<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Just Enough Technology &#187; Risk</title>
	<atom:link href="http://justenoughtechnology.com/tag/risk/feed/" rel="self" type="application/rss+xml" />
	<link>http://justenoughtechnology.com</link>
	<description>The passion to see business leverage technology both powerfully and economically</description>
	<lastBuildDate>Thu, 20 May 2010 00:18:00 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Another Security Breach</title>
		<link>http://justenoughtechnology.com/another-security-breach/</link>
		<comments>http://justenoughtechnology.com/another-security-breach/#comments</comments>
		<pubDate>Tue, 02 Feb 2010 05:54:28 +0000</pubDate>
		<dc:creator>Dave Ranck</dc:creator>
				<category><![CDATA[Business and Technology]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[Risk]]></category>
		<category><![CDATA[Software Development]]></category>

		<guid isPermaLink="false">http://justenoughtechnology.com/another-security-breach/195/</guid>
		<description><![CDATA[From InternetNews.com :
Hundreds of thousands of BlueCross customers are in for a scare. This week, the insurance company is sending out notifications to its customers fessing up to a significant data breach that saw a thief make off with 57 hard drives from a call center in Tennessee.
The hard drives contained encoded &#8212; but not [...]


Related posts:<ol><li><a href='http://justenoughtechnology.com/what-is-an-open-web/' rel='bookmark' title='Permanent Link: What is an open web?'>What is an open web?</a></li>
<li><a href='http://justenoughtechnology.com/eco-friendly-pc-disposal/' rel='bookmark' title='Permanent Link: Eco-Friendly PC Disposal'>Eco-Friendly PC Disposal</a></li>
<li><a href='http://justenoughtechnology.com/enable-joins-websitespark/' rel='bookmark' title='Permanent Link: Enable Joins WebSiteSpark'>Enable Joins WebSiteSpark</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>From <a href="http://www.internetnews.com/security/article.php/3860596/BlueCross%20Hit%20With%20Massive%20Data%20Breach.htm" target="_blank">InternetNews.com</a> :</p>
<blockquote><p>Hundreds of thousands of BlueCross customers are in for a scare. This week, the insurance company is sending out notifications to its customers fessing up to a significant data breach that saw a thief make off with 57 hard drives from a call center in Tennessee.</p>
<p>The hard drives contained encoded &#8212; but not <a title="Encryption - Wikipedia, the free encyclopedia" rel="nofollow" href="http://en.wikipedia.org/wiki/Encryption" target="_blank">encrypted </a>&#8211; records of phone calls and video files containing sensitive patient information. <a href="http://www.esecurityplanet.com/">eSecurity Planet</a> has the details on the breach.</p></blockquote>
<p><span id="more-195"></span>Personally Identifiable Information (PII) – it drives companies crazy. We need to obtain it to provide services, but if we mishandle it, we are in for big trouble. This latest case shows that security is an integrated problem. Often we concentrate on having strong passwords and software controls to limit access and guarantee that data only goes to the users who should have access. Yet we leave the front door open by not protecting physical access to servers and thereby the data that is on them. Think of the laptops that were misplaced a while ago. Had they been encrypted, the exposure would have been under control but the company’s reputation would still have been damaged. People don’t believe encrypted data is safe. If a thief can get the laptops or the drives in this case, the average person fears that the data is compromised.</p>
<p>In software and system design we need to pay attention to every aspect of loss prevention and that includes non-technical preventative security measures. I once had a client who spent a large sum of money on a hand reader for the data center main door, but left their database exposed to direct TCP access with the default system admin user name and password still set. Ouch. It is easy to get caught up finding technical solutions to problems like data security and forget to lock the front door at night. In this latest case encrypted drives would go a long way in preventing actual data loss, but once the data physically leaves the control of the company, the company cannot prove that the data was not compromised.</p>
<p>Lesson to be learned: Do not forget the real issues. Address the whole problem homogenously, taking all aspects into account.</p>


<p>Related posts:<ol><li><a href='http://justenoughtechnology.com/what-is-an-open-web/' rel='bookmark' title='Permanent Link: What is an open web?'>What is an open web?</a></li>
<li><a href='http://justenoughtechnology.com/eco-friendly-pc-disposal/' rel='bookmark' title='Permanent Link: Eco-Friendly PC Disposal'>Eco-Friendly PC Disposal</a></li>
<li><a href='http://justenoughtechnology.com/enable-joins-websitespark/' rel='bookmark' title='Permanent Link: Enable Joins WebSiteSpark'>Enable Joins WebSiteSpark</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://justenoughtechnology.com/another-security-breach/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Risk Management in Requisite Pro</title>
		<link>http://justenoughtechnology.com/test-process/</link>
		<comments>http://justenoughtechnology.com/test-process/#comments</comments>
		<pubDate>Wed, 02 Dec 2009 10:23:01 +0000</pubDate>
		<dc:creator>Dave Ranck</dc:creator>
				<category><![CDATA[Business and Technology]]></category>
		<category><![CDATA[Process (SDLC)]]></category>
		<category><![CDATA[Project Management]]></category>
		<category><![CDATA[Software Development]]></category>
		<category><![CDATA[Planning]]></category>
		<category><![CDATA[Process]]></category>
		<category><![CDATA[Risk]]></category>

		<guid isPermaLink="false">http://justenoughtechnology.com/?p=53</guid>
		<description><![CDATA[Risk Management is an important part of project success. Here is one way to perform Risk Management using Rational Requisite Pro.


