News
2/26/2009
12:57 PM
George Crump
George Crump
Commentary
50%
50%

Proving The ROI

With budgets and IT staff stretched to thinner levels than ever, change is going to come slowly this year and proving the ROI of each project is going to be critical not only to enable the approval of the next project, but possibly to keep your job.

With budgets and IT staff stretched to thinner levels than ever, change is going to come slowly this year and proving the ROI of each project is going to be critical not only to enable the approval of the next project, but possibly to keep your job.Too often the ROI of a project is sort of a "seat of the pants" guess. The server virtualization project saved having to buy 20 new servers, so there was the ROI. Today ROI has to be looked at as more than just how fast you can justify the initial cost of a project, but over the course of time, how does that project continue to save you money?

That means the initial focus should be on making the IT staff more effective and giving them the tools they need to prove a project's ROI. These tools need to be in place in advance. First, they allow the IT staff to better wear the multiple hats that a smaller team is going to require. The backup guy, the storage guy, and the virtualization guy are going to quickly become "the guy" in many organizations. Having a separate management and monitoring application for each one of these applications isn't going to cut it any more. Tools will be needed, like those from Tek-Tools and Apatar that offer complete monitoring and reporting of storage management, data protection, and virtualization management in a single console.

As we discuss in our article on "Maximizing Cost Cutting," these tools not only make the team more efficient but also allow you to measure the effectiveness of future cost-cutting measures. They allow you to establish a baseline of what you had before and what the result of the change will be. They are critical tools in proving the initial ROI of a project as well as its ongoing ROI. Imagine being able to report on a monthly basis this is how much additional money this project saved us.

For example, possibly no area is generating a faster initial ROI as well as an ongoing ROI than in disk-based archiving projects. Companies like Permabit, NexSan, and EMC offer solutions that deliver an ROI in three critical areas. First, as a result of moving data off primary storage, it can prevent future purchases. Second, with that data off primary storage,it reduces the size of the disk backup target and it decreases the time to recover at the DR site by moving all that data out of the way. Additionally, it lays the foundation for a retention and compliance process when your organization realizes it needs it.

A monitoring and reporting tool compliments disk-based archiving by allowing you to understand what data has to be moved, how much capacity is freed up once it is moved, what the reduction of the backup window is, and what the reduction of the replication window is.

Track us on Twitter: http://twitter.com/storageswiss.

Subscribe to our RSS feed.

George Crump is founder of Storage Switzerland, an analyst firm focused on the virtualization and storage marketplaces. It provides strategic consulting and analysis to storage users, suppliers, and integrators. An industry veteran of more than 25 years, Crump has held engineering and sales positions at various IT industry manufacturers and integrators. Prior to Storage Switzerland, he was CTO at one of the nation's largest integrators.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-5084
Published: 2015-08-02
The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically approximate attackers to obtain sensitive information via unspecified vectors.

CVE-2015-5352
Published: 2015-08-02
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time ...

CVE-2015-5537
Published: 2015-08-02
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

CVE-2015-5600
Published: 2015-08-02
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumptio...

CVE-2015-1009
Published: 2015-07-31
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Dark Reading Radio
Archived Dark Reading Radio
What’s the future of the venerable firewall? We’ve invited two security industry leaders to make their case: Join us and bring your questions and opinions!