There are lots of metrics for measuring security readiness and response, but we think this one's hard to beat: the time between when a security incident occurs at a major company and when the CEO is forced to make a grovelling public apology.

IT security is often treated as insurance -- something you have to spend on but which doesn't deliver any actual value. Forrester analyst Michael Barnes reminds us that in an era where breaches are increasingly common, strong security and governance can actually be a means of attracting customers.

Effectively rolling out and managing IT involves juggling numerous competing priorities. That said, one simple question can help clarify many issues: What can I do to help people do their best work?

Call it big data, analytics or old-fashioned business intelligence, the ability to identify trends in business data can be useful. However, trying to build a system which is both adaptable to large volumes and easily tweaked can be challenging.

We're often told that consumers prefer native mobile apps to mobile-optimised web sites, but does that mean organisations have to deliver them? An analysis of Australia's big four banks by Forrester suggests that a mixed approach -- using native functions when helpful, but linking to web sites otherwise -- delivers good results.

If you're running Windows 8.1 in your business, the chances are it's sitting alongside Windows 7 systems as well. Forrester analyst JP Gownder points out that this approach is likely to be messy if you don't also have an up-to-date System Center deployment.

Managed security services provide an opportunity to improve your IT security without having to invest heavily in on-premises equipment. However, it seems the main reason we're adopting them is a more pragmatic one: there simply aren't enough security experts to go around.

Mobile devices capture an enormous amount of data about their owners, and mobile app developers can easily tap into that stream. However, if you don't need all that data, it makes sense not to grab it -- if only to avoid having to recode as regulators clamp down on the collection of personal data.

In large enterprises where ITIL is an acronym that doesn't need explaining, you'll often find IT pros arguing the merits of a configuration management database (CMDB) to track and manage technology assets. Forrester analyst Glenn O'Donnell argues that while tracking configurations is vital, the CMDB approach is far too limited for modern IT.

The attempt to roll out universal health cover in the US has suffered a major setback with performance issues on the Healthcare.gov site used to allow consumers to sign up for individual plans. Forrester analyst David Aponovich points out that all web projects can learn from the mistakes made rolling out the site.

Part of the appeal of deploying cloud-based solutions such as Office 365 or Google Drive is the idea that it will reduce IT administration overheads. Forrester Research reminds us that this isn't always the case, especially if you're trying to migrate lots of existing documents.

Samsung's much-anticipated Galaxy Gear smart watch was officially launched today. One potential advantage it offers you might not have thought of? Improved identity and access management.

If you're running a mainframe (and many enterprises still are), then one of your biggest expenses will be the monthly licence charges (MLCs) imposed by IBM. Reducing those costs could make a considerable difference, but making those calculations can be tricky.