Friday, December 14, 2007

Words of wisdom from the man who've been there and made the difference to the world he lived!

It is not the critic that counts,
Nor the man who points out how the strong man stumbled,
Or where the doer of deeds could have done them better.
The credit belongs to the man, who is actually in the arena,
Whose face is marred by dust and sweat and blood;
Who strives valiantly;
Who errs and comes short again and again;
Who knows great enthusiasms, great devotions;
Who spends himself in a worthy cause;
Who, at the best, knows in the end the triumph of high achievement?
And who, at the worst, if he fails, at least fails while daring greatly,
So that his place shall never be with those timid souls
Who know neither victory nor defeat.

- Teddy Roosevelt

Monday, November 19, 2007

Its been such a wonderful time...

I has been such a long time since I last updated my blog.

There's been a lot of things going on. I joined a facebook to expand my social network. You can drop by and check it out at facebook.com.

Iam also busy doing some research on a social enterprise website. I created another blogsite zenduse.blogspot.com. ZendUse is not in production, im still gathering enough support and buy-in from different groups. I dont want to waste money putting up a portal that is not sustainable and will not make money at all.

I will continue my discussion about "Paperless Society". Just give me sometime.

Tuesday, July 31, 2007

10 Information Security Domains for Paperless Recipe



Above image illlustrates the 10 areas of focus for information security courtesy of NCS.Double-click on the picture to see clearly.

By the way, its a course syllabus if you really are interested to become a Certified Information Systems Security Professional. NCS provides the requisite training and certification.

Saturday, July 28, 2007

Can I Trust The Internet and Care About The Future?


The question that I asked myself is, can i trust the electronic transactions? How can i be sure that my privacy, the privacy of my personal information will not be compromised against possible cyber theft or intrusion into my electronic records? How secure is the technology infrastructure in a paperless environment?

Above picture says "Insurance goes paperless". Here is an excerpt from the said article:

"Two years ago, Singapore’s leading insurance company, NTUC Income Cooperative Limited embarked on transformative exercise to convert its 40 million pages of insurance policies and related documents into digital images. At the same time, it started working on the technology infrastructure and work processes to go fully paperless. Now, it is ready to give its agents the power to underwrite policies out in the field, with Intel® technology-based solutions."

I mentioned in my previous blog that Digital Signature Legislation is essential core in the paperless society. In fact it is the tipping point in the campaign to go paperless.

The second ingredient in our recipe for success is the readiness of the technology infrastructure and work processes to go fully paperless.

This is still a big challenge to the technology providers. Even an image copy of legal document you scanned and archived today, 10 years from now there may not be anymore compatible software to re-opened them again and view using another version of pdf viewer or MS Word. Your latest copy of MS Word today tomorrow they are already rendered obsolete.

In my next article I will be discussing about information security and information security management system in a shared data center context.

This is a dragging topic and full of technical jargons, but this is also a very important topic. Information security and security awareness is a topic that is less understood by so many people and yet this is the future.
Do you care about the future?

I am already thinking of organizing free information security awareness training for everyone and for every organization who are willing to listen.

Honestly, Im still figuring out how to make this complex topic simple, concrete and easy to understand.

This is coming up in next...



Friday, July 20, 2007

Paperless and Inkless Signature: Will it Stand In Court?

Digital signature is the essential core or the heart of paperless society and digital signature legislation is the "tipping point" in the campaign towards paperless.

Imagine the following situations:

Case 1: John Doe applied for membership in one the prestigious members club in town. His passport and other personal documents are scanned and stored in a document repository. His application is approved, and he can enjoy the privileges of a member.

A year later, someone disputed the authenticity of the document. They started to question the validity of the electronic document that was previously scanned. It is not valid because the electronic document is not admissible as evidence, it could be a fabricated document or tampered that cannot stand the test of legal scrutiny.

Without a law that guarantees the validity of electronic documents, John Doe or the Member's club chance of winning a case before the bench is slim.

Case 2: Company A and Company B entered into a contract for company A to buy from B a piece of land worth $1M and for B to deliver the said land after a lapse of one year. Company A clicked the submit button for approval and company B clicked accept button, the witnesses also clicked on the witnessed by button as well as the notary officer clicked on the button that says "notarized". All parties received an electronic copy of the contract. It says "This is a computer generated document no signature is required"

A year later the land is not delivered and the case landed in court. One of the parties argued that the contract is void from the start because it does not conform to the provisions of the statute of fraud which says for certain contract with amount greater than say for example '$5000.00" to be valid it must be in writing, signed by both parties and they also swear before a notary public that the contents are true, blah blah blah, blah blah blah.

