1. Welcome to AIC 2007

2. SAFETY ANNOUNCEMENT Ladies and Gentlemen, your attention please.
There are no tests of the fire alarm system scheduled for today, so if you do hear the fire alarm, which is a siren, or announcements asking you to leave the building, please leave immediately by the nearest available exit.
Staff in High Visibility Jackets will direct you to the assembly point.
Please take a moment to locate the exits around you now.
Thank you.

4. Matt Deacon
Chief Architectural Advisor
Microsoft UK

6. Ed Gibson
Chief Security Advisor
Microsoft UK

8. Lord Erroll

9. Member of the HOUSE of LORDS - an Independent Peer
Lord Erroll - Merlin
Member of the HOUSE of LORDS - an Independent Peer
Select Committee on Science & Technology – Personal Internet Security
PITCOM Parliamentary Information Technology Committee
EURIM European Information Society Group (Director)
LASSeO Local Authority Smart Standards e-Organisation
APIG All-Party Internet Group (Secretary)
E-RA E-business Regulatory Alliance (President)
ISSA UK Information Systems Security Association Advisory Board
Nominet UK Policy Advisory Board
All-Party Group for Entrepreneurship (Vice Chair)
Knuru.com
CRC
24/04/2017

10. Preconceptions
What did you
expect me to be like?
24/04/2017

11. Merlin
24/04/2017

12. A LORD
24/04/2017

13. I was in Software Development
There are 10 kinds of people in the world:
Those who understand Binary
And those who don’t
=====================================================
Now I’m in Business Development
24/04/2017

14. Me at my desk in the Lords
24/04/2017

15. What happens to your castle if you get on the wrong side of the Executive Old Slains, blown up in 1595
24/04/2017

17. What I’m going to cover Influences on legislation
Where I’m coming from
Priorities & Issues of Concern
Transformational Government
Globalisation
Professional Qualifications 4
24/04/2017

18. Influencers and RegulatorsEU
CEN TC 224 WG15 PUKE
MSS – SAG
Parliament
Select Committees
EURIM
AP Internet Group
ICT Conferences
MS Architect Insight
Govt. Department
Home Office
DTi
Regulator
OFCOM
Industry Body
Intellect
E-RA

19. Parliamentary Groups Select Committees All-Party Parliamentary Groups
PITCOM, EURIM
APIG (ISPA, ITSPA, EURISPA)
APPG on ID Theft
Parliamentary Office of Science & Technology
Receptions & Presentations
Direct Access
24/04/2017

20. Legislative Process EXECUTIVE PARLIAMENT
White paper – Consultation - Draft Bill
PARLIAMENT
Bill goes through both Houses
Statutory Instruments
(Negative or Affirmative Resolution)
24/04/2017

21. WHERE I’M COMING FROM I’m a Crossbench (Independent) Peer
c. 760 Lords, nearly 1/3rd Independent, not salaried!
Sensible regulation is required,
- but -
I am concerned about
Over-regulation
Increasing power of the Executive 9
24/04/2017

22. Life is to be lived Risk Takers vs. Safety & Security
Puritanism is the haunting fear that someone, somewhere may be enjoying themselves
Risk Takers vs. Safety & Security
Entrepreneur vs. Corporate
24/04/2017

23. The Citizen & The State Regulations are for your enemies
“We must help citizens - for their own good”
LIGHT TOUCH REGULATION
Regulations are for your enemies
Laws often fail to prevent what they forbid
It is pointless passing laws that can’t be enforced
24/04/2017

24. Rules cannot control a Complex System
A complex system is not deterministic
An identical set of circumstances will have different outcomes on subsequent occasions
Rules only affect a few nodes and links
The law of unintended consequences
Define boundaries to behaviour
Common Law (British Law)
24/04/2017

25. YOU – I.T. ARCHITECTS YOU HAVE A SERIOUS RESPONSIBILTY
You must protect the individual
DPA
Chinese Walls
Abnormal access
Unauthorised access
Social engineering

26. Who do you mean by “The Government”?
GOVERNMENT CONCERNS
But first:
Who do you mean by “The Government”?
Parliament (the legislature)?
The Executive (civil service, regulators)?
EU (80% of laws stem from EU directives)? 16
24/04/2017

27. Transformational Government
Data Sharing
Identity Management
Shared Services (procurement)
Prevention of Crime
24/04/2017

28. Other Issues Personal Safety on the Internet
Critical National Infrastructure
CMA – Hacker Tools & Pen Testing
RIPA part 3 - Keys
Data Retention (ATCSA)
Internet Governance
TV Without Frontiers (TVWF)
IP & DRM
24/04/2017

29. Compliance Sarbanes-Oxley Basel II Rome 2 ISO 27001
Will there be a SOX equivalent in the EU?
How do you make provision for uncertainty?
24/04/2017

30. POLITICAL PRIORITIES Which is more important?
Identity is on the political agenda
E-Crime is climbing steadily
Which is more important? 20
24/04/2017

