Special Feature
Special Feature

Getting smart with enterprise storage

Over the past couple of years, enterprise data storage needs and requirements have been growing at a tremendous rate, even during periods when the economy was sluggish.

Buying into rental

Local companies are at last getting over their traditional resistance to IT rental - but it might not be the best solution for everyone.Traditionally, local companies have owned all their assets, including IT equipment; but recently many companies supplying desktops, servers and printers on a rental basis have been able to expand their business. On the surface, this implies South Africa may be following European trends, where up to 30 percent of IT equipment is rented.Earlier this year, South African computer rental companies were extremely optimistic about the market potential. They reported significant growth and made what appeared to be a strong case in favour of the rental option.Their claims still seem valid. "In 2002, we doubled the previous year`s turnover and this year we are predicting doing the same," says Spartan Computer Rentals MD Donald Goldfain. "The past few months have been record months."Others are more guarded, but most expect an upturn in coming months. Dell financial services GM Stuart Lewis says the market is a lot more mature than even a year ago and the initial excitement has probably worn off. "But, at the same time, I don`t think we have topped out." Out of the dark agesLewis says there are a lot more players in the market now and market share has been eroded all round. However, many of the new competitors are companies that formerly provided asset-based financing for photocopiers and fax machines and he predicts they will begin losing market share as customers realise that, instead of IT rental, they have been given a financing lease which is "as good as paying cash or going to the bank in terms of the flexibility it gives".RentWorks sales and marketing director Gary de Souza notes that the IT market has stumbled a bit in the past year, but is on the verge of picking up again. He says companies that upgraded for Y2K are sitting with three- to four-year-old equipment. Goldfain agrees. "Many companies` machines are ready to fall over and are hopelessly underpowered."He says the need to upgrade, together with lower interest rates and the fact that "South Africa is finally moving out of the dark ages when the culture was to buy hardware and push it to its limits", means that conditions are highly favourable for the computer rental industry.Most ascribe the market`s initial resistance to rental to the strong ownership mentality pervasive in local business - which can be ascribed to years of isolation and negative experiences with rental deals on photocopiers and fax machines. "Office automation rental scared a lot of people due to the high rates charged and the fact that some rental companies continued to charge rentals instead of notifying customers when rental periods came to an end," says ATR technology rentals MD Johann Basson."Another problem we faced initially was the perception that rental was the poor man`s option," says Lewis. "As people began to understand that IT was a rapidly depreciating investment, they realised that by renting or leasing, the cash could be better used to generate returns for shareholders."According to one company, rental is "too troublesome", requiring careful planning and tracking to avoid incurring penalties. The company says continually falling computer prices and a positive cash flow made it preferable to buy IT equipment, depreciate it over three years, and then sell. Goldfain comments that buying equipment may save money in the short-term, but once it is bought the buyer is stuck with it and there are no upgrade options."One of the key issues with companies of 50 to 150 employees is that they don`t acknowledge the depreciating value of IT equipment or the ongoing technology cycle they have to keep up with," says Lewis. "Secondly, they probably believe they can get away with sweating assets up to six years, so renting is not such a strong proposition."He believes it is unlikely to be cost-effective to hold on to equipment if the company`s productivity is being affected. "Smaller companies don`t take into consideration the cost of maintaining older equipment." The hot spotThe small and medium enterprise (SME) market is believed to account for about 60 percent of IT spend, so many rental companies are pursuing this sector. "In the middle market there is a lot of opportunity and potential because that is where rental probably lags behind overseas trends," says De Souza. "For SMEs, IT rental is an extremely viable option," affirms Datacentrix infrastructure MD Ahmed Mohamed.Part of the challenge facing rental companies appears to be convincing financial directors of the benefits. "There are a lot of FDs who still believe IT equipment should be on a balance sheet, but we see the renting route as investing funds in opportunities that can grow your business," says Basson. "Keeping it on the balance sheet means that within 12 months any equipment that is bought will be worth 50 percent of its market value, but if you invest that money in something else, you can achieve 40 percent return on investment."IBM personal computing division executive Oliver Fortuin says SMEs will be the fastest growing part of the market for quite some time. Traditionally handling only corporate accounts, IBM soon plans to introduce a set of IT finance options designed to meet the service needs of SMEs. "The Maestro offering, which has already been launched in Europe, provides customers with a PC base of between 200 and 1 500 machines, good low-cost total IT management tools, as well as a set of software tools and services that integrate end-to-end, probably for the first