The biggest response with 38% of respondents voting, was “Dealing with Politics”, which seems to be a common theme for most of us in the corporate world.  In second place, at 26% response each, were “Pressure to execute sooner than you want”, and “Getting the right skill sets on your team”

Wisegate regularly publishes these types of polls on its member-only site.  Our members tell us its refreshing to see that they share the same struggles as their peers – that they’re not alone.

If you are a senior-level IT professional and would like to see more polls like this from Wisegate, go to Wisegate and request an invitation to join.

In this report, Wisegate members give practical advice on successfully implementing IT projects, and share lessons learned from projects gone wrong.

This is the information that can make or break a successful project and the type of information vendors will never tell you when they are asking you to sign the contract.

Whether you are looking for specific pointers on how to run a successful Governance, Risk and Compliance (GRC), Identity and Access Management (IAM), or Security Information and Event Management (SIEM) project – or just looking for success tips for any project – this is your chance to learn from some of the best IT leaders in industry.

In this report, you will learn:

• Why you should send your technical staff to training before you sign with a vendor
• The importance of working out ownership issues before you start a project
• What are the common pitfalls that lead to failed IT projects
• Why IT projects always take longer than expected and how to set realistic expectations
• Tips on how to anticipate and overcome project obstacles

With practical tips based on real world experiences from CISOs and IT executives, this paper offers useful advice to help IT leaders run successful information security and compliance projects.

Download the report here.

“Being able to tap this kind of knowledge basically on demand is a huge advantage”.  – Martin Sandren

Learn More about Wisgate.

The response to the poll from other Senior-level IT professionals shows an interesting split in the industry. Almost half, 41%, actually do use outside services, while another 17% are considering this option.  About a third of respondents, 35%, say they do not use outside services, and 29% say they have dedicated staff that do the job.

If you are a senior-level IT professional and would like to vote on this poll, or see more polls like it from Wisegate members, just go to Wisegate and request an invitation to join.

In this new report, IT Infrastructure & Operations leaders from the Wisegate community discuss their experience with different Disaster Recovery (DR) solutions, and share their advice on how to develop a cost-effective DR plan and get senior management buy-in.

There are numerous options available for insuring recovery of information systems in a disaster scenario, from drop-ship services to hot sites, depending on your business requirements and budget. Whether you are just starting out, or updating your current DR plan – this is your chance to hear from your peers about their experiences with different DR solutions, and how they approached building a successful but cost-effective DR plan.

The new report covers key DR topics, such as:

• Pros and cons of various DR solutions – from drop-ship services to hot, warm, and cold sites
• How to decide on critical vs. non-critical services, and different approaches for each
• Ways to get senior management buy-in and manage expectations
• Key considerations for building a successful but cost-effective DR plan

With practical tips based on real world experiences from IT leaders, this report offers useful advice to help you better understand DR issues and challenges, and implement an effective DR plan.

Download a copy of the report here.

…

In a recent InformationWeek article about Wisegate, Debbie said ”Wisegate feels like something new.  It’s not a LinkedIn, it’s not a Facebook–thank God–but it’s something very much needed in my industry, a sharing forum that feels secure.”

Check out the entire InformationWeek article for more quotes from Debbie and more info on Wisegate.

The clear winner, with 80% of respondents voting, was Bring Your Own Device (BYOD).  A hot item in 2011, BYOD looks to continue to be at the top of the list for Security Executives in 2012 as more employee (and CEO) owned devices make their way into the enterprise (for more insights from these same Security Executives on creating effective BYOD policies, check out the new Wisegate Community Report).

In second place, with 51% of respondents voting, is Cloud computing – driven by the need to secure new Cloud infrastructure and services that are making their way into the enterprise.  Social networking and Hacker threats each received 22% of the voting, and also look to be hot items for Security Exec’s in 2012.

If you are a senior-level IT professional and would like to vote on this poll, or see more polls like it from Wisegate members, just go to Wisegate and request an invitation to join.

An effective RBAC program offers significant benefits for an organization in terms of improved security, compliance and administration, but can be a very challenging undertaking. Whether you are trying to figure out how to get started with RBAC, or just wanting to know how others are handling ongoing RBAC challenges – this is your chance to learn from those who have been through it, and know how to make RBAC successful.

This new report covers key RBAC topics, such as:

» What to do with all those legacy mainframe and Active Directory roles
» The best time to introduce RBAC into your access management program
» Who should own the Roles, and how they should be managed
» How many Roles are “just right” for your organization
» Requirements to consider in selecting a Role Management System

Download the report now.

“The ability to ask questions and get responses from other people in the industry. That’s been very helpful.” - Tom McCreary

For more details, or to comment, check out his blog post at http://bit.ly/psti2h.

The following are some excerpts from the post:

• “We see ‘baked in’ and ‘risk based’ in the same sentences. We hear it at conferences and see it in information security strategic plans and programs. The problem is, you cannot have security ‘baked in’ while having a ‘risk based’ information security program. They are mutually exclusive. In fact, risk based anything means that we are exposed to daily and even hourly failures.”
• “We build skyscrapers based upon fire codes, building codes, environmental requirements, safety codes and the like. They stand tall against force majeure. Yet we build information systems like we throw together a lean-to on a weekend camping trip. It will suffice and the risk of rain is only 30%.”
• “If security is baked in, then risk around controls is removed since it is built to code and part of the system.  If security is baked in, it truly is a cheaper option for the lifecycle of the system.”
• “Until such time as security is truly baked in and risk goes the way of the dodo, we will continue to suffer breaches and severe loss of data. They cannot exist together in information security. They are mutually exclusive and only one guarantees exploitation.”

See the rest of the post with more details and insights at http://bit.ly/psti2h.

To find out more about our great Wisegate members, or how to become a member yourself, just visit us at wisegateit.com.  If you think you qualify as a senior IT professional, you can even request an invitation to join directly from the site.