31. What is the purpose of I. D. ------- To help you and keep you safe
What is the purpose of I.D.? To help you and keep you safe. To facilitate business.
Central Government – CONTROL – Unique I.D.
Local Authorities – DELIVERY – Federated I.D.
Internet – ASSURANCE – InfoCard certificates

32. People can be Seduced
Money
Ideals
Social Engineering
24/04/2017

33. Walls no longer bound the company
GLOBALISATION
Web 2.0 & Software as a Service
Location of data store (Patriot Act, RIPA pt3 keys)
Mobile working & de-perimeterisation
Flexibility will give competitive advantage
Unavailable Corporate Knowledge is useless 23
Cross-Border data transfers (DPA, MOUs)
Walls no longer bound the company
24/04/2017

34. Professional Standards
Who decides who should be qualified?
BCS
IISP
ISC2
ISACA
IET
COMPTIA
ISSA
It’s hard to define the qualifications
If it’s not the industry, it might be a civil servant
24/04/2017

35. The Citizen & The State BALANCE
They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. (Benjamin Franklin)
Timid men prefer the calm of despotism to the boisterous sea of liberty. (Thomas Jefferson)
BALANCE
24/04/2017

36. THE ARCHITECT Globally the Citizen the SME the Corporate
Your Insight will determine the acceptability and success of the interface between
the Citizen
the SME
the Corporate
and Governments
Globally 27
24/04/2017

37. Or Merlin Hay or Merlin Erroll or Lord Erroll or The Earl of Erroll ?
24/04/2017

38. Architect Insight Focus Groups
The role of the architect
We have built some time into the conference schedule to hold focus groups on the role of the architect.

39. Call yourself an architect?
Can we define what makes us architects?
Can we detect it?
Consistent job titles
End “job title inflation”
Differentiate architects from other senior roles
(eg Technical Consultant and Software Engineer)
Identify future architects better
Why?
We are all of us in this room an architect of one sort or another, but what exactly is it that distinguishes us from other IT professionals?
Can it be detected and measured?
[CLICK]
You might ask why these questions need answering. Well, here are a few reasons:
There is currently little consistency in what architect job titles actually mean.
There is a strong tendency for companies to inflate job titles to include the word “architect”.
It is valuable to differentiate ourselves from other senior IT professionals.
It is also valuable to identify future architects better.

40. IEEE 1471-2000 Includes Architects
The first formal standard in the area of software architecture, IEEE 1471, has just been adopted by ISO. It is a start, but it is by no means complete.
We want to put some colour into this diagram by documenting our roles. The results will be shared with everyone here, with Microsoft managers, with IASA and other interested bodies.
[Matt – you will know who the audience for this information is better than me!]

41. Organisation and Role Types
Strategic
Architect
Solution
Architect
Operations Architect
Data Architect
Web
Architect
Enterprise
Architect
Infrastructure
Architect
To make life more difficult the IT architect currently specialises in one of several roles.
And these can then specialise into further roles ...
[CLICK]
And this is made more complicated by the different needs of various employers.
Business Architect
Network Architect
Security
Architect

42. Organisation and Role Types
Corporate
Strategic
Architect
Solution
Architect
Enterprise
Architect
Infrastructure
Architect
And this is made more complicated by the different needs of various employers.
Consultancy
Vendor

43. Architectural Role Types
Strategic
Enterprise
Infrastructure
Solution
Corporate
Generic
IT Architect
So let’s consider these scenarios in relation to the role types we defined initially ....
Plus let’s add in a new generic scenario to hold common architectural capabilities.
This is starting to look interesting ...
Now we have a matrix of role types ...
So what goes inside of these cells?
Consultancy
Vendor

44. Architectural Role Capabilities
Strategic
Enterprise
Infrastructure
Solution
Generic
IT Architect
Corporate
Grade
Level 1
Level 2
Level 3
Level n
Capability
Capability 1
Capability 2
Capability 3
Capability n
Consultancy
This individual capabilities of the architect.
So what are these then? That’s what I’d like the focus groups to find out.
Vendor

45. Focus group agenda Feel free to meet throughout the day! 
Session 1 (now)
Questions?
Meet & greet
Start discussions!
Session 2 (Day 1: 18:40 – 19:10)
Continue to focus... 
Session 3 (Day 2: 08:30 – 09:00)
Status quo
Cross-pollination of ideas
Session 4 (Day 2: 14:00 – 14:50)
Quantify, Conclude and Deliver
Feel free to meet throughout the day! 
(BTW, this is voluntary)

46. Room 1 Room 2 Room 3 Room 4 Room Facilitators Matt Deacon
Andy James (Solidsoft)
Charles Young (Solidsoft)
Jeremy Palmer
Room 1
Andrew Macaulay (Capgemini)
Sam Lowe (Capgemini)
Andrea Westerinen
Iain Mortimer
Room 2
Mike Lloyd (Carbonflame)
Paul Cross
Richard Godfrey
Room 3
Ron Jacobs
Beat Schwegler
Simon Thurman
Room 4

47. Thank you!
Session 1 (now)
Q & A
Meet & greet
Start discussions!

48. Thank you!
Session 1 (now)
Q & A
Meet & greet
Start discussions!