time in the SME market," says Fortuin. The size issueWhile IBM has newly set its sights on the SME market, Spartan has long had a wide range of customers from big corporates to small family businesses. "We are one of the few companies that do low-end deals," says Goldfain. "SMEs represent about 40 percent of Spartan`s customers."But Goldfain doesn`t expect this percentage to increase because of high administration costs relative to the size of the deals. "In deciding which customers to take on, rental companies need to be able to identify those customers who have the potential to grow." Smaller companies could also find rental options less cost-effective than corporates. "The increased risk on smaller deals is offset by a higher rental," Goldfain points out.The fact that IT rental has until recently been most popular with corporates is partly because many multinational subsidiaries have the same procurement models as overseas counterparts. IBM global financing manager Alf Montepara explains that rental is a cost-effective way of procuring IT equipment for corporates because having the equipment off balance sheet means huge tax savings. "Even extending the rental can represent good value because corporates can often negotiate rates of as little as 10 percent of the original monthly fee."Another reason corporates remain in favour of rental is the high rate of obsolescence. "There is a huge cost benefit in being able to upgrade IT equipment when necessary," says De Souza.The flexibility of rental agreements does not end with the ability to refresh technology, it also means being able to restructure IT components as needs change. Lewis explains: "If a company is downsizing, it can return a portion of its PC base and replace it with something else, such as storage." Rental or finance?A big problem, though, is that many people use the terms "rental" and "financing" interchangeably. IBM global financing senior sales specialist Ravi Patel explains that there are accounting differences between the two concepts. "A finance agreement is a generic agreement that could be rental, a deferred payment, a lease, or a hire-purchase. Renting means never owning the asset, it always has to go back to the provider of the rental agreement. Rental is just one of many different ways of structuring PC finance."On closer examination, it becomes clear that what is broadly referred to as the computer rental industry has financing at its core. "In essence, computer rental companies are finance organisations, which means revenue is derived from interest income as well as value-added services such as insurance, trade-up options and maintenance," says Goldfain.He says another important source of income is short-term rental and the sale of equipment to the second-hand market. "Spartan has tried to take the mystery out of IT finance. At the end of the day we are selling a piece of equipment on extended terms linked to the prime overdraft rate, bundled with various value-added products."Although computer rental companies are finance organisations, most emphasise that rental should not be seen in isolation and that it involves a lot more than finance. "Rental is not only a financial solution, it is a solution that consists of many customised value-added services," says Basson. "This means clients can source the best product at the best price."Glenrand MIB benefit services IT manager Paul Landman concurs. "Rental gets IT equipment off our asset list, we are able to trade up whenever we need to, and the most important factor is the support we get in terms of refresh, maintenance and repairs. The ability to refresh about every two years is perfect for us to keep pace with our software applications." The risk factorDe Souza says not everyone is in a position to take residual risk by investing cash in multi-million rand transactions. "RentWorks has about R130 million in upfront residual investment on total assets of R2 billion. To do that, you have to have a sizeable balance sheet, access to cash and the ability to invest long-term."Companies attached to vendors are able to provide a one-stop facility. Dell Financial Services (DFS) offers a direct model. "The customer deals with the vendor and the finance house directly, without having to go through a reseller," says Lewis."Contact between Dell and DFS is closer, therefore access is easier, after-sale access is better, and there is good communication between the two because DFS is part of the Dell package." Lewis says DFS also takes residual investments in all transactions. "The residual is an investment of our own equity, giving the customer all the benefits of rental, but at payments based on the equipment value less the residual."Montepara adds that, unlike banks and other financiers, IBM global financing can provide an end-to-end financing solution that includes financing for software licences, services and hardware. "Being one company, IBM can swap out the equipment and extend the payment stream. Traditional third-party finance companies are more likely to increase monthly payments for the new technology because they do not have the same flexibility as IBM to restructure agreements."De Souza says this is standard industry practice known as "blind discounting", where hardware discounts are used to subsidise rental agreements. Crystal ball gazingAlthough rental companies quickly list the plethora of benefits to be derived from renting computer equipment, most concede that IT rental is not for everyone. "There are times when it makes sense to pay cash," says Goldfain.What of the future? "We are moving into wonderful new territory," says De Souza, "into putting structured finance solutions into place. By introducing tax benefit and risk management structures, you are moving out of commoditised rentals towards structured finance solutions."

Some innovate others inhibit

South Africa is ideally positioned to deliver IT services into Africa and Europe, and the country`s past isolation has engendered the ability to maak `n plan. But for every element fuelling success, there is a hurdle across the path.Two floors of an unassuming brown building on the periphery of the Cape Town business district are a bustling hive of innovation. Here, small companies can rent floor space – just as much as they need – along with the shared infrastructure they need to get started in business.The UUNet Bandwidth Barn is the pioneer project of the Cape IT Initiative (CITI), which is a not-for-profit promotion agency for the ICT industry in the Western Cape. Its intention is to grow the Western Cape into an international ICT hub, creating jobs and building the regional economy. The Bandwidth Barn offers entrepreneurs the facilities, bandwidth, mentorship, support and networking required to grow young businesses and foster innovation.“The greatest local hindrance to innovation and development is the problem with access to realistic financing and support, especially in the form of accounting and legal matters,” says Dan Perrin, founder of Perrin Software, a small company housed in the building. “Starting out is when the most support is required, and it appears that there is a general reluctance to assist a company before they can show a healthy profit, the only exception being those institutions who would have the struggling new businessman literally hand over the controlling interest in the business.“The Bandwidth Barn has definitely provided a much needed nurturing environment in which we are constantly impressed with the advantages provided, and have already reaped enormous benefits from the association and exposure to surrounding companies,” adds Perrin. “The benefits have made a huge difference in our ability to move forward in our quest for a successful business.”Rotor, Perrin Software`s flagship product, was developed in recognition of a need for parents and business owners to monitor the online and offline activities of their respective children and employees. After evaluating 20 products, Perrin came to the realisation that there was room in the industry for a real-time recorder.“By its very nature, real-time recording uses a lot of a hard disk space, and the first barrier that had to be crossed was developing the compression technology that would make it possible to store as much information as was required using as little space as possible,” explains Perrin. “We passed that challenge with flying colours, so much so that our compression is twice as good as the best international product we could find.”The recorder also provides a human interface that alerts managers when there is a security breach or other threat, rather than requiring them to wade through hours of tape. Perrin claims that competing software products simply do not provide adequate functionality to extract only the information needed.While small businesses may lack the infrastructure to allow them to focus on their core function, it is the glut of infrastructure that stifles innovation in their larger counterparts.“Innovation must be strategic, properly managed and implemented, without becoming bogged down in politics and bureaucracy,” says Thomas Jankovich, global business development manager of Deloitte Innovation Services. While this might seem an impossible task in most of today`s corporates, Jankovich explains that this is not the case. “Not if the terminology is strategically situated outside daily business and follows a carefully designed process,” he says.Deloitte & Touche SA began developing and implementing the methodology five years ago and has since been working at refining and streamlining it. “Essentially, the process follows six simple stages,” explains Jankovich. “Innovation leadership, ideation, market intelligence, business development, funding and implementation, and managing the exit. These steps apply to every industry, every business and in any country.”This process, innovative in its own right, is now being offered to international clients as well. “Innovation Services has become so well established and so effective that we are now offering it as a service to clients worldwide.”In fact, these processes have proven so effective that Deloitte & Touche has applied them internally as well, and reaped benefits to the tune of several hundred thousand dollars.“Since implementing our own Innovation Zone, Deloitte & Touche itself has seen the startup of dozens of businesses,” says Jankovich. “The potential is practically incalculable and the profits often exceed initial expectations. I am confident that, within the next few years, organisations are going to find themselves compelled to implement such an innovation methodology if they wish to remain competitive in our challenging global market.”This is all well and good for companies that have a substantial budget allocated to external consultants, but Jankovich maintains that these practices can be put into action to promote innovation regardless of the size of the company. “You`re not going to innovate if you don`t have all these components, whether you are a one-man or a one-million-dollar band,” he says, but adds that smaller companies would have less of a need for strategic innovation programmes.“What you will find is that a smaller organisation is generally innovative in itself. You won`t find a smaller organisation that is stagnating in its industry, where it is in the first half of its lifecycle, is dynamic and doesn`t have any processes in place. When you encounter a company that says they want to deploy a strategic innovation programme, they are in the second half of their lifecycle.”Bandwidth Barn and Deloitte & Touche Innovation Solutions are two very different strategic initiatives aimed at fostering innovation at opposite ends of the business spectrum. What emerges is the certainty that innovation is necessary to survive; but for that innovation to survive, it must be cultivated.“To become a leader in a globally competitive environment, you have to have the jump on competitors – and a significant jump at that, not just a little step,” says Jankovich. “This requires radical innovation, but not haphazard initiatives or excessively risky ventures.”While these two initiatives may reflect positively on the South African climate of innovation, the general population of “ideas men” believe that the country does not offer enough support for start-up companies.“Prototyping and research cost money, and South Africa does not house a streamlined non-biased government grant process that is truly representative of this country`s diversity of people`s ability to create and innovate,” says Ricus Ellis, executive director of PreWorX. “The availability of local capital is non existent for good reasons, of course; so you are pretty much left to finding private individuals that have money and are prepared to invest.”If a fledgling company has managed to navigate the myriad obstacles of finding financing, the next hurdle is identifying local customers willing to purchase home grown solutions.“I firmly believe big companies and government only look outside the country for their software requirements,” says Richard Firth, CEO of MIP Holdings. “If you look at the total IT spend in South Africa, which is in the order of R80 billion, I`m not sure that even 20 percent of that was spent on local software in the last year.”He cites the healthcare industry as an example of how software has been developed locally, specifically for a market segment, after international software was unable to deliver. “The healthcare industry has burned its fingers so badly with international software that no healthcare organisation will touch offshore products. They have come to the conclusion that they need to use local companies for their applications. Broaden that view into other industries and you will find that there are massive amounts of international software that are not getting the job done right.”MIP Holdings vied with 31 companies to become the provider of Progress Software`s Internet framework, which is now called Dynamics. As a result, MIP Holdings has expanded its area of operations into Europe and the US, becoming a global developer on the Progress Software platform. Despite this level of international interest, MIP Holdings still struggles to attract local attention. “We get more international interest than local interest in terms of new business right now, because people see local software developers as highly skilled and companies here generally cheap to do business with,” says FirthDespite this vote of no confidence on the local front, Firth has remained loyal to South Africa. “All my intellectual property rights for the software is owned here in South Africa, which contrasts with some companies that suggest they are local yet are registered outside South African borders – and unfortunately, this is where all the wealth goes to.” Death by taxesWhile the lack of funding and customers are the most likely stumbling blocks to a start-up company, where marketplace resentment of government infrastructure kicks in is at the point where small companies actually start to make money.“I think government is a bit short sighted when it comes to taxation,” says Ellis. “When you burn cash to develop and innovate it becomes a cost entry and it comes off your bottom line. The day you make a profit, you are taxed like any other company importing intellectual property. There is no special tax incentive to build intellectual property in this country, nor is there a non-bureaucratic system protecting intellectual property against international peers.”He compares IT innovation with the mining industry. South Africa has in the past exported iron ore to international markets, only to buy it back once it has been processed. It would make sense to increase the value of our offering by investing and processing the iron ore and then exporting the processed iron, transforming our natural resource into higher value. This retains value and earns money for the country.“Adding value to exported resources is so important for this country to retain its intellectual property,” says Ellis. “In our case, you get taxed the same, even if the direct input cost for a start-up company to play the international markets is significantly more than doing this out of the US, for example.”In defence of the South African government, there are a number of initiatives available to help out small businesses. But in a country that urgently needs to nurture its entrepreneurs, these are few and far between.