Related posts:<ol><li><a href='http://justenoughtechnology.com/why-just-enough-technology/' rel='bookmark' title='Permanent Link: Why Just Enough Technology?'>Why Just Enough Technology?</a></li>
<li><a href='http://justenoughtechnology.com/why-do-we-need-software-architects/' rel='bookmark' title='Permanent Link: Why Do We Need Software Architects?'>Why Do We Need Software Architects?</a></li>
<li><a href='http://justenoughtechnology.com/test-pm/' rel='bookmark' title='Permanent Link: A Programmer&#8217;s Bill of Rights?'>A Programmer&#8217;s Bill of Rights?</a></li>
</ol>]]></description>
			<content:encoded><![CDATA[<p>Risk Management is an important part of project success. Here is one way to help perform Risk Management using Rational Requisite Pro. Risks are a part of every project. Successful projects successfully manage risks. You can never completely eliminate risk, so it must be dealt with proactively.</p>
<p><span id="more-53"></span></p>
<table border="0" cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>From an older article:</td>
</tr>
<tr>
<td>Risk management is   an important part of Project Management. In my mind it is one of the most   important aspects of the development process. Throughout the lifecycle of a   project, risks will be discovered that, if not dealt with, can cause the   project to fail. By tracking risks and dealing with them head-on and early in   the project, the possibility of project success can be greatly enhanced.</p>
<p>Rational Requisite   Pro is a good tool for managing requirements, but it has no in-built ability   to handle risks. They can be assigned to a requirement as an attribute, but   there is no linkage to a Risk List document or Risk Management Plan. I have   outlined a simple way to add this capability to Req Pro. to add Risk   Management to Req Pro you:</p>
<p>1. Create a   requirement of type Risk<br />
2. Create appropriate attributes for the Risk requirement type<br />
3.  Create Outlines and Document Types to add you Risk documents to your   project<br />
4.  Use a view to manage your Risks</p>
<p>There may be other   ways to accomplish this within Req Pro, but this is one way that works for   us. Follow the steps below to add Risk Management to your project.</p>
<p>Create the Risk   Requirement Type</p>
<p>1.     Select the project in the Explorer and click File &gt;   Properties. The Project Properties dialog box appears.</p>
<p>2.     Click Add: The Requirement Type dialog box appears.</p>
<p>3.     Type Risk for the Name and a Description (up to 255   characters) for the requirement type.</p>
<p>4.     In the Initial Requirement # text box, type the number to be   used for the first requirement of the requirement type you are creating or   modifying. Requirements are automatically numbered as they are created,   starting with the number in this text box. The default number is 1, but you   can change the number to any positive integer.</p>
<p>5.     If you want to allow requirements of this requirement type to   be used in cross-project traceability, select the Allow External Traceability   check box.</p>
<p>6.     In the Requirement Must Contain text box, type or modify a   single word or phrase that must be included in every requirement of this type   that is created, up to 32 characters. This box is optional, and is not   case-sensitive.</p>
<p>7.      In the Requirement Tag Prefix text box, type RISK</p>
<p>8.     Select a Requirement Color and a Requirement Style to be used   in documents for requirements of this type. The default is blue, Double   Underline.</p>
<p>9.     Click OK in each dialog box.<br />
Create Risk Attributes</p>
<p>You probably want to   create special attributes for your new Risk requirement.I suggest you create   at least the following 2 attributes (you can modify existing attributes if   you wish instead of creating new ones):</p>
<table border="1" cellpadding="0" width="75%">
<tbody>
<tr>
<td valign="top" width="100px"><strong>Attribute</strong></td>
<td valign="top" width="100px"><strong>Values</strong></td>
<td valign="top"><strong>Use</strong></td>
</tr>
<tr>
<td valign="top">Status</td>
<td valign="top">Open</td>
<td valign="top">Close or defer mitigated risks</td>
</tr>
<tr>
<td valign="top"></td>
<td valign="top">Deferred</td>
<td valign="top"></td>
</tr>
<tr>
<td valign="top"></td>
<td valign="top">Closed</td>
<td valign="top"></td>
</tr>
<tr>
<td valign="top">Ranking</td>
<td valign="top">Integer</td>
<td valign="top">A ranking of impact on project.     Use to create Top Ten List</td>
</tr>
<tr>
<td valign="top">Mitigation</td>
<td valign="top">Text</td>
<td valign="top">Strategy for risk mitigation</td>
</tr>
</tbody>
</table>
<p>To create the   attributes:</p>
<p>1.     Select the project in the Explorer and click File &gt;   Properties. The Project Properties dialog box appears.</p>
<p>2.     Click the Attributes tab.</p>
