<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Pie &#187; technology</title>
	<atom:link href="http://securitypie.com/tag/technology/feed/" rel="self" type="application/rss+xml" />
	<link>http://securitypie.com</link>
	<description>The ramblings of three security curmudgeons</description>
	<lastBuildDate>Thu, 30 Dec 2010 23:25:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>You Don&#8217;t Build A Fence This Way</title>
		<link>http://securitypie.com/you-dont-build-a-fence-this-way/</link>
		<comments>http://securitypie.com/you-dont-build-a-fence-this-way/#comments</comments>
		<pubDate>Thu, 25 Sep 2008 01:37:59 +0000</pubDate>
		<dc:creator>sharon</dc:creator>
				<category><![CDATA[Security Business]]></category>
		<category><![CDATA[Snafu]]></category>
		<category><![CDATA[Federal]]></category>
		<category><![CDATA[risk]]></category>
		<category><![CDATA[technology]]></category>

		<guid isPermaLink="false">http://securitypie.com/?p=107</guid>
		<description><![CDATA[The Following text is taken from a GAO report on the SBInet (DHS Needs to Address Significant Risks in Delivering Key Technology Investment) that was published yesterday and caught my attention. The title says it all: risk, technology and investment &#8211; everything one needs in order to have a good reading). But then, as I [...]]]></description>
			<content:encoded><![CDATA[<p>The Following text is taken from a <a href="http://www.gao.gov/new.items/d081086.pdf?source=ra" target="_blank">GAO report on the SBInet</a> (DHS Needs to Address Significant Risks in Delivering Key Technology Investment) that was published yesterday and caught my attention. The title says it all: risk, technology and investment &#8211; everything one needs in order to have a good reading). But then, as I go over the text I was very disappointed to learn that the DHS was not learning from the Israeli mistakes when the security fence was built. Judge for yourself. Read the executive summary below:</p>
<div id="attachment_109" class="wp-caption aligncenter" style="width: 310px"><a href="http://securitypie.com/wp-content/uploads/2008/09/sbinet.png"><img class="size-medium wp-image-109" title="sbinet" src="http://securitypie.com/wp-content/uploads/2008/09/sbinet-300x208.png" alt="SBInet, DHS Secure Border system" width="300" height="208" /></a><p class="wp-caption-text">SBInet, DHS Secure Border system</p></div>
<p><!--  /* Font Definitions */  @font-face 	{font-family:Batang; 	panose-1:2 3 6 0 0 1 1 1 1 1; 	mso-font-alt:바탕; 	mso-font-charset:129; 	mso-generic-font-family:auto; 	mso-font-format:other; 	mso-font-pitch:fixed; 	mso-font-signature:1 151388160 16 0 524288 0;} @font-face 	{font-family:"BNACN D+ Century"; 	panose-1:0 0 0 0 0 0 0 0 0 0; 	mso-font-alt:Century; 	mso-font-charset:0; 	mso-generic-font-family:roman; 	mso-font-format:other; 	mso-font-pitch:auto; 	mso-font-signature:3 0 0 0 1 0;} @font-face 	{font-family:"BNADM C+ Century"; 	panose-1:0 0 0 0 0 0 0 0 0 0; 	mso-font-alt:Century; 	mso-font-charset:0; 	mso-generic-font-family:roman; 	mso-font-format:other; 	mso-font-pitch:auto; 	mso-font-signature:3 0 0 0 1 0;} @font-face 	{font-family:"\@Batang"; 	panose-1:0 0 0 0 0 0 0 0 0 0; 	mso-font-charset:129; 	mso-generic-font-family:auto; 	mso-font-format:other; 	mso-font-pitch:fixed; 	mso-font-signature:1 151388160 16 0 524288 0;}  /* Style Definitions */  p.MsoNormal, li.MsoNormal, div.MsoNormal 	{mso-style-parent:""; 	margin:0in; 	margin-bottom:.0001pt; 	mso-pagination:widow-orphan; 	font-size:12.0pt; 	font-family:"Times New Roman"; 	mso-fareast-font-family:Batang; 	mso-fareast-language:KO;} p.Default, li.Default, div.Default 	{mso-style-name:Default; 	mso-style-parent:""; 	margin:0in; 	margin-bottom:.0001pt; 	mso-pagination:widow-orphan; 	mso-layout-grid-align:none; 	text-autospace:none; 	font-size:12.0pt; 	font-family:"BNACN D+ Century"; 	mso-fareast-font-family:Batang; 	mso-bidi-font-family:"BNACN D+ Century"; 	color:black;} p.BodyText1, li.BodyText1, div.BodyText1 	{mso-style-name:"Body Text+1"; 	mso-style-parent:Default; 	mso-style-next:Default; 	margin:0in; 	margin-bottom:.0001pt; 	mso-pagination:widow-orphan; 	mso-layout-grid-align:none; 	text-autospace:none; 	font-size:12.0pt; 	font-family:"BNACN D+ Century"; 	mso-fareast-font-family:Batang; 	mso-bidi-font-family:"Times New Roman";} @page Section1 	{size:8.5in 11.0in; 	margin:1.0in 1.25in 1.0in 1.25in; 	mso-header-margin:.5in; 	mso-footer-margin:.5in; 	mso-paper-source:0;} div.Section1 	{page:Section1;} --></p>
<p><!--[if gte mso 10]></p>
<p><mce:style><!   /* Style Definitions */  table.MsoNormalTable 	{mso-style-name:"Table Normal"; 	mso-tstyle-rowband-size:0; 	mso-tstyle-colband-size:0; 	mso-style-noshow:yes; 	mso-style-parent:""; 	mso-padding-alt:0in 5.4pt 0in 5.4pt; 	mso-para-margin:0in; 	mso-para-margin-bottom:.0001pt; 	mso-pagination:widow-orphan; 	font-size:10.0pt; 	font-family:"Times New Roman"; 	mso-ansi-language:#0400; 	mso-fareast-language:#0400; 	mso-bidi-language:#0400;} --></p>
<p>Just replace some of the names and you feel like your in the Middle East, where projects are known to be delayed, technology is always ahead of what was originally planned and the overall cost is several times higher then originally planned&#8230;.</p>
<p class="Default"><span id="more-107"></span></p>
<p class="BodyText1" style="padding-left: 30px;"><span style="font-size: 10.5pt; color: black;">Important aspects of SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;">remain ambiguous and in a continued state of<br />
flux, making it <span style="color: #ff0000;">unclear and uncertain what technology capabilities will be<br />
delivered, when and where they will be delivered, and how they will be<br />
delivered</span>. For example, the scope and timing of planned SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;">deployments and<br />
capabilities have continued to change since the program began<span style="color: #ff0000;"> and, even now,<br />
are unclear.</span> Further, the program office does not have an approved integrated<br />
master schedule to guide the execution of the program, and GAO’s assimilation<br />
of available information indicates that the schedule has continued to change.<br />
This schedule-related risk is exacerbated by the continuous change in and the<br />
absence of a clear definition of the approach that is being used to define,<br />
develop, acquire, test, and deploy SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net.<span style="color: #ff0000;"> </span></span></em><span style="color: #ff0000;"><span style="font-size: 10.5pt; color: black;">The absence of clarity and stability in these<br />
key aspects of SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em></span><span style="font-size: 10.5pt; color: black;"><span style="color: #ff0000;">impairs<br />
the ability of the Congress to oversee the program and hold DHS accountable for<br />
program results, and it hampers DHS’s ability to measure program progress. </span></span></p>
<p class="BodyText1" style="padding-left: 30px;"><span style="font-size: 10.5pt; color: black;">SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;"><span style="color: #ff0000;">requirements<br />
have not been effectively defined and managed</span>. While the program office<br />
recently issued guidance that defines key practices associated with effectively<br />
developing and managing requirements, such as eliciting user needs and ensuring<br />
that different levels of requirements and associated verification methods are<br />
properly aligned with one another, the guidance was developed after several key<br />
activities had been completed. In the absence of this guidance, t<span style="color: #ff0000;">he program has<br />
not effectively performed key requirements definition and management practices.</span><br />
For example, it has not ensured that different levels of requirements are<br />
properly aligned, as evidenced by GAO’s analysis of a random probability sample<br />
of component requirements showing that a large percentage of them could not be<br />
traced to higher-level system and operational requirements. Also, some of SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net’</span></em><span style="font-size: 10.5pt; color: black;">s operational<br />
requirements, which are the basis for all lower-level requirements, were found<br />
by an independent DHS review to be unaffordable and unverifiable, thus casting<br />
doubt on the quality of lower-level requirements that are derived from them. As<br />
a result, the risk of SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;">not<br />
meeting mission needs and performing as intended is increased, as are the<br />
chances of expensive and time-consuming system rework. </span></p>
<p class="MsoNormal" style="padding-left: 30px;"><span style="font-size: 10.5pt; color: black;">SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;"><span style="color: #ff0000;">testing<br />
has not been effectively managed</span>. For example, the program office has not<br />
tested the individual system components to be deployed to the initial<br />
deployment locations, even though the contractor initiated integration testing<br />
of these components with other system components and subsystems in June 2008.<br />
Further, while a test management strategy was drafted in May 2008, it has not<br />
been finalized and approved, and it does not contain, among other things, a<br />
clear definition of testing roles and responsibilities; a high-level master<br />
schedule of SBI</span><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;">test<br />
activities; or sufficient detail to effectively guide project-specific test<br />
planning, such as milestones and metrics for specific project testing. <span style="color: #ff0000;">Without<br />
a structured and disciplined approach to testing, the risk that SBI</span></span><span style="color: #ff0000;"><em><span style="font-size: 10.5pt; font-family: &quot;BNADM C+ Century&quot;; color: black;">net </span></em><span style="font-size: 10.5pt; color: black;">will not satisfy user<br />
needs and operational requirements, thus requiring system rework, is increased.</span></span></p>
<p class="MsoNormal" style="padding-left: 30px;">
<p class="MsoNormal" style="padding-left: 30px;">
<p>Seriously, long term, highly technological projects always risky to manage. In a way, I admire those that can manage a project with hundreds and thousands of dependencies, external controls, budget constrains and eventually deliver a solution. I am sure that under the proper guidance, this said system will become the cornerstone of the border control system.</p>
<p style="padding-left: 30px;">
]]></content:encoded>
			<wfw:commentRss>http://securitypie.com/you-dont-build-a-fence-this-way/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