“Government structures and incentives have been in place for a number of years to assist innovative companies in bringing new products to market,” says Jan Mrosik, MD of mobile business at Siemens Telecommunications. “Currently the total funding available and the limits per project are too low to make any significant impact on any particular industry. The scope and focus of these schemes is also too broad. It is a case of few funds spread too thinly. A government-sponsored venture capital scheme on a grand scale is required, focusing on a particular industry and having a presence in the president`s office.”He uses the example of India`s Ministry of Information Technology facilitating the growth of that country`s industry to international powerhouse status.In South Africa, the name most strongly associated with successful innovation is Mark Shuttleworth; and he has in turn established his foundation as a funding mechanism for innovative companies showing promise. There are, however, other local companies that have seen national adoption of their products and are now reaping the benefits.One such example is Leaf Wireless, a company that uses wireless technology to deliver a wide variety of services from news and financial headlines, through daily horoscopes and ring tones, to security applications and innovative point of sale solutions. Initially working closely with MTN, Leaf Wireless has now expanded to include offerings to users from all three of South Africa`s network operators. This burgeoning success on the local front has given Craig Bregman, Leaf Wireless`s marketing and media executive, a refreshingly positive outlook on doing business in the country.“South Africa is an ideal environment for innovation in IT and telecommunications,” he says. “These two industries make it possible to bring communication and education to our population in a technologically efficient and affordable way. The breadth of socio-economic issues that face us in South Africa – a country successfully bridging cultural divides that previously separated us – demands innovative solutions that promote progress, sustainability and opportunity for us all.”He goes on to comment that for innovation truly to be fostered on the local front, South Africa needs to embrace the value of its intellectual capital. “We have a real opportunity to enter the global technology market with compelling, world-class products and services that will establish a strong foundation for building a sustainable and competitive industry going forward.”

Dot coza boom revisited

Tipsters are predicting that of the surviving listed Internet companies in the US around a half will be profitable by the end of this year. B2C (business-to-consumer) revenues are rising and many traditional businesses are realising the benefits of B2B (business-to-business) e-commerce. All very encouraging, but does it hold water for South Africa?Long-time local IT commentator Duarte da Silva of the J&J Group is cautious, pointing out that many of the inhibitors that stifled Internet commercial success, particularly in the B2C space, in South Africa are still present – most importantly a lack of volume and access.He has a point. Accurate figures on Internet users in this country are hard to come by, but it would not be unreasonable to suggest they stand at around the three million mark – hardly enough to get pulses racing.“The successful examples have been retailers like Woolworths and Pick `n Pay and the banks that have identified the Internet as just another business channel,” Da Silva says. Companies transacting through the Internet in isolation, he believes, have little chance of success. Reversal of fortuneM-Web, South Africa`s largest Internet service provider (ISP) and dot com company, would probably disagree. As a listed entity, the company achieved headlines more for the amount of cash it burned each month than the services it offered. However, since it delisted from the JSE Securities Exchange in July 2001 and dived under the substantial cover of the Naspers Group, its fortunes appear to have turned.In its latest financial results (year-end March 2003), Naspers cites the Internet as its fastest growing business area, with revenues up 63 percent, and operating losses before amortisation almost halved to R244 million.Also, last month M-Web reported record traffic to its new portal in the month of July: 814 834 unique users. According to Russel Yeo, general manager of M-Web Studios, the record is a firm indication that the company`s new focus on providing a wide range of exclusive services, tools, products and “premium” content to members is successful. The Internet, and the M-Web brand in particular, Yeo says, are becoming “an integral part of South African people`s everyday lives”. The company has also made what appear to be successful inroads into the Far East.But Da Silva, for one, remains sceptical. “The main reason that M-Web is still around is because of ‘Big Daddy` [Naspers]. The company has yet to prove whether it is viable or not,” he says.It`s arguable whether ISPs qualify as pure dot coms or should rather be categorised as an offshoot of the telecoms industry. But Naspers` Internet offerings run far deeper than ISP services.On the retail side, subsidiary Nasboek`s e-commerce platform Kalahari.net doubled its revenues to R32 million this year