The Wayback Machine - https://web.archive.org/web/20120602233925/http://cloudcomputing.sys-con.com:80/node/2286439

Welcome!

Cloud Expo Authors: Maureen O'Gara, Larry Carvalho, Ignacio M. Llorente, Liz McMillan, Elizabeth White

Related Topics: Cloud Expo, Virtualization, Web 2.0, Security

Cloud Expo: Blog Post

What Does GRC and Las Vegas Have to Do with IT?

Governance, Risk and Compliance (GRC) was the tool of choice in ousting organized crime from Vegas

In the spirit of leaving Las Vegas I started thinking about the transformation of Las Vegas from a desert oasis created by organized crime to a billion-dollar industry. How did big business and Wall St. push the mob out of Vegas? Movies and television shows, such as Casino, Goodfellas, and the Sopranos illustrate a side of organized crime that few rarely ever witness or have witnessed. Las Vegas was created by organized crime to service their syndicate with money laundering, prostitution, entertainment and schmoozing services. It worked splendidly; until it didn’t. Something changed and it created a landslide that eventually saw Vegas’ founders ousted and replaced with a larger, more powerful and adept landlord—mega-corporations. How they accomplished this is a lesson that clearly should be noted by IT.

Believe it or not, Governance, Risk and Compliance (GRC) was the tool of choice in ousting organized crime from Vegas. Big business and government made it an inhospitable environment for crime syndicates to operate; at least with regard to gaming and hoteling.  The first step was to foster transparency upon the casinos. Long suspected for ‘rigging’ of games, local and federal government initiatives pushed for regulation and compliance for gaming. This had the impact of reducing the ill-gotten gains for organized crime, while lowering the risk for gamblers since the odds were considerably greater in their favor without the magnetic roulette ball or aces tucked under the blackjack table.

Unfortunately, the downside of regulations is the need for auditing and, of course, the first twenty auditors are buried in the foundations of the older hotels—just joking! Seriously, though, increased regulation transformed gaming and hoteling for organized crime from stealing and laundering to operations and management, which clearly required much more effort than organized crimes leaders were willing to deal with leaving them to abandon the gaming and hoteling aspects to real businesses that were interested in providing these services.

So, in the first three paragraphs, we see the use of GRC to foster transparency, which changed the rules for the current operators and transformed the environment into something that was hundreds of times more profitable than the original operators ever imagined. If GRC has the power to transform Las Vegas from a criminal institution into a reputable business, what do you think it could do for transforming your IT organization? Today, on average, businesses are paying upwards of 70% to keep the lights on and that number is rising. IT, as we know it, grew up organically around the introduction of computers into the business and, just like the organized crime syndicates, as that number rises it’s going to get less and less interesting to do that job.

We need to use GRC to transform our IT organizations so that the next incarnation can start to arise on the ashes of the old, just like it did in Vegas. The next generation of IT will be faster, smarter and provide services that consumers want with the compliance and assurances that provide them comfort. After all, Vegas’ consumers didn’t change, it grew and more types of consumers were added to the mix. That’s the outcome we should expect for a transformed IT organization and the steps are already shown to us:

  1. Engage governance
  2. Change the rules
  3. Ensure the rules are being followed
  4. Make it less desirable to continue operating in the current manner
  5. Transform

One final note, many speak of IT transformation as a move to IT-as-a-Service (ITaaS), but an outcome of thinking about this blog entry has made me realize, we already are offering ITaaS, it’s just that the current services are a) not desired by the consumer, b) too costly for the consumer, or c) takes too long to consume.  In the early days of Vegas the organized crime syndicates were providing services as I mentioned in the opening paragraph. The issue was there was a limited audience for the services they were offering. I believe that’s kind of what we see happening now with IT.  By transforming IT and bringing in new operators and new rules, we change the services we are delivering and how they are delivered, thus creating a much larger audience.

Once big business took over in Vegas they started using data to remove their risk. For example, they eliminated card counters and collusion between dealers and players. Also, they changed the rules of the games so that odds were in their favor. Hence, they became more profitable and were able to expand into other services, such as conventions and large scale catering. Plus, as the economy ebbs and flows, they are oriented to respond quickly and modify their service catalog and costs to suit appropriately. So, now big business isn’t watching their costs rise and feeling like there’s no end in sight, but instead are focused on what is needed to continue growing and making profits. Ultimately, this is what IT needs to strive toward supporting.

Read the original blog entry...

More Stories By JP Morgenthal

JP Morgenthal is one of the world's foremost experts in IT strategy and cloud computing. He has over twenty-five years of expertise applying technology solutions to complex business problems. JP has strong business acumen complemented by technical depth and breadth. He is a respected author on topics of integration, software development and cloud computing and is a contributor on the forthcoming "Cloud Computing:Assessing the Risks" as well as is the Lead Cloud Computing editor for InfoQ.

Cloud Expo Breaking News
Users and administrators alike have come to rely on standard NAS functions to create, manage, share and protect file-based data throughout its lifetime. However, this functionality is limited to a single site. Globally distributed enterprises must deploy islands of storage across sites, inhibiting optimization, centralized management, and load balancing. Ideally, administrators should be able to install a single cloud-integrated, file-based storage system that grants visibility of all files to a...
Many organizations have embraced, or are considering, the benefits of cloud computing – speed, flexibility, increased expertise, shared workload, reduced costs, etc. The benefits are many – but so are the risks. What are the threats to Cloud security? Which parties assume responsibility for securing the environment? What about the data? Which type of cloud deployment offers superior security benefits? In his session at the 10th International Cloud Expo, Dr. Nataraj (Raj) Nagaratnam, IBM Distin...
With Cloud Expo 2012 New York (10th Cloud Expo) now under ten days away, what better time to remind you in greater detail of the distinguished individuals in our incredible Speaker Faculty for the technical and strategy sessions at the conference...?
With Cloud Expo 2012 New York (10th Cloud Expo) now less than ten days away, what better time to remind you in greater detail of the distinguished individuals in our incredible Speaker Faculty for the technical and strategy sessions at the conference...?
With Cloud Expo 2012 New York (10th Cloud Expo) now less than ten days away, what better time to remind you in greater detail of the distinguished individuals in our incredible Speaker Faculty for the technical and strategy sessions at the conference... We have technical and strategy sessions for you every day from June 11 through June 14 dealing with every nook and cranny of Cloud Computing and Big Data, but what of those who are presenting? Who are they, where do they work, what else have t...
I am the track chair of the CloudExpo Bootcamp this year at Jacob Javits Center in NYC from June 11-14. You can check the agenda here. As an invitee of the track chair, you can register for free (with the bootcamp option) at www.cloudcomputingexpo.com with "robustcloud" as the promotion code.
With Cloud Expo 2012 New York (10th Cloud Expo) now under ten days away, what better time to remind you about the distinguished individuals in our incredible Speaker Faculty for the technical and strategy sessions at the conference...? We have technical and strategy sessions for you every day from June 11 through June 14 dealing with every nook and cranny of Cloud Computing and Big Data, but what of those who are presenting? Who are they, where do they work, what else have they written and/or...
As an exhibitor at Cloud Expo New York, EMC Corporation is offering special passes to SYS-CON's 10th International Cloud Expo, which will take place on June 11–14, 2012, at the Javits Center in New York City, New York. EMC Corporation is a global leader in enabling businesses and service providers to transform their operations and deliver IT as a service. Fundamental to this transformation is cloud computing. Through innovative products and services, EMC accelerates the journey to cloud computi...
Cut through the cloud Computing clutter and make business sense of Big Data. Join us in New York in 10 days' time and attend the largest Cloud Computing and Big Data event in the world - the 10th International Cloud Expo at the Jacob Javits Center on June 11-14, 2012. As the volume of digital content grows to 2.7 ZB‚ up 48% from 2011, Cloud Expo has been extended to focus additionally on Big Data. There are also Special Events galore, from Cloud Computing Bootcamp (all 4 days) and "Cloud Essen...
One of the most widely asked questions about Big Data today is, “How do we get valuable analytics from Big Data?” Or, how do we get the prize? As data continues to grow exponentially, so does the variety of data (structured and unstructured) coming from humans, machines and applications. In order to pull valuable information from it all, proper data gathering is critical, and the output of that data needs to be timely and accurate, with a flexible method of delivery. Unfortunately, it’s not easy...