The Web is moving on to a new era of openness, mobility, and digital business. The open Web is a platform built on HTTP (the fundamental web protocol), a new generation of HTML, dynamic languages, and wide use of Internet services for everything from video encoding to social graphs to order management and payments. The open Web made its debut in consumer applications; for enterprises, it will power a new generation of customer engagement applications. The open Web will be particularly important to app Internet systems that bridge mobile devices, cloud services, and enterprise applications and data. Forrester recently published a report that will equip application development and delivery leaders with an understanding of the open Web and its potential value.
A new breed of developers is propelling the open Web: young developers who grew up on the Web and develop outside the firewall — primarily producing applications aimed at consumers. Their career expectations were also born of the Web, and they expect openness of information, technology, and expertise. Open Web developers share certain motivations that have shaped the open Web trend. They:
Strive to create great customer experiences.
Craft applications that can reach customers wherever they are.
Leverage customers’ inherent desire to be social.
Deliver applications and new functionality quickly.
Minimize time spent on low-value tasks to focus more on creating business value.
One of the things I enjoy the most about being an industry analyst is that I've spent the past six years meeting some great developers. Personally, I’m not sure I could cover any other technology area then application development. The reason is simple: I see developers as a worldwide force for good (It's almost axiomatic, as the bad apples become "hackers"). Developers innovate, they create, they push technology forward — and they are fun to go have a beer with at the end of the day.
While writing for developers is fun, it’s not always easy. For the past few years, my topic coverage areas have sometimes felt a bit disjointed — almost as if there are two different developer communities out there that I deal with. In the past, I've referred to these groups as the "inside the firewall crowd" and the "outside the firewall crowd." The inquiries I have with the first group are fairly conventional — they segment as .NET or Java development shops, they use app servers and RDBMSes, and they worry about security and governance. Inquiries with the second group are very different — these developers are multilingual, hold very few alliances to vendors, tend to be younger, and embrace open source and open communities as a way to get almost everything done. The first group thinks web services are done with SOAP; the second does them with REST and JSON. The first group thinks MVC, the second thinks "pipes and filters" and eventing. I could go on and on with the comparison.
I’ve been with Forrester for just over a month now. It’s great to be involved with our clients and communities and to be helping businesses across the world evaluate the quality of software suppliers' proposals from a commercial perspective (e.g., is this a great deal or can the supplier do better?). One of the best parts of being at Forrester now is seeing the continuation of the work I did prior to joining Forrester — advising businesses on software contract and pricing negotiations. One thing I noticed then, and continue to hear about now, is the reluctance of software suppliers like IBM, BMC, CA, and Compuware to publish meaningful list prices or to explain how their price book worked or how discounts had been determined. Time and again I had to ask suppliers to un-bundle prices and confirm the basis for the net prices they were proposing. Does anyone else agree with me that pricing should be clear and transparent and not a black art?
Here’s an example of an “art” that should be science: list pricing. While it’s logical to think list pricing is the same foundation upon which all bids are built, that’s actually not the case. Often, I found that my clients were being quoted “list pricing” that was different. Isn’t list pricing supposed to be the same by definition? Which is why you may with good reason doubt the validity of a list price or the competitiveness of a discount that you’re being offered by a software supplier. It’s why I love my work, and why you should make sure you get third-party validation of your deals.
How you do validate your software vendors’ list pricing and proposed discounts?
This month I published a new report on information security metrics, best practices as well as a maturity model to measure your maturity in the reporting process. This report outlines the future look of Forrester's solution for security and risk (S&R) professionals looking to build a high-performance security program and organization. We designed this report to help S&R pros develop and report the appropriate security metrics for their security organization. Security metrics are a key initiative for chief information security officers (CISOs) today, but many struggle with picking the right metrics. Some CISOs use a broad-brush approach, using operational metrics to demonstrate security. The problem with this approach is that most people don't understand what the metrics are saying, and they don't understand how these metrics make their lives easier or harder. Good metrics are easy-to-understand, incite actions, and change behavior by providing a clear idea of why the audience cares. When CISOs present metrics, they must be able to clarify "What it means" and "What's in it for me?" Use this paper as a set of guidelines to develop a well-formed security metrics strategy and to drive behavior change and improve performance.
RIM co-CEOs Jim Balsillie and Mike Lazaridis have stepped aside to let a new leader pilot RIM through the straits. Thorsten Heins, a hardware executive from Siemens, has been COO for about a year now. Welcome, Mr. Heins, to a rough sea and dark night. But there is light in the depths of the hold. (Okay, enough ship references. Down to business.)
Here's the straight story: RIM has been focused on the wrong assets for the past three years, competing in a consumer market against the most powerful consumer brands in the world and suffering from tablet night terrors. It's not working. Forrester's data is clear: Based on a survey of 5,000 US information workers in May 2011, RIM's share of employee smartphones has dropped from around 90% to only 42% in the US in the past three years. Apple and Android together now have 48% of that installed base.