<p>3.     Select the requirement type from the list.</p>
<p>4.     Click Add. The Add Attribute dialog box appears.</p>
<p>5.     Type a Label for the new attribute, and select an attribute   type in the Type list.</p>
<p>6.     For list-type attributes, type the values you want to assign   to the value list in the List Values text box. The maximum length for a list   value is 32 characters. Order the values in the list as you want them to sort   in the Requirement Properties dialog box, Attributes tab. For list-type   attributes, you can set the default value using the Default button below the   Values per Attribute list.</p>
<p>For entry-type attributes, type a default value in the Default Value list   box, if appropriate.</p>
<p>7.     To hide attributes of the selected requirement type from all   Rational RequisitePro users in a view and in the Requirement Properties   dialog box, select the Hidden from display check box.</p>
<p>8.     To automatically mark traceability or hierarchical   relationships as suspect when the attribute is changed, select the Change   affects suspect check box.</p>
<p>9.     Click OK to close each dialog box.</p>
<p>Create Outlines</p>
<p>Note: the .dot files   list below are standard RUP artifacts. You<br />
may of course use   any document you choose.</p>
<p>Copy rup_rskpln.dot   to C:\Program Files\Rational\RequisitePro\outlines (or your outline folder   location)<br />
Create a new text document with the following 3 lines (each line must end   with a carriage return):</p>
<p>RUP Risk Plan<br />
Risk Management Plan and Risk List<br />
rup_rskpln.dot</p>
<p>Save as   rup_rskpln.def in the Outlines directory</p>
<p>Copy rup_rsklst.dot   to C:\Program Files\Rational\RequisitePro\outlines (or your outline folder   location)<br />
Create a new text document with the following 3 lines:</p>
<p>RUP Risk List<br />
Risk List<br />
rup_rsklst.dot</p>
<p>Save as   rup_rsklst.def in the Outlines directory</p>
<p>Create Document   Types</p>
<p>1.     Select the project in the Explorer and click File &gt;   Properties. The Project Properties dialog box appears.</p>
<p>2.     Click the Document Types tab.</p>
<p>3.     Click Add. The Document Type dialog box appears.</p>
<p>4.     In the Name text box, type: Risk Management Plan</p>
<p>5.     In the Description text box, type: Project Risk List and   mitigation plan</p>
<p>6.     In the File Extension text box, type: rsk.</p>
<p>7.      Select the Risk default requirement type</p>
<p>8.      Select the RUP Risk Plan outline</p>
<p>9.     Click OK</p>
<p>10.   Do   the same for Risk List but use the following properties:<br />
Name: Risk List<br />
Description: [Enter your description]<br />
File Extension: RSKL</p>
<p>11.    Click   OK.</p>
<p>12.   Click   OK to close the Project Properties dialog box.</p>
<p>You can now add a   Risk Management Document and a Risk List to your Risk Package and add Risk   requirements.</p>
<p>Create Views</p>
<p>Create a view for   Risks. This view will be used to export a list of<br />
risk to be imported into the Risk List document. You should include<br />
those attributes you want in the document and sort on Ranking or<br />
Status and Ranking</p>
<p>To create and   maintain a Risk List:</p>
<p>1.     Add requirements of type Risk and set attributes appropriately</p>
<p>2.     You can set traceability to other requirement types such as   Use Cases</p>
<p>3.     Add a Risk List document to a package in your project and   optionally<br />
a Risk Management Plan document.</p>
<p>4.     Export your risk list to your Risk List document<br />
a. Periodically export the view you created for   Risks to a Word document.<br />
b. Open the Risk List document and use Insert -&gt;   File to insert the exported risk list into your risk list document.</p>
<p>Summary</p>
<p>By creating a   requirement of type Risk, you can use Requisite Pro to trace risks to other   requirements. In this way, you can always know what requirements are affected   by certain risks. You can also maintain your risks in the Req Pro database   and semi-automatically update your risk list document.</td>
</tr>
</tbody>
</table>


<p>Related posts:<ol><li><a href='http://justenoughtechnology.com/why-just-enough-technology/' rel='bookmark' title='Permanent Link: Why Just Enough Technology?'>Why Just Enough Technology?</a></li>
<li><a href='http://justenoughtechnology.com/why-do-we-need-software-architects/' rel='bookmark' title='Permanent Link: Why Do We Need Software Architects?'>Why Do We Need Software Architects?</a></li>
<li><a href='http://justenoughtechnology.com/test-pm/' rel='bookmark' title='Permanent Link: A Programmer&#8217;s Bill of Rights?'>A Programmer&#8217;s Bill of Rights?</a></li>
</ol></p>]]></content:encoded>
			<wfw:commentRss>http://justenoughtechnology.com/test-process/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
