Educause Security Discussion mailing list archives

Re: Centralized vs. Decentralized IT


From: Stephen John Smoogen <smooge () GMAIL COM>
Date: Thu, 7 Aug 2008 13:56:01 -0600

On Thu, Aug 7, 2008 at 1:27 PM, Sarazen, Daniel <dsarazen () umassp edu> wrote:
Hi All,



Do you have any leanings between Centralized IT networks (Main IT group
responsible for IT services); vs. decentralized IT networks (Each department
is responsible for their own apps, servers and security (Intrusion
detection/prevention) with their own IT staff? Has anyone looked at their
campus and formed an opinion on the IT governance configuration?



In most places you are dealing with the feudal system that most
Universities have in place. Centralized systems require a strong
'king' who can take money away if the 'lords' rebel and don't want to
follow the rules. However, most Uni's do not have a strong 'king'
since the money usually comes from grants etc. This leads to the
decentralized system where every lord sets their own rules, and
follows what the King says when it suits them (well if we follow that
we won't be eligible for this grant... etc).



Any feedback you can provide is appreciated.



Thanks,



:: Daniel Sarazen, CISA, Information Technology Auditor
:: University Internal Audit
:: University of Massachusetts President's Office

:: 508-856-2443

:: 781-724-3377 Cell
:: 508-856-8824 Fax
:: Dsarazen () umassp edu

University of Massachusetts : 333 South St. : Suite 450 : Shrewsbury, MA
01545 : www.massachusetts.edu





--
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"

Current thread: