Friday, July 29, 2011

Zero Day: A book review

Zero Day, a novel by Mark Russinovich (2011)

This is a great read, about computers that suddenly malfunction, destroy data, and then fail: an airliner over the Atlantic, robots in an auto assembly plant, a nuclear power generating station, a big legal firm. And many more.

It is the story of how two very smart software coders uncover what's happening and why. One used to work in the US National Security Agency and now does freelance jobs. He left government service after he detected the events of 9/11 and none of his bosses would listen. The other is buried in an office of Homeland Security and trying her best to cope in an evil world with insufficient resources.

Mark Russinovich tells a story of how a wealthy Saudi develops a plan to bring down Western civilization. Without government or any other support, he enlists the services of individuals around the world: India, France, China, Russia, Pakistan, and elsewhere. Each contributes a piece and is amply rewarded.

As our heros begin to uncover the plot and its eventual consequences, an agent from Chechnya is dispatched. They manage to escape assassination attempts in New York City, Moscow, and Paris. Others around them are not so lucky. In the end, they manage to save the world and discover true love.

Mark Russinovich knows his stuff. He is a Technical Fellow at Microsoft and author of the popular Sysinternals tools. His writing style is smooth and easy. Individual chapters are only 2-6 pages as he hops around the world putting the pieces of the story together.

I first heard of this book a few months ago on the Security Now weekly podcast by Steve Gibson. After reading it, I have a better appreciation of how easy it is to bring down our networked society and how important computer security is to all of us.

Thursday, July 28, 2011

Where Does Quality Start?

A couple weeks ago, Paul Borawski, CEO of ASQ, shared with us his conversations with Dr. J.J. Irani. Dr. Irani is a senior executive in the Tata Group, one of the most influential Indian firms in the world. Looking at their web site, I see that Tata is into a lot of different businesses, from heavy industry to cars and tractors to food processing to consulting services.

Dr. Irani stated that quality is part of the contract between supplier and user. Interesting that he reversed the normal order of Customer and Supplier. I wonder if that's due to East vs. West culture, or if he was making a point that quality must start with the provider of goods and services. The later is a different perspective from our (Western) perspective that the customer rules and the obligation is on the supplier to please that customer. Should the concept of quality - whatever that is - start with the supplier? Sort of like the baseball diamond in the movie Field of Dreams: "Build it and they will come."

Or maybe the order of the contract had no deeper meaning. But it caused me to think.

I’m part of the ASQ Influential Voices program. While I receive a variety of quality resources as honorarium from ASQ in exchange for my commitment, the thoughts and opinions expressed on my blog are my own.”

Friday, July 15, 2011

Advanced Auditing Master Class

I will be conducting a one-day workshop for the ASQ Audit Division in late October. Here's your chance to
  • Contribute to the Grand Unification Theory of Management
  • Dig in the dirt with Turtles
  • Transform your audit reports from Boring to Brilliant
  • Explore the Future of Humanity (and Auditors)
Integrated Systems: The Future of Auditing

Organizations can no longer afford to maintain separate quality, environment, safety and security groups. They all offer ways to reduce risks and increase value. Auditing can also support this movement. Through a series of lectures and group workshops, you will define an integrated management system. Then you will use contemporary process study tools to develop truly useful audit checklists. By discovering patterns in audit data, you will learn how present reports that address business performance. The day will conclude with an examination of the future - of everything, not just auditing. We will explore accelerating technology change and the increasing intelligence of machines. How can auditors continue to add value in this environment?

You already know how to audit. You know about flowcharts and checklists and interviews and reports. It is time for new challenges. You will mix and mingle with other auditors and managers, from different business sectors, under the guidance of a leader in the profession. This is a master class, so come prepared to think and learn and contribute.

Where: Reno, NV, USA
When: 26 October 2011
Cost: $595 US
Info: asq.org/conferences/audit/tutorials/

We must have at least 10 people registered by September 10, or they pull the plug.