Without a law that guarantees the non-repudiation of an electronic transaction or contract, and without a legal framework for enforcing it, company A's case in civil court is dead on arrival, or it will be a long and costly battle in the court of law.

I said, its a tipping point whenever a country has already enacted a law, such as the "Electronic Transaction Act" of Singapore, that will guarantee the legality of electronic documents and the validity of paperless and inkless signature. The reason is quite obvious, some companies or even individuals can be swayed to go paperless because they know that their rights are protected by law. Another reason is, sometimes laws or regulatory requirements dictate where companies and individuals are supposed to be going. The digital signature law adds more weight and pressure for societies to accept paperless initiatives.

I need more cases or scenerios to build up. This will enable the law makers make intelligent decision and come out with quality legislation.

Any volunteers? I believe we need people to voice out more possible cases of disputes arising out of the digital signature law or so called "Electronic Transaction Act" and introduce incremental improvement.

By the way, here is an article about the signing of the "Millennium Digital Commerce Act of 2000" written sometime on 30 June 2000 from Domino News:





By Eric B. Parizo, Asst. News Editor


U.S. President Bill Clinton signed the Electronic Signatures in Global and National Commerce Act, more commonly known as the digital signature bill.

The new law will fully legalize contracts signed over the Internet, using public and private key-encryption technology, primarily featuring XML code, to identify users by unique digital signatures.

Digital signature technology is nothing new to Lotus Notes and Domino users, but Domino product marketing manager Paris Vakili said the government is catching on to what her company has known for some time.

"With a lot of e-commerce activity, it would be good to have a definitive, around the clock ability to secure documents and take advantage of technology that exists today," Vakili said.
Notes and Domino users have had the ability to include digital signatures within documents for over six years.

The technology works like this: A user can add a signature to a document, using the high-level encryption within the Notes/Domino environment.

If the document is sent in or as a mail message, another user can then digitally verify the document's signature by examining the sender's private key information and the electronic trail, or hash, that is sent along with the document.

Unlike other applications, Vakili said the way Notes and Domino are designed, users can utilize digital signature technology at the most basic levels.

"I believe that most applications do provide digital signatures, but again, with Notes and Domino, because our collaborative environment, you could actually take this level of security to the field and section and document level," she said.

The new law has been seen mainly as a boost for e-commerce at a time when many dot-coms are struggling. Domino users will find it beneficial as well.

For instance, if multiple Notes users in varied locations needed to securely sign a database document, not only does the environment allow for it, but the gray area of legality has also been removed.

"If you're creating a workflow application, your database designer would be able to take advantage of this technology and design the workflow application around it," Vakili said.
While viruses are a constant threat, and some speculate the new law does not take virus attacks into consideration, Vakili said Notes users have few reasons to worry.

"Actually, [with] Lotus Notes, because of our integrated security... any virus would not be able to work around the security, in a sense that it would be able to prevent any mail message from being validated," she said.

Mobile security is also of little concern. Mobile devices with the ability to access a regular Domino server can not only submit and receive digital signatures, but also feature the same virus protection.



Today, the big question is, what happend to Lotus Notes/Domino now? Im just curious. :)

Wednesday, July 18, 2007

Paperless Society:Recipe for Success

"Philo Farnsworth invented television in 1927, but it was David Sarnoff who created television broadcasting to bring black-and-white television to the consumer in 1939. He developed a successful business that put together television, cameras, broadcast stations, program content, and advertising. Farnsworth invented a device, while Sarnoff was the innovator who put all the pieces together to create an industry." - Curtis R. Carlson,et.al. 1




In today's period of global warming. In today's era of knowledge-based organizations and in today's world of discontinuous change, all the ingredients necessary to achieve a paperless environment are already in place. We just need to develop a business model to put the scattered pieces together and create an industry.


The following ingredients are necessary to make this dream a reality:

1. Digital Signature Legislation


2. ISMS Certified Data Centers with Shared Paperless Services audited twice a year by ISO/IEC 27001:2005(E) certified auditors


3. Self Service Portals for Paperless Transactions (with push and/or pull mechanisms)


4. Workflow System and Document Management Systems in every office


5. Federated Workflow Engine for Supply Chain Integration (for Logistics and Communications Social Networks)


6. Convergence of New Media Technologies, Knowledge Management Services, and webcast services ( for Knowledge Sharing, Problem Solving and R&D Social Networks)


7. Personal Paperless Systems in every home and office

8. Communities of Practice




I will discuss each one of the above in my next blog.


Erratum:

It was Paul Nipkow who first invented the television in 1884.

Footnote:

Curtis R Carlson & Willliam W. Wilmot, "Innovation: The Five Disciplines for Creating What Customers Want", page 23