In- or OutSource?

Real-World Policies

As manager of a bank infosec office in Brazil, I found Jonathan Feldman's column on workstation policy enforcement ("Lockdown Limits," Sept. 16, 2004) particularly useful. My first reaction was, "This guy doesn't live in the real world." But I've since come around--enough to consider applying Feldman's ideas at my workplace.

In managing user profiles, are group policies advisable? Should management approval be sought for each type of profile installed based on its risks? Are there restrictions based on personnel rules?

Alvaro Teofilo
Infosec Manager
Company name and e-mail address withheld by request

Jonathan Feldman replies: I always use group policies. What's more, I always look to the human resources department for guidance on user policies. To leave HR out of what is essentially an employee issue seems disingenuous at best.In addition, I make it a point to involve managers in profiling decisions, clearly outlining the potential risks. Evaluating user policies isn't a stretch for them, considering that they make risk-management decisions for their business units every day.

More Juice, Please

I enjoyed reading Dave Molta's Buyer's Guide article "Smart Phones Get Smarter" (Oct. 1, 2004). Molta discusses the "wireless angle," but there's another angle that shouldn't be overlooked: battery life.

Some very powerful devices have been tabled not for a lack of processor capability, but because battery technology can't keep pace with Moore's law. Because of their low "duty cycle," voice devices can have a very long standby time. As soon as you start using these devices as computers, however, battery life takes a nosedive.Spare and easily rechargeable batteries are sorely needed. I fear that smart phone users will be tempted to think they can roam the streets all day carrying their work with them, only to find themselves saddled with a dead battery midtown.

Paul Kruger
President
eVolution Web

[email protected]

Clarification

Ipedo XML Intelligence Platform (XIP) 3.5, which we reviewed in "Don't Fear the Data" (Sept. 16, 2004), is capable of using Oracle's thick client. It also performs atomic query optimization.

Tell Us How You Really Feel

Send e-mail to [email protected], fax to (516) 562-7293 or mail letters to Network Computing, 600 Community Drive, Manhasset, NY 11030. Include your name, title, company name, e-mail address and phone number. All correspondence becomes the property of Network Computing.