Thursday, August 21, 2008

Cyberwar - how can governments protect their digital border?

Border control is really only a recent development in the evolution of nations.

For thousands of years we can distinguish nations by their common language, culture, cuisine and other shared characteristics.

However, with a few exceptions, it is only in the last few hundred years that the physical borders solidified into boundaries that delineated the majority of nations into tightly defined geographic areas of governance.

The internet more closely reflects the situation of hundreds of years ago.

Separations online are more reflective of language and culture than of national borders. People are able to freely visit websites from other nations, no passports or security checks, again with a few notable exceptions.

However with the prospect of cyberwar it may become necessary for nations to rethink this position, as illustrated in the recent war between Russia and Georgia.

While there has been limited reporting in press and television (who prefer the images of an actual physical conflict), potentially the most damaging front of the war has been online.

Up to 60 percent of Georgia's online assets have been attacked online, in a cyberwar that started several weeks before actual Russian troops began engaging Georgian forces.

The cyberwar forced the Georgian President to relocate his personal site to the US, ironically using Google services as a more secure solution than could be provided by the Georgian government during the conflict.

This isn't the first cyberwar, and won't be the last - Estonia and Lithuania have also faced large-scale attacks in cyberspace.

It is still unclear whether the Georgian attack was conducted by the Russian government, or by freelance supporters. In either case it does flag the need to protect the digital borders of a nation.

So who dies in a cyber attack? Some might consider cyberwar as an amusing sideshow to the bloody spectacle of a war fought with guns and bombs.

Consider that the aim of a nation making war is to diminish or destroy the capacity of a foe to wage war, thereby making the winning nation able to impose it's will on the losing nation.

This doesn't necessarily require a war involving military action. What is required is to destroy capacity.

What is the impact of destroying a nation's banking system, its telecommunications network or its ability to manage food distribution?

What is the impact of bringing down the electricity grid, taking water utilities offline, crashing all the electronic systems of government departments, hospitals, airports and businesses?

A combination of some or all of these actions would cripple a modern nation such as the US or Australia, at least for a period of time.

By crippling them a foe could achieve a similar outcome to a limited war - even a smaller nation, or non-nation, without the ability to engage in an effective military action.

Nations face these threats now, and will continue to do so in the forseeable future, and it requires different types of soldiers and generals to wage or resist these attacks.

It is also necessary for governments to think beyond the security of government systems, to also identify commercial systems that require government protection.

The US is already thinking in this way - and expressing this publicly - as reflected in
the excellent interview with US Homeland Security chief Michael Chertoff in Wired, Chertoff: I'm Listening to the Internet (Not in a Bad Way).

Chertoff clearly recognises the threat extends across all systems with internet access,

There is an interdependence on the internet that puts a premium on being a responsible citizen. If you fail to protect your own assets, it doesn't just affect your assets, it affects the assets of everyone linked up to you.
The CIA is also gearing up to combat this new form of warfare, led by CIO Al Tarasiuk as reported in CIO magazine, Inside the CIA's Extreme Technology Makeover.

In Australia we don't talk quite so much publicly about what the government is doing to protect the digital security of our citizens - rightly or wrongly.

However I believe it is important for everyone involved in the online area to spare a thought now and then for the importance of their digital assets and the potential risks we face in this arena.

You might be titled an IT Manager, Systems Administrator, Webmaster or Online Manager, but you're also potentially a front-line soldier in the event of a cyberwar against Australia.

Read full post...

Victoria's eGovernment resource centre nominated as a global egovernment mover & shaker

The Victorian government's eGovernment Resource Centre has been nominated in the 9th annual global edemocracy award for the Top 10 Who Are Changing the World of Internet and Politics.

The prestigious award seeks to recognise the innovators and pioneers, the dreamers and doers who bring democracy online. It is managed by PoliticsOnline and the World eDemocracy Forum.

The eGovernment Resource Centre is the only Australian nomination in the shortlist of 25 sites, alongside the UK Prime Minister's office, myBarackObama, the euObserver and other influential egovernment and edemocracy sites from around the world.

Vote for the
eGovernment Resource Centre at PoliticsOnline

Read full post...

Wednesday, August 20, 2008

egovernment online participation - New Zealand-style

I really admired the efforts of our New Zealand cousins in the egovernment arena as I've mentioned before.

One of their initiatives is their ParticipationNZ wiki, which is allowing NZ public servants to collaboratively develop, assess and reflect on the overall approach to online participation by government agencies.

If your agency is considering participating in the online arena, this is a great place to find global best practice examples of actual participation policy and initiatives.

Read full post...

Becoming a more effective change agent in government

I'd like to thank Kate Carruthers, a formidable change agent and renaissance woman, for prompting this post through a presentation she's published on SlideShare, Enterprise 2.0 and stakeholder resistance.

One of my key roles and, I believe, a key role for many in the online arena, is to be a change agent for digital channels.

I've led, been involved with and witnessed both effective and ineffective change initiatives over the years - hopefully learning something over the journey.

When I am seeking to be a change agent I consider four things;

  • Whether the change is meaningful - that it deliver real value to internal or external groups
  • How to overcome resistance to change - bringing people with me
  • The process for successful implementation of change - making it work
  • Embedding change into behaviours, processes and systems - creating lasting value
To unpack the first two points,

Is the change meaningful?
Change by itself is neither good nor bad. Good changes in one organisation can be bad changes in another - either because the change was unnecessary (or even detrimental), wasn't sold well, execution was poor or it was not embedded into ongoing practice.

Change is about the future - which we like to think we can predict, but actually do very poorly. We hope and plan for change with an assumption that it will make the future brighter. My experience has been that a realistic balance between optimism and pessimism is necessary for those seeking to introduce change to ensure that they don't get carried away with the change itself and downrate the consequences.

Assessing value
So given that change can have a different impact in different organisations, and can have unforeseen consequences, how should change agents go about assessing whether a change is meaningful, irrelevant or detrimental?

I don't have a magic formula for doing this. There are many measures of value - from time and cost savings to audience satisfaction and organisational flexibility.

Any meaningful change needs to generate one or more of these benefits. The benefits must, in the views of those affected by the changes, outweigh any negative consequences.

We're only human
Unfortunately as those introducing a change are usually those who benefit from it (financially or otherwise) there is a tendency for change projects to make rosy predictions of benefits but downplay consequences and risks. It can also be much harder to be the public voice saying "don't do this, it will be bad for us", than one of the chorus in support of a change.

The best any of us can do is make an objective assessment of the change's benefits and risks and then, during the change's implementation, adapt as necessary to ensure that it provides value and minimises negative consequences.

I fall back on a mantra that meaningful change creates its own meaning by being responsive and adaptable.

Many of the negative and positive benefits of a change only become clear during or after a change occurs. A change must evolve to ensure that it delivers value as these are revealed.


Overcoming resistance
It is a common myth that people resist change.

However life changes around us every day, we must constantly change our location, our knowledge, our behaviour, our attitudes, our tools and our networks to address it.

Humans are adaptable - it makes us one of the few species able to survive and thrive in virtually any environment on this planet.

When introducing change into organisations, my experience is that most resistance is not due to the changes themselves. It is related to the way in which the change was introduced, the communication that takes place and the level of involvement with the changes themselves.

They're not wrong!
One key mistake I've seen change agents make is to introduce change because the old way of doing things was wrong or inferior.

This is almost a sure way of creating resistance as it make the people who created and manage the existing approach wrong or incompetent.

If you tell someone that they are incompetent, you will not make them want to help you.

I've fallen - and still fall - into this on occasion. It's not a deliberate step, it's an error of not thinking through my own words clearly enough.

A much better approach is to acknowledge that the current approach is right - it achieves the outcome and is entirely appropriate based on how it has developed from the past. However if the situation has changed, or if there are new technologies or systems available, it is possible to build on the current approach and make it easier for those involved and/or improve the customer service provided.

In the vast majority of cases people want to improve themselves, they want to improve their organisations and they want to improve their customer service. A change is another step on this journey and is simply a more formal approach to doing what they were already doing - a process of continual improvement.

Looking within
So when I face resistance I look first at what I have failed to do to help people be involved with, understand and influence the change. Nine times out of ten if I'd done something better, the resistance would be much less - or non-existent.

One of the key areas I look at is how much time I give people to reflect on and consider a potential change. Increasing the lead time can help enormously in allowing people to follow their own journey of understanding the value of a change - and also can help bring out any critical flaws in the change before it becomes a project.

Planting seeds
So these days I think of introducing change as planting seeds that will grow in the future. This approach is focused around establishing the preconditions for change to happen, like putting oil in a car before the gears grind to a halt.

I regularly plant seeds through telling people about new things by email (and relating them to existing context), through water cooler conversations, through participation in different groups, speaking at events and mediums such as this blog.

As gardeners know, you should plant many seeds, they should be planted in fertile ground and nurtured over a long time.

So I try to disseminate the seeds widely, identifying other change agents, influencers, decision-makers and gatekeepers within the organisation - the fertile ground where seeds can survive. I nurture them through ongoing engagement, by-the-way updates, by providing examples of success - and failure - by others and through constantly seeking opportunities to share.

I don't run strict metrics - ten seeds planted, one seed sprouts - as the value of an idea is dependent on the audience, not the innovator.

I also avoid getting trapped in 'owning' an idea. If someone wants to pick up and run with an idea I'll empower them to do so and step back into a supporting role - letting them take on most of the responsibility and the credit. Any failure is shared.


More to come
I discuss my last two points, successful implementation and embedding change in a future post.

I do appreciate all of your comments and viewpoints - they help me change myself to become a more effective change agent.

Read full post...

Driving egovernment services after they launch

Next Monday (25 August) I'll be speaking at the Ark Group's conference on Driving Interoperability and Collaboration in eGovernment in Brisbane on the topic of Driving ongoing improvements in online services provision.

If you're attending, please come and introduce yourself at some stage through the conference.

If you won't be there, I'll be making my presentation available after the event at my Slideshare site.

Thank you to everyone who contacted me with suggestions on my presentation via my blog post, email or in conversation.

Based on the feedback I've shifted the focus from eMetrics to a broader look at the importance and process of drive ongoing improvements after an egovernment site is launched.

I will make mention of a few points raised by people, such as,

  • why launching a site doesn't mean lasting success
  • the importance of factoring in an ongoing development/improvements budget
  • the importance of establishing (realistic and measurable) goals
  • appropriate use of metrics to assess site performance to goals (and why not to use Hits)
  • cross-channel measurement - how web influences other channels (to meet goals)
I'll also be discussing how to develop a successful blockbuster movie franchise - and how this relates closely to egovernment development....

Read full post...

Bookmark and Share