Recently,
I've been studying a lot of information about ERP (Enterprise Resource Planning)
system deployments and their lifecycles. It seems that, in general, there are six different
goals when installing and deploying such system. These are: speed, capabilities,
resources, risk, complexity and benefits. The meanings of listed factors are
self-explanatory, and it is easily understood that some of them have negative
correlation with others, such as speed and capabilities or resources and risk. I
thought for a minute that this model could be used for any big deployment, such
as SIEM. Of course, there are plenty of
resources about SIEM deployments, but I believe this comparison and those six factors are really interesting. We can compare the perceived and real values
for each goal for a specific deployment style. I chose the 'break-neck'
deployment, in which you try to install the system as quickly as it is possible
...
|
break-neck deployment style |
This may be a starting point for further research into the deployment styles, the
advantages and drawbacks. In most cases, the
deployment style is dictated by the business, on the strategy level.
Very often the security systems are perceived as must have, out-of-the-box
solutions... but there are not. If one want to have a good ERP or SIEM system
deployed, with full capabilities and long term benefits, then I suggest getting
familiar with the deployment styles and six (or more) factors.