Tag: 監査

Development, Governance, Risk, and ComplianceLeave a comment

Another WorkPapers Milestone – Desktop Release

SysRisk

Lately, in this blog I try not go on about my pet software project, but cannot help to brag about some milestones. So, I’ve finally done it! About four years ago when I finished the RealBASIC version of WorkPapers (v2x) for Mac and Windows, I started to create a web version, but never got to it…. just could not stretch my time  to make yet another version. The press release is here.This time around I started with the web version of WorkPapers, then went to the drawing board with an almost identical desktop version – interface and function. This led … Continue reading Another WorkPapers Milestone – Desktop Release

Development, Governance, Risk, and ComplianceLeave a comment

WorkPapers Desktop Coming Soon

SysRisk

The upcoming release of WorkPapers desktop software will be the third major release version written in yet a third, different programming language. I started with the release of the original WorkPapers in late 2004, which was a Mac only version written in Objective-C/Cocoa. Soon after that release, I developed a RealBASIC version of the software, since there was an obvious demand for a multi-platform version of the software. This second version sold quite well, but with RealBASIC, was real difficult to maintain and customize as much as end users (and myself) wanted.To meet the multi-platform demand and the long range … Continue reading WorkPapers Desktop Coming Soon

Governance, Risk, and Compliance, SocietyLeave a comment

‘Cloud’ Consultants

SysRisk

You know when something has gone a bit far and it’s time to differentiate when so-called professionals start (calling themselves that) actually making a profession out of something. Huh? Back in 1987 when I was first hooked up to the internet as an individual through The Well community in San Francisco, I would have never imagined that just six years later job advertisements would appear for full-time email system administrators.  That came to pass and by about 2000 I was not interested in the administrative side of the business of IT any more and started working on consulting projects. Right … Continue reading ‘Cloud’ Consultants

Cybersecurity, Governance, Risk, and ComplianceLeave a comment

WorkPapers Software, Java, Google Web Toolkit, and DCMA

SysRisk

Hi All!! Still alive and kicking. Been a couple weeks since the last posting but have been hard at work putting together another platform iteration of WorkPapers software. So far, I have created the audit working papers management software solution in Cocoa and RealBasic, so this time around thought I would try one more iteration in Java and Ajax. For more information about WorkPapers, please see the projects page on this web site. This will give a cross-platform solution that will sync with a web-base Ajax interface… sexy! So now that I am in advanced stages of this programming iteration, … Continue reading WorkPapers Software, Java, Google Web Toolkit, and DCMA

Governance, Risk, and ComplianceLeave a comment

The Next Wave – Preventive Security and Statisticians

SysRisk

Over the past couple weeks I have concluded that enough (bad) breath has been spent ranting about how system and security auditors really are missing the mark. However, one cannot reasonably just point a finger in one direction – it takes two to tango, so it is now time to point out what CIOs and administrators of secure environments should start to consider in order to prevent incidents. And along the way add a rant or two about how the average CIO (too) is an administrative paper-pushing, policy guru that does not really have real systems administration experience – most … Continue reading The Next Wave – Preventive Security and Statisticians

Governance, Risk, and ComplianceLeave a comment

IT and Infosec Auditor Shortcomings – SANS Joins The Dialog

SysRisk

Actually, SANS has been in the dialog, but they put out an article that reinforces the issue of how IT and Infosec auditors – and many consultants alike – are not delivering the proper value to the market. I wrote this article last year that ranted on the issue, and many responded through email and comments to show support of the view. This was an issue that I noticed about five years ago as ISC2, ISACA, and other organizations really focused on increasing membership and increasing revenues. Also, from my experience in the Big Four over the years, I noticed … Continue reading IT and Infosec Auditor Shortcomings – SANS Joins The Dialog