Standards

24 days ago

The Open Group Open Footprint™ Forum Global Event Highlights Blog

by

Last week, The Open Group Open Footprint™ Forum (OFP) held its first virtual event, June 23-24, 2021. It brought together experts from across the globe to introduce and demonstrate the work that has gone into the Forum since it launched in August 2020. Speakers, from a plethora of industry leading organizations such as Accenture, AWS, Deloitte, ERM, IBM, Infosys, Shell, WBCSD, and Wipro hosted sessions outlining the mission of the Open Footprint Forum, explanations of the Open Footprint Data Platform, as well as live demonstrations of the Platform to show its applicability to all industries.

2 months, 20 days ago

The Open Group ‘Open Digital Standards’ Virtual Event April 26 – 28, 2021 – Highlights Blog

by

As organizations across all industries strive to become Digital First, open standards are more important than ever for providing the necessary frameworks and career development tools to drive transformation progress.

This week, our ‘Open Digital Standards’ Virtual Event April 26-28 brought together experts from across the globe to provide guidance for the creation and implementation of open digital standards. It was fantastic to see 1,300 attendees from more than 85 countries gather virtually to discuss various approaches and best practices for making sense of the evolving business landscape and delivering digital products and services.

2 months, 27 days ago

Enterprise Architecture, Open Standards, and Aircraft Certification

by

Aircraft safely is of interest to everyone around the world. To address aircraft safety there are certification processes in place where two organizations with the greatest involvement are the FAA (Federal Aviation Agency) in the US, and the EASA (European Union Aviation Safety Agency) in Europe.

Certification is how the FAA manages risk through safety assurance. It provides the FAA confidence that a proposed product or operation will meet FAA safety expectations to protect the public. Certification affirms that FAA requirements have been met.

4 months, 12 days ago

Implementing Open Agile Architecture practices, with Continuous Architectural Refactoring

by

A description of the author’s recent experience implementing Open Agile Architecture practices on projects. This post focuses on continuous architectural refactoring, particularly planning, understanding and guiding the architecture. Working on an enterprise SaaS application, continuously evolving to support existing and new customers and use cases.

4 months, 12 days ago

Implementing Open Agile Architecture practices, with Continuous Architectural Refactoring

by

A description of the author’s recent experience implementing Open Agile Architecture practices on projects. This post focuses on continuous architectural refactoring, particularly planning, understanding and guiding the architecture. Working on an enterprise SaaS application, continuously evolving to support existing and new customers and use cases.

5 months, 13 days ago

A Shared Language for Supply Chain Security

by

In the world of technology, there are paradigms of language that arise organically and artificially over time. Necessity requires a shared mode of communication for ideas and as a result, descriptors, nouns, and technical designators are created and shared. The problem arises when certain words acquire a surfeit of meaning, so much so that they paradoxically become less meaningful. There are many examples of this but for our purposes, we’re going to look at “Supply Chain Security”.

5 months, 21 days ago

The Open Group ‘Open Digital Standards’ Virtual Event January 25-27, 2021 – Highlights

by

The transition to Digital First has become a necessity for the survival of private and public sector organizations in a post-pandemic world. It was therefore fantastic to see attendees gather virtually over the course of three days to discuss tangible solutions for navigating the challenges we face today. Sessions and workshops were hosted by a plethora of leading industry experts and centered on the development and implementation of open digital standards to address issues critical to the success of a Digital First enterprise.

5 months, 27 days ago

Providing Customer-Driven Value With a TOGAF® based Enterprise Architecture

by

Traditionally, business processes have been the principal mean of interaction with business stakeholders for Enterprise Architects. As for the notion of business capability, it is a more recent concept also often used in enterprise architecture. Business capabilities allow a better understanding of how software applications are supporting the business, as very well explained in this video entitled “TOGAF® Business Architecture: Business Capability Guide”. Often, some new business capabilities have no supporting applications, while other older capabilities have too many. Both concepts alone fail to capture the value that an agile customer-driven organization must undertake to keep and grow its market share with more and more rapid and continuous innovative changes and more informed customers that are forcing them to have more fluid business strategies.

6 months, 4 days ago

Solorigate: A case study for why supply chain security is critical for governments and businesses

by

By Jim Hietala (VP, BD and Security), Andras Szakal (VP and CTO), John Linford Security and OTTF Forum Director) – The Open Group

In potentially the most damaging cyber-supply chain attack ever, a leading IT systems management vendor became the latest hi-tech company to suffer a major cybersecurity breach with wide-reaching consequences. The malware that caused the attack has been dubbed SUNBURST by Microsoft and code-named Solorigate by FireEye, the security consulting firm that uncovered the breach after falling victim to it late last year.

After successfully infiltrating the development environment, attackers were able to observe and learn how to subvert the vendor’s development and operations pipeline. Hackers were then able to maliciously taint the vendor’s product by planting a sophisticated trojan. Once the software, which required broad systems access, was installed in customers’ environments, the attackers were able to leverage the tainted software to exfiltrate sensitive information from within an organization’s network.

6 months, 12 days ago

Reflections on 2020 and Looking Ahead to 2021

by

By Steve Nunn, President and CEO, The Open Group

Happy New Year everyone!

Firstly, I hope that you, your family, and friends, have been able to stay safe during these trying times. So many around the world have lost so much in this COVID-19 pandemic which clearly will be with us for some time yet. We must, however, be heartened by the unprecedented speed with which vaccines have been developed. The delivery and administration of these vaccines has only just begun, of course, but we have good reason to be optimistic about the coming months.

6 months, 26 days ago

Reference Architecture for Healthcare (RA4H) – Core Capabilities

by

This document takes an evolutionary approach to align with and build upon existing or upcoming frameworks, standards, and best-practices, such as the TOGAF® standard, Archimate® Modeling Language, or ISO 9001 for healthcare. All application-related screenshots in this article are based on a prototype, modelled in Enterprise Architect.

7 months, 15 days ago

Updates to the Open FAIR™ Body of Knowledge, Part 3

by

The Open Group Security Forum is thrilled to announce the publication of an update to the Open FAIR™ Body of Knowledge (BoK). The Open FAIR BoK is comprised of The Open Group Risk Taxonomy (O-RT) Standard and The Open Group Risk Analysis (O-RA) Standard. The Open Group initiated a standards effort regarding FAIR ~10 years ago, and these standards define the official, open, vendor-neutral and consensus-developed definition of FAIR.

This blog post is the third of three in a series to describe updates to the Open FAIR™ Body of Knowledge. It will describe specific updates to O-RT to bring it to Version 3.0. The first post described revisions made to both O-RA and O-RT for consistency between the documents; the second post described specific updates to O-RA to bring it to Version 2.0.