.64 percent of GDP.

Loser’s Bracket
And then there’s China. California security firm CrowdStrike on Monday said the Chinese army is at it again, launching state-sponsored hacks. The PLA needs to find a hobby. Last year, Alexandria, VA, security firm Mandiant – since acquired by FireEye – was the first to present evidence that the Chinese PLA is a shameless cyber-aggressor.

Their soccer team sucks, too, which is why China isn’t in the World Cup.

Winner’s Bracket
Why is all of this relevant? We are holding the Second Annual Cyber Security Brainstorm next week at the Newseum. On June 18 we’ll discuss data breaches, insider threats, continuous diagnostics and mitigation (CDM) and identity management. You can register here.

Since we’re talking about CDM, we also have an insightful new report on the progress agencies are making with their CDM plans and the expectations they have for the program.

Hope to see you at the Second Annual Cyber Security Brainstorm next week. In between sessions we can chat about Messi, Ronaldo, Neymar, and all the other stars who will dominate the pitch during the World Cup.

I think you’ll get a kick out of it.

alt

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

CDM Roadtest

CDM is all about numbers – $6 billion, 17 primes, legions of subcontractors, and one big question. Is the shiny new program making Uncle Sam’s cyber security safer? This’ll be a focal point of the Cyber Security Brainstorm on June 18 at the Newseum. More than 250 Fed cyber security execs have registered – so space is tight. But back to the question – how’s CDM doing? Are the customers satisfied?

Under the Hood

Only one way to find out – take a peek under the hood. So, MeriTalk’s Cyber Security Exchange asked Fed cyber security execs in the agencies if CDM’s a Lamborghini or a lemon? We put the analysis wrenches down – and rolled out the CDM: Under the Hood study on Monday.

Good First Lap

DHS tells us that agencies burned rubber to meet OMB’s CDM deadlines. More than 96 percent of agencies met the April 30 deadline to identify a CDM manager in their agency. More than 87 percent met the May 30 deadline to deploy products to support the new security management approach.

Find the Accelerator, Please

Quizzed about roll out and task order processing timing, 58 percent of Feds want to accelerate program phase roll out. Fifty-one percent want phase one solutions task orders processed more quickly – flag for Jim Piche and his team at GSA. Providing recommendations on how frequently to refresh security assessment and discovery information, Feds want more real-time updates. Today, the plan for CDM is to provide updates to agencies every 72 hours. Ninety percent of Fed cyber execs want daily updates, and 56 percent want updates every hour. Thirty-two percent want real-time intelligence.

Risky Business

As the cyber security market shifts from compliance to risk management, CDM corners like it’s on rails and eats up the asphalt on the straightaway. Asked about the benefits CDM provides in their agencies, Feds revved their engines. Fifty-six percent say CDM reduces operational risk. Fifty-five percent point to enhanced risk prioritization – allowing cyber security pros to get to the worst issues first. Fifty-four percent point to quicker risk mitigation times – and 51 percent say CDM reduces time spent on paperwork.

FISMA Fork in the Road

Speaking of paperwork, it’s impossible to put CDM on the lift without road testing it against FISMA. I asked OMB about CDM and FISMA – do agencies still need to pay for FISMA if they’re doing CDM? OMB clearly said yes. “Yes. FISMA is the law.” The study provides interesting insight on the relationship between cyber security’s favorite acronyms – LOL. The net up front – FISMA’s far from RIP. Only 13 percent of Fed cyber execs consider FISMA OBE – saying that they have enough data to do away with FISMA. Fifty percent say they need FISMA today until CDM produces more data. Twenty percent say CDM will never replace FISMA. Interestingly, 17 percent are unsure.

Fed cyber security leads tell us they spend 25 percent of their cyber security budgets on FISMA compliance. Chipping in on future plans for FISMA reporting provides important insight on how CDM and FISMA can run together. Thirty-six percent plan to automate FISMA monthly reporting. Forty-two percent plan to swap out the automated dashboard for today’s quarterly/annual reports. Disappointingly, 24 percent have no plans whatsoever to change their reporting behavior.

Real takeaway, NIST and DHS need to get together to tell one story. How do these programs fit together –and what’s the roadmap for the future? And, speaking of confusion, or perhaps insecurity, the Federal cyber security initiatives need a branding makeover. How will the government achieve clarity if it keeps coming up with new terms?

Analytic Converter

Seems cyber execs like their new Streufert speedster. Looking down the road, Feds point to training, budget, legacy integration, technical complexity, culture, acquisition, and leadership supports as major speed bumps to accelerating CDM – check out the study for the stats. What do they need to pimp their CDM ride? Fifty-eight percent of Feds want more analytic capabilities. Next on the grid are critical application resilience, common trusted identities, automated tools, and enhanced RoI metrics – again, check out the study for stats.

So, there you have it, the numbers on CDM. If you’re interested in the voice track, we’ll look forward to meeting you in the pits at the Cyber Security Brainstorm at the Newseum on June 18. John Streufert’s in pole position on the CDM panel.

FedRAMP Deadline Arrives Today

Today’s the big day. Maybe.

Two years after Feds launched FedRAMP, cloud service providers must finish jumping over all the hurdles if they want to have a part in this program with the funny name. Or not.

June 5 looks like a faux deadline.

And the rules appear subject to change.

OMB, which will act as the enforcer, told us “agencies have to be FedRAMP compliant, not CSPs.”

That’s different than what we heard earlier this year: “Cloud services in use at federal agencies must meet FedRAMP security requirements by June 5.”

Our buddy Dave McClure, who stepped down from his post at GSA last week, said the burden does rest with agencies.

“Our biggest challenge is on the agency side where they may have existing contracts with existing providers, and they have not certified them against the FedRAMP baseline. That’s their job; it’s not a GSA job to do that, necessarily,” he said in an interview.

OMB has indicated that enforcement is not the primary goal here, so a huge question mark looms over agencies and cloud service providers as FedRAMP lunges forward and the calendar flips to June 5.

There are hard deadlines like April 15, and there are not-so-hard-deadlines like when your electric bill comes due. The power doesn’t shut off the next day if the electric company hasn’t received payment. And FedRAMP won’t come to a screeching halt either. Most likely, nothing will happen today.

That won’t sit well with everyone. Many cloud service providers have invested significant resources to meet compliance. If other CSPs can waltz in and offer services following the deadline, OMB may have some fences to mend with those who rushed to meet the deadline.

Will CSPs currently in the pipeline earn the right to offer services once Feds complete the interminable review process and approve their solution? Probably.

As we wonder about all these details and minutia, it’s worth remembering the recent comments of former-Navy Department CIO and current Defense Department CIO Terry Halvorsen, who wondered out loud what comes after FedRAMP. Is FedRAMP the long-term solution for the Federal government?

Don’t think so, Halvorsen said. It’s a good start, he said, but we need to think about what’s next.

As you think about what’s next, consider joining us at MeriTalk’s third annual Cloud Computing Brainstorm on Wednesday, September 10, 2014 at the Newseum in Washington, D.C. That’s a real deadline, and you can register here.

The Cloud Computing Caucus Advisory Group also is an important new resource for what’s happening on the Hill.

And the FedRAMP OnRAMP can help you keep track of who’s in and who’s not.

Cloud Computing Brainstorm

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Halvorsen Hates Iowa

But he’s really got it in for data centers, applications, and cost. In a world of posturing and politics, I’d like to take a minute to salute Terry Halvorsen as he steps into Teri’s shoes as DoD IT tzar. With the challenges in DoD computing, Terry may quickly develop a bunion. We know he’s already recovering from Achilles surgery.

Modernization, the Movie

When acting as the DON CIO, Terry recently spoke at the Data Center Brainstorm and the Cloud Computing Caucus Advisory Group meeting on the Hill. Perhaps I’m losing my mind recommending that you watch a 17-minute video on the web, but if you want insight into DoD’s most powerful IT brain, it’s 17 minutes well spent. By government IT standards, this movie’s an action thriller – and a horror movie for those who dig the failing status quo.

Burn the Ships

No TQM, BPR, or Six Sigma – just straight talk. Navy plans to take $1.3 billion out of its data center spend. To achieve this, Terry cut the data center budget by $1.3 billion. Halvorsen hones in on what’s important – and calls out the nonsense of the data center consolidation and counting fiasco. “It’s about data center closings – not consolidations. You need to count money, not just data centers. To be clear, savings means that we spent less money – not just cost avoidance.” Map this against OMB’s double speak on the Hill – it’s like music to my ears.

It’s the Data, Stupid

Halvorsen grabs the issue by the scruff of the neck – to realize success you need to understand the data in your data center. You need to know your risk – not just cyber risk. This is where those of my readers from Iowa may want to turn off. At this juncture, Halvorsen unleashed on Iowa – maybe he has an allergy to corn? When running older applications, you will likely need your data geographically nearby – so cheap data center space in Iowa may be a false economy.

