Business Driven Technology 6th Edition by Paige Baltzan

Exercise 29

Autonomic Railways
Canadian Pacific Railway (CPR), based in Calgary, Alberta, Canada, is one of the largest railway systems in North America. With more than 14,400 miles of rail line in Canada and the United States, this $2.6 billion (U.S.) transportation company serves virtually every major industry, from the resource-based industries of the West to the manufacturing bases and consumer markets in central Canada and the northern United States.
Shippers expect fast, reliable services and on-time delivery of goods. As a result, CPR designed many programs-from improving asset management, to strengthening service reliability, to accounting for fluctuating costs-to help it respond to market forces with agility and ease. Val King, manager of IT security for CPR, explains that security management is an essential element in the delivery of these on-demand services. King said, "We must protect our operations from technology attacks, while providing our customers easy, reliable access to information and services online."
The goal of the company's IT security team is simple: minimize risk while optimizing user satisfaction. Yet the team's greatest challenges are lack of resources and tight budgets. "We had to look to technology to help us accomplish our goals," explained King. CPR collaborated with IBM to deliver solutions that are both automated (they can control a defined process without human intervention) and autonomic (they can sense and respond to conditions in accordance with business policies). As a result, IT employees can deliver consistent, reliable service levels at reduced costs since they collaborated with IBM using autonomic computing resources such as Tivoli Risk Manager, Tivoli Access Manager, Tivoli Identity Manager, and Tivoli Decision Support. "The automation of processes through the intelligent self-managing features of Tivoli software can help companies respond to threats more quickly," King said. "The benefit is that organizations can strengthen the resiliency of their environments even as the number of security events increases."
CPR is realizing measurable results from its implementation of Tivoli Security Management solutions and King sees the already-realized benefits as only the "tip of the iceberg." Some of the notable ROI from CPR's investment in Tivoli Security Management solutions include:
1. Improved productivity -The IT security team spends less time managing security incidents with Tivoli Risk Manager. The IT staff also expects to spend less time on reporting because data from the various security monitors will be integrated.
2. Reduced costs -The application development team estimates that a centralized security model helps accelerate development time. The help desk organization reports a reduction in user calls, due to the password-reset capabilities of Tivoli Identity Manager.
3. Increased business resiliency -Using Tivoli Risk Manager, Tivoli Enterprise Console, Tivoli Decision Support, and Tripwire, a data integrity assurance solution from Tripwire, Inc., CPR tests show that if an attack shuts down a service, administrators can get systems back online much faster.
4. Improved audit compliance -Before the implementation of Tivoli Access Manager for ebusiness, security staff would need to look at each system or application to see if it properly applied security policy. Now, security policies are consistent enterprisewide.
Which of the trends will have the least impact on CPR's business