Stop fighting the consumerization battle. Fight a battle that takes advantage of what made RIM a fabulous company in the first place: its secure data delivery network. Here's the differentiated asset analysis:
With this analysis in hand, the challenge and the opportunity become clear. It's the business and government IT relationships and the RIM secure global data network that differentiate RIM products and services, not the consumer market demand. No other mobile supplier in the market has foreign governments asking for access to its data network in the interest of their national security. (That government interest is a good thing -- it signals just how potent RIM's network is.)
Think of a medieval fortress: It was originally used for a small army, it has walls nine meters thick, and it’s surrounded by buildings hundreds of years old. Upon entering, you are confronted with the concept of eternity.
This fortress is located in the smallest state on earth — though it is also perhaps the best-known state in the world. The business housed within the fortress is what many might classify as a SME but with with complexity of a large enterprise, holy but busy, centralized but truly global — its work spans hundreds of countries with hundreds of currencies and hundreds of languages — and it serves very special and demanding clients.
Have a clue yet of where we are?
Zoom on Italy, then zoom on Rome, then zoom on Vatican City, and you can’t miss the round tower (Torrione Sisto V) where the Vatican Bank, or Istituto per le Opere di Religione (IOR ), is located. You won’t be allowed in if you are not a client, an employee, or part of a religious congregation. Change comes hard to institutions this steeped in tradition. To give you a clue, IOR’s previous managing director spent his entire career at IOR — 60 years — and retired at the age of 80. We all know it’s the soft and cultural aspects of transformation that are the hardest part for any organization.
Nevertheless, IOR has been going through a major change since 2008, working to replace its legacy IT system with a modern BT one. The new BT system brings more flexibility for the business, richer business functionality, and greater integration and development capabilities. Enabling fast change is the key driver for IOR’s IT transformation program from IT into BT.
Customers dream about personalized, contextual, proactive customer service experiences — where companies deliver an experience tailored to their persona, their past purchase history, and their past customer service history. They want each interaction to add value and build upon prior ones so that they don’t have to repeat themselves and restart the discovery process. They want to be able to choose the communication channel and device they use to interact with a service center. They want to start an interaction on one channel or device and move it seamlessly to another. Check out RightNow’s vision video that brings these points to life.
Most customer service organizations are still struggling with the basics — the hygiene factors in Maslow’s hierarchy of needs — in meeting their customers’ expectations. There are benchmarking tools that you can use to figure out how well your organization is doing and to get actionable recommendations on how to do better. But, as you focus on the tactical improvements that you need to make this year, it’s important to keep tabs on the optimal experience that customers would like you to deliver to help shape your long-term direction for customer service. Here’s my abbreviated personal list:
OK, it’s time to stretch the 2012 writing muscles, and what better way to do it than with the time honored “retrospective” format. But rather than try and itemize all the news and come up with a list of maybe a dozen or more interesting things, I decided instead to pick the best and the worst – events and developments that show the amazing range of the technology business, its potentials and its daily frustrations. So, drum roll, please. My personal nomination for the best and worst of the year (along with a special extra bonus category) are:
The Best – IBM Watson stomps the world’s best human players in Jeopardy. In early 2011, IBM put its latest deep computing project, Watson, up against some of the best players in the world in a game of Jeopardy. Watson, consisting of hundreds of IBM Power CPUs, gazillions of bytes of memory and storage, and arguably the most sophisticated rules engine and natural language recognition capability ever developed, won hands down. If you haven’t seen the videos of this event, you should – seeing the IBM system fluidly answer very tricky questions is amazing. There is no sense that it is parsing the question and then sorting through 200 – 300 million pages of data per second in the background as it assembles its answers. This is truly the computer industry at its best. IBM lived up to its brand image as the oldest and strongest technology company and showed us a potential for integrating computers into untapped new potential solutions. Since the Jeopardy event, IBM has been working on commercializing Watson with an eye toward delivering domain-specific expert advisors. I recently listened to a presentation by a doctor participating in the trials of a Watson medical assistant, and the results were startling in terms of the potential to assist medical professionals in diagnostic procedures.
The word is that promise of sCommerce (social commerce) and fCommerce (Facebook commerce) is more speculative than proven. What about the role of social media in government and governance? Mayors, other city leaders, and local organizations increasingly communicate and interact with their constituents via social media.
This week I did a webcast, Planning for Failure, which makes the assumption that if you haven't been breached, it is inevitable, and you must be able to quickly detect and respond to incidents. An effective response can be the difference between your organization's recovery and future success or irreparable damage. While I was working on the slides for the webcast, I started to reflect back on the 2011 security breaches that personally impacted me. Three breaches immediately came to mind: