Simplifying SCORE, again

How can we simplify the SCORE framework – Strengths, Challenges, Options, Responses, Effectiveness – to make it more accessible as a practical, more strategy-oriented replacement for SWOT? As summarised in the post ‘More on simplifying SCORE‘, the way to use SCORE is sort-of

Using Risk Management Standards: A Q&A with Ben Tomhave, Security Architect and Former Gartner Analyst

By The Open Group IT Risk Management is currently in a state of flux with many organizations today unsure not only how to best assess risk but also how to place it within the context of their business. Ben Tomhave, … Continue reading

Information Security: What really works to build awareness

Sharing knowledge and good practices is one of the core values of BiZZdesign. We regularly organize and contribute to online and offline seminars, conferences and round tables. Recently there was a very successful seminar on Enterprise Risk and Security Architecture for Dutch financial institutions. After presentations on “Security is not an IT problem”, and the often lacking connection between policies and measures in many organizations, we had a World Café on various topics. The blog covers the findings around the topic ‘How to create and sustain security awareness’ Please share your good and worst practices by reacting to this blog.

Enterprise Architecture is Like a Good Beer

I love beer commercials. A couple of years ago, Miller Light created an ad campaign (later regarded as one of the ten best campaigns ever) in which consumers of the frothy brew disagreed over their motivations for choosing Miller Light. "Tastes Great", one faction would yell, "Less Filling" says the others. Between 1973 and 1978, Miller sales exploded from just under 7 million barrels to over