AWS Cloud Enterprise Strategy Blog

Tag: Risk Management

Security concept

Evolving GRC to Maximize Your Business Benefits from the Cloud

Introduction by Mark Schwartz This post continues our series on governance in the cloud. In earlier posts we discussed new strategies for governance, the governance that requires standardization and rules, and governance that oversees projects and investments. In another post John Thorp of AWS Professional Services wrote about AWS’s frameworks for evolving your Governance, Risk, […]

Read More

Risk and Plans: More Constraints Requires More Agility

I am often asked a question along these lines: Mark, I get that Agile and DevOps approaches favor learning and adjusting over rigidly following a plan. But our budgeting process locks in our spending (and therefore our annual plan) in advance, and our investment management process necessarily locks in spending levels and schedules for each […]

Read More

Announcing my New Book, War & Peace & IT – a Resource for Enterprise Leaders in the Digital Age

I’m very excited to announce that today is the official publication date of my latest book, War & Peace & IT: Business Leadership, Technology, and Success in the Digital Age. It is intended as the hitherto missing book for senior enterprise executives on how best to work with their technology organizations to accomplish their digital […]

Read More

Switching Costs and Lock-In

It’s no surprise that organizations are worried about becoming locked in to their cloud provider. After all, the history of IT is full of examples of vendors taking advantage of high switching costs to impose restrictive licensing terms and to increase prices. But I think that the cloud is different—and in fact, is making it […]

Read More

Reducing Risk in the Cloud by Overcoming the Status Quo Bias

I remember an incident from my previous CIO role. A number of us were in a meeting discussing the severe problems we were having with the performance of a large contractor. At one point, someone suggested that we start a new RFP (request for proposal) process to replace the contractor. “Too risky,” said one of […]

Read More