Killer Apps

“I don’t like application rationalization – I like application kill.” It doesn’t get more real. Halvorsen tells us straight – murdering applications drives down data volumes. Is virtualizing data a good idea? **** straight it is.

Big Enough to Matter

Halvorsen says he’s not interested in definitions of data centers. The Navy has 150 data centers that are big enough – read expensive enough – for him to care. Unlike other execs who downplay the cost of labor, Terry tells it straight. The number-one cost in Federal data centers is labor – far and away. He also sparked off about power and facilities costs – and how Uncle Sam needs to rein them in.

Amazon Your Agency

Here’s another third-rail issue. Halvorsen wants half the Navy’s data housed in commercial solutions. He’s pushing public-facing websites to Amazon – and realizing 66 percent in cost savings. Other commercial providers include HP’s NGEN.

DISA Data Center Delight

He also applauded DISA’s cloud and data center solution – saying it was very cost effective. The Navy is and will continue to run in DISA’s data center. We’re excited to hear from David Bennett, CIO at DISA, when he keynotes at the September 10 Cloud Computing Brainstorm.

COOP vs. DR

It’s not cost vs. mission – it’s both. Cost significantly impacts your ability to achieve the mission. Halvorsen finally let up on Iowa as he noted that many applications do not need full COOP – it’s very expensive. If you don’t absolutely need a hot fail over – and can live with data restoration in five to seven days – here’s your chance to take advantage of cheap capacity in Iowa.

Halvorsen’s exactly what we need to shake things up in government IT. Again, I encourage you to watch the movie. Two thumbs up for his direct approach. He’s going to shake things up in the E Ring. If he has a failing, it may be that obsession with Iowa? Perhaps it’s because it’s landlocked? Maybe he had a bad experience with a Goldfinch? Do the West Florida Argonauts have it in for the Iowa State Cyclones?

Automated Spend Analytics – A Must for Every Federal Agency

Public Private Innovations

Strategic sourcing is focused on reducing the Total Cost of Ownership (TCO) while also delivering results, agility, and innovation. Private sector is well on its way to capitalizing on strategic sourcing, and in many industries, companies grow and die by how well they do strategic sourcing. Many of the public sector organizations, including federal, state and local governments, K12, colleges and universities, and international development organizations, have either already launched their strategic sourcing initiative or are planning to launch it. Either way, this is an area for focus in the US today.

What is Strategic Sourcing?
Strategic sourcing is an institutional process to continuously discover, assess, evaluate, and improve on the IT procurement activities of the organization.

Steps in Strategic Sourcing
Strategic sourcing starts with understanding where the organization is in its spending habits, then figuring out were it can improve to lower the total cost of ownership and increasing competitive advantage, and finally, developing and implementing an infallible strategy to get there. Once the organization has reached the desired destination (and this will take some time, especially in large organizations), it is time to start reassessing new spending control opportunities that may have become available due to the changing spending habits of the organization.

The “Big” Hurdle
The area that trips most strategic sourcing initiatives is getting clear visibility of the spending habits of the organization. In order to identify cost savings opportunities and efficiencies in procurement, management first needs better, more accurate visibility of how much is being spent, on what, with and by whom. The unfortunate reality is that the spend data is often poorly organized, inappropriately classified, exists in many different systems, and is difficult to access and analyze. Addressing this ‘knowledge deficit’ with automated data collection, cleansing, classification, enrichment, redaction, collation, and reporting through cloud based systems from industry innovators like Spikes Cavell can significantly improve management’s ability to drive millions of dollars of incremental value from its spend data.

Spend Analytics Process?
No single financial management or purchasing system contains a truly complete and sufficiently granular analysis of an organization’s spending. Therefore, methods, tools, and technologies have been designed by leaders like Spikes Cavell to make the best use of multiple data sources, including payables, purchase cards, purchase orders, and contracts, through a seven step proprietary process:

  1. SOURCING: Identify raw spend and contract data from the organization’s payables, purchase orders, purchase cards and contract management systems
  2. COLLECT: An accurate extraction of the raw financial data with minimum effort on the organization’s part to ensure that the raw payables, purchase orders or purchase card data is fit-for-purpose
  3. CLEANSE: This process standardizes the data, removes duplicates, and identifies and fixes errors in preparation for subsequent processing
  4. CLASSIFY: Rapid, accurate, and cost-effective classification of the vendors, purchase cards, and, where available, purchase order data
  5. ENRICH: Enrich the data by appending supplemental attributes from licensed 3rdparty reference data sets to each of the core trade vendor records
  6. REDACT: This is the identification and redaction of payments made to individuals (for example, foster parents and vulnerable adults in local government) or where national security, personal security, or foreign relations might be compromised
  7. COLLATE: Aggregate all of the spend and related data into a single, unified, and consistent master database for viewing, reporting, and analysis on the cloud

Spend Analytics is an art and a science. If you want to learn more about this discipline and available products like Spikes Cavell, talk to GOVonomy – the Strategic Technology Sourcing Initiative. GOVonomy, headquartered in Silicon Valley, California, serves the $200 billion US public sector technology marketplace. GOVonomy’s goal is to drive increased public value by regularly locating and introducing cost-effective, cutting-edge, targeted product technologies that specifically address the challenges and opportunities facing the public sector. GOVonomy connects public organizations with new technology products and productized services from growth companies and helps arrange strategic discussions, demonstrations, and pilots for increased understanding, education, purchasing, and integration.

About the author: Nitin Pradhan is a former CIO of DOT, and the co-founder of GOVonomy, an initiative to introduce cost-effective, cutting-edge, targeted technologies that specifically address the challenges and opportunities facing the federal, state, and local governments. He can be reached viaLinkedIn or followed on Twitter.

Inappropriate?

While the weather’s tip top, the May 7 Senate Appropriations Subcommittee Hearing on Federal IT investments would have left Bill Murray with a chill. While the Ghostbuster suffered Groundhog Day in Punxsutawney, even he’d be scared by the déjà vu in D.C. For those who follow these things – the hearing sounded and tasted like last year’s hearing. Did OMB see its shadow – and if so, does that mean more accountability or six more weeks of IT left out in the cold?

This was the annual appropriator hearing on Fed IT spending. The questions here – is Fed IT’s behavior appropriate, and will the Hill change its appropriation? Rather than simply report on who said what, we wanted to follow up with Senator Mikulski (D-Md.), the appropriations committee chair, to find out about next steps. Not to be inappropriate, but does the Hill plan to follow up on its comments – will we see any change in Fed IT appropriations?

The witness line up for the hearing included Federal CIO Steven VanRoekel and GAO IT director Dave Powner, as well as the administrators from GSA and OPM.

Read My Lips

To give you the net upfront, Senator Mikulski threw down hard in the hearing – she’s not happy about what she heard. And I quote – “We have spent billions of dollars on projects that have languished for years, only to be canceled or replaced with something else. This is inexcusable.”

Now You See IT, Now You Don’t…

Okay, now back to the stuff of the hearing. Pressed on IT savings, Steven VanRoekel said OMB has delivered $2.5 billion in savings from its PortfolioStat – and that we’ve already realized $1.9 billion in savings. To quote Cuba Gooding Jr. – Show me the money! But VanRoekel’s no Jerry Maguire. In this era of open government, OMB won’t release its CIO assessments. So, we don’t get to verify which agencies have realized savings, how they’ve achieved this, or where that saved money has been reprogrammed?

Too Big to Fail?

And, of course, the “savings” in Fed IT aren’t reducing the total IT spend – they’re being ploughed back into IT modernization. If government were a regulated industry, this type of accounting wouldn’t pass the smell test.

GAO Takes the Gloves Off

Dave “Rocky” Powner provided a reality check for the folks ringside. He hit VanRoekel with a series of rib shots – swinging hard at OMB’s $2.5 billion savings. “Based on our work, there are over 200 PortfolioStat initiatives that agencies are working on to eliminate at least $5.5 billion in duplicate spending.” Powner jabbed at the IT Dashboard – noting too many agencies have thrown in the towel on updates. Seems DoD’s listening to GAO. Here’s a DoD memo requiring components to do better on the Dashboard.

To Be Continued…

We followed up with Senator Mikulski’s office to get a sense of plans for next steps.  We hope the Senator plans to take some real action, but know she’s a busy lady.  Action needs to be had – there’s a reason why we don’t have a sequel to Groundhog Day.

50 First Dates

If there’s no accountability, then we’ll see no change – it’s 50 First Dates. And, speaking of dates, if there’s no enforcement, I wouldn’t bother putting next year’s Federal IT appropriations hearing on your calendar. Better to stay home and take in a good movie.

Can the Cloud Prevent Insider Threats? Some Say Yes

The cloud is a lot of things.

Is it also a cyber security tool? Maybe so.

Rep. Darrell Issa made an interesting observation this week at the Cloud Computing Caucus Advisory Group’s discussion about cloud computing and cyber security.

Because the National Security Agency – like so many other Federal agencies – still relies in part on legacy systems, it made itself more vulnerable to an insider attack, said the co-chair of the Congressional Cloud Computing Caucus.

The inference – storing data in the cloud likely could have prevented Edward Snowden from poaching top secret records from the NSA.

We’ll never know if the congressman’s statement is true, but it certainly speaks to the confidence Rep. Issa has in the cloud, which he referred to as a game changer.

He’s not alone.

A panel of speakers who followed Rep. Issa at the Cloud Computing Caucus Advisory Group’s packed-house meeting on the Hill agreed cloud computing provides agencies many benefits, including security.

Defense Department Acting CIO Terry Halvorsen and National Security Agency CTO Patrick Dowd each said their move to the cloud has resulted in significant financial savings.

Cloud computing also provides operational benefits, said NIST Deputy Division Chief of Computer Security Matthew Scholl, and helps companies stay competitive. He described the cloud as an “undeniable force” in business, but said that in the Federal government concerns remain about whether moving to the cloud will affect an agency’s agility.

The panelists said moving to the cloud can improve compute capabilities, but that every agency has to figure out on its own whether cloud helps them fulfill their business mission while providing the same level of service. Even though they threw that word of caution out there, the panelists also gave cloud a thumbs-up on all counts.

Agencies should understand that while moving to the cloud represents a big cultural change because people like to have their data next to them, cloud computing is “not that different and they’ll still have access to their data,” said Halvorsen, who attended the Advisory Group’s meeting on his final day as Navy CIO before taking over as DOD CIO.

So the cloud saves money, doesn’t hinder computing, and might prevent an insider attack. These guys delivered quite an endorsement of cloud computing. So let us know – is your agency moving to the cloud? Is it moving fast enough? What are the hurdles?

The Cloud Computing Caucus Advisory Group will hold its next meeting in September. Keep up with them and register for the next event here http://cloudcomputingcaucus.org/.

alt

Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Congress gets its (DATA) Act Together

Everything about the DATA Act makes sense. Except that it’s 2014 and lawmakers should have passed this legislation years ago.

But, hey – better late than never, and President Obama signed the bill last Friday.

There’s a lot to like about the DATA Act, bipartisan legislation sponsored by Sens. Mark Warner (D-Va.) and Rob Portman (R-Ohio).

Try to follow government spending on any program now and you’re likely either to run into a brick wall or develop a crippling headache that stops you in your tracks.

The DATA Act lets the sun shine in and could lead to savings of billions of dollars a year by shedding light on spending and giving Feds the tools to end duplication, waste and fraud.

“In the digital age, we should be able to search online to see how every grant, contract and disbursement is spent in a more connected and transparent way through the federal government,” Warner said after unanimous passage of the bill.

Amen.

Rep. Darrell Issa, who sponsored the original legislation, predicted Feds will save $500 billion by eliminating duplication and identifying waste.

Accountability is good.

So is standardization, and the law sets standards to make all spending data adhere to a uniform set of guidelines, according to the Federal Times. That means Congress will gain the ability to compare data across agencies.

Big hurdles remain.

Standardizing data is easier said than done. The community of Federal grant recipients has identified as many as 1,100 different data elements that could be included in standard reporting.

And it’s a big program that asks a lot of agencies. The final language requires everything the federal government spends at the appropriations account level to be published on USASpending.gov, with the exception of classified material and information that wouldn’t be revealed in response to a Freedom of Information Request.

Implementation also will represent a huge challenge.

The new law begins with a two-year pilot program during which the Treasury Department and the Office of Management and Budget will develop uniform coding for federal spending data and develop ways to publish it in machine readable and downloadable formats.

The law is a tip of the hat to the fine work of the non-partisan Recovery Board, whose data analytics work identifies and prevents improper payments and served as an example of what could be done more broadly. It’s also a hat tip to the efforts of the Data Transparency Coalition, which helped write the first version of the legislation three years ago.

Let us know what you think of the law. Will it work? Is it enough? For more insight, follow the conversation about Big Data at MeriTalk’s Big Data Exchange https://meritalk.com/bdx
Feel like sharing something Noteworthy? Post a comment below or email me at bglanz@300brand.com.

Bill Glanz is the content director for MeriTalk and its Exchange communities. In the past 14 years, he has worked as a business reporter, press secretary, and media relations director in Washington, D.C.

Walter Bigelow – Chief of IT Systems ATF&E – Mountain Man?

So, you think you know Walter Bigelow at ATF&E?  Former Army, DoD, and NASA, he’s the sober hand in Uncle Sam’s most combustible IT shop.  Well it’s a long way from his new-fangled office in NE Washington, D.C. to the top of Mount Rainier in Washington state – but that’s where Mr. Bigelow’s heading, again.  A real mountain man – not exactly the stereotype of a computer geek.  Explains why Walter and Simon Szykman hang together.

Head in the Clouds?
His appetite for cloud befits somebody with an appetite for heights.  He’s an active participant in the Cloud Computing Caucus Advisory Group.  That said, he couples vision with steely pragmatics.  Nobody knows the reality of how to manage a government IT operation better than Bigelow.  Yes, he can be a cynic – that’s why he’s my go-to expert on why the latest new-fangled IT idea will fall off the mountain in D.C.  His attitude, wit, and purchase on reality come through loud and clear in this latestZoom installment.

Motorhead?
One additional aspect on Walter, he likes to get oil under his fingernails.  We share an affinity for old British jalopies.  Walter rebuilt the gearbox on his MGB, on his kitchen table, a few days before his wedding.  Hardware problems don’t leave him stranded by the side of the road.

Go Bigelow
So, keep an ear open for news on Mr. Bigelow’s ascent.  At more than 14,000 feet, Mount Rainier is the loftiest peak in the lower 48.  It takes three days to reach the summit.  Read more about his journey in the latest installment of Zoom.

Hunk of Burning Love or Hound Dog?

Elvis released “Hound Dog”on June 5, 1956. OMB picked the same date, 58 years later, for its FedRAMP deadline. Will it be a hunk or a howler?

The FedRAMP rockers – agencies, CSPs, and 3PAOs – who’ve invested millions in FedRAMP certifications, have Suspicious Minds. They’re All Shook Up over concerns that OMB’s not going to enforce the deadline – leaving agencies free to buy non-FedRAMP cloud solutions. And, those that bought the FedRAMP record, Crying in the Chapel.

Return to Sender?

MeriTalk chatted with OMB to understand EOP’s FedRAMP enforcement plans. According to OMB, “agencies have to be FedRAMP compliant, not CSPs.” OMB asserts that the deadline is designed to “put agencies on notice.” OMB acknowledged there needs to be more communication around what FedRAMP means.

A Little Less Conversation

Here’s the Q&A with OMB:

1. Can agencies still buy/specify non-FedRAMP compliant cloud services after the deadline?
 
 Yes.  But agencies need to get their CSPs into the process.  But  that does not mean the full GSA and JAB process.  Agencies can  certify their own CSPs – see HHS’ experience.

(more…)

Who’s Your Favorite Beatle?

J, P, G, or R? Do You Want to Know a Secret? It’s 50 years since Shea Stadium. She Was Just 17 – and so’s O’Keeffe & Company, MeriTalk’s sister organization. They Say It’s Your Birthday. So, we’re hosting the Fab 4 on May 15 at the State Theatre in Falls Church. You’re invited to Twist and Shout with us.

Know it’s still a few weeks away, but Tomorrow Never Knows. We’re offering you a Ticket to Ride. I am a Loser and I Don’t Want to Spoil the Party – here’s your chance to Please, Please Me by joining us from Across the Universe, Norwegian Wood, or Strawberry Fields.

Register here. It Won’t Be Long. Don’t believe those who say Hey, You’ve Got to Hide Your Love Away. Here’s a real Nowhere Man saying I’m Happy Just to Dance With You. Even if it looks like I’m Only Sleeping.

Don’t Let Me Down. I am the Walrus And Your Bird Can Sing. All You Need is Love to get in. If you miss it, then Happiness is a Warm Gun.

Back to the chorus. Join us Thursday, May 15, at 5 pm at the State Theatre in Falls Church. It’s easy to get there. As Jim Beaupre will attest – baby, you can Drive My Car.

So who’s my favorite Beatle? We Can Work It Out – which song is not like the others? Reserve your spot today – you might hear me play Love Me Do on the harp. Oh, did I mention we have a band?

OKCO 17 Anniversary