Giant 365 Sh*tstorm coming...

Forums › IT Pro and developers › Giant 365 Sh*tstorm coming...

1 | 2

fearandloathing

537 posts

Ultimate Geek
+1 received by user: 206

ID Verified

Lifetime subscriber

#2346522 30-Oct-2019 22:02

insane: IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Bingo

gbwelly

1263 posts

Uber Geek
+1 received by user: 776

#2346589 31-Oct-2019 07:32

fearandloathing:

insane: IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Bingo

Nice if you work in the private sector.

An acquaintance is currently dealing with 'clean up isle 3' where the business enabled themselves without engaging IT and now there has been a privacy breach involving hundreds of people. I'm sure IT would like to wipe their hands and say good luck with that, but it doesn't work that way.

Regarding my earlier comments about the PRA, I'm not referring to data sovereignty, I'm referring to Retention and Disposal. Responding to an OIA request by saying "someone in finance built that report for the analysis of light rail 2 years ago in Power BI using a credit card apparently, but we don't know where it is, maybe they deleted it? Sorry :( " is frowned upon.

Beccara

1473 posts

Uber Geek
+1 received by user: 517

ID Verified

#2346598 31-Oct-2019 07:52

Cool, Company policy and proper O365 setup prevents your situation unless IT messed up and didn't follow up new service activation/DLP/Billing alerts. Users are going to user, It's upto IT to be ahead of them and ensure company compliance which starts with kickass monitoring

IT have to stop thinking themselves as rockstars and understand they are digital janitors, The fact that there's so much push back to this shows the problem, IT has taken a "NO!" approach rather than going "Hmmm this could help my users out/It's coming anyway how do I handle the impact of this?"

Most problems are the result of previous solutions...

All comment's I make are my own personal opinion and do not in any way, shape or form reflect the views of current or former employers unless specifically stated

Dynamic

4016 posts

Uber Geek
+1 received by user: 1853

ID Verified

Trusted

Lifetime subscriber

#2346601 31-Oct-2019 08:04

insane: Can see both sides to this. However if users are finding solutions to their own problems then it just shows that there are unmet needs that IT are not catering for.

IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Some organisations treat the IT side as simply a cost centre that needs to be minimised, and its an easy target for cost cutting in lean times. For a IT Dept to help their users innovate, the team needs to have sufficient head space for dreaming up useful or innovative new (to the business) practices or to help other departments with 'what if we looked at doing this', and that scenario is not common.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Varkk

643 posts

Ultimate Geek
+1 received by user: 477

#2346618 31-Oct-2019 08:45

insane: Can see both sides to this. However if users are finding solutions to their own problems then it just shows that there are unmet needs that IT are not catering for.

IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Often that happens because users don't communicate their needs to IT, instead just start heading down the garden path on their own. Then you end up with a workflow where someone prints out a document, signs it scans it and emails it to someone else who prints and annotates it, scans it again and so on and so on.

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#2346959 31-Oct-2019 20:58

Varkk:

insane: Can see both sides to this. However if users are finding solutions to their own problems then it just shows that there are unmet needs that IT are not catering for.

IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Often that happens because users don't communicate their needs to IT, instead just start heading down the garden path on their own. Then you end up with a workflow where someone prints out a document, signs it scans it and emails it to someone else who prints and annotates it, scans it again and so on and so on.

This. It's easier for users to fumble their way forwards 'under their own control' than to actually take the time to articulate their requirements, carry out a risk assessment and have appropriate security and privacy controls approved by the powers-that-be prior.

The term you want is 'Shadow IT' and its close cousin 'Shadow Cloud'. It's the bane of large organisations (and government departments). Technical means to prevent the use of unapproved systems are becoming more prevalent because the risks associated with ill-considered decision-making are generally only realised after-the-fact. :(

No signature to see here, move along...

New World

Shop on-line at New World now for your groceries (affiliate link).

networkn

Networkn
32871 posts

Uber Geek
+1 received by user: 15468

ID Verified

Trusted

Lifetime subscriber

#2346977 31-Oct-2019 22:20

BlakJak:

Varkk:

insane: Can see both sides to this. However if users are finding solutions to their own problems then it just shows that there are unmet needs that IT are not catering for.

IT should be an enabler for the business, not some gatekeeping hurdle that everyone else needs to fight against to progress the businesses objectives.

Often that happens because users don't communicate their needs to IT, instead just start heading down the garden path on their own. Then you end up with a workflow where someone prints out a document, signs it scans it and emails it to someone else who prints and annotates it, scans it again and so on and so on.

This. It's easier for users to fumble their way forwards 'under their own control' than to actually take the time to articulate their requirements, carry out a risk assessment and have appropriate security and privacy controls approved by the powers-that-be prior.

The term you want is 'Shadow IT' and its close cousin 'Shadow Cloud'. It's the bane of large organisations (and government departments). Technical means to prevent the use of unapproved systems are becoming more prevalent because the risks associated with ill-considered decision-making are generally only realised after-the-fact. :(

One customer we have decided to strike out on their own for IT, at least partially, and set up Teamviewer for remote access, it wasn't an easy job cleaning the ransomware off their system after they had used "easy to use" passwords etc.

What's easiest isn't the "best" especially when IT responsible for backup don't even know data isn't being stored in accordance with long set up and explained rules.

Beccara

1473 posts

Uber Geek
+1 received by user: 517

ID Verified

#2347044 1-Nov-2019 08:33

I find users are happy to communicate what they are trying to do if they aren't expected to talk tech, One of the best skills I try to develop into my team is translating business use cases into technical solutions, If you have this key skill users will happily talk for hours about what they want to do, Never make them feel ashamed they can't tell you they want ADFS to do SSO into O365 on company kit. I routinely send our Helpdesk out for shaddow-a-user days to keep the us vs them mentality out and so our people keep an up to date understanding of what various departments are doing

The only times I've ever seen Shaddow IT is where either a) IT was outsourced and billed by the hour b) IT dept was understaffed or c) IT Dept was full of ego's about how their dept is the only thing keeping the company alive and "lusers" shouldn't do anything without IT's blessing

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#2347178 1-Nov-2019 15:19

And they've backed down and will let tenant admins disable it.

https://www.theregister.co.uk/2019/11/01/microsoft_power_platform_u_turn/

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.

Jogre

182 posts

Master Geek
+1 received by user: 40

#2348094 4-Nov-2019 13:52

Lias:

And they've backed down and will let tenant admins disable it.

https://www.theregister.co.uk/2019/11/01/microsoft_power_platform_u_turn/

Here's the link to our FAQ including this update.

https://docs.microsoft.com/en-us/microsoft-365/commerce/subscriptions/self-service-purchase-faq

Jono Green

Microsoft New Zealand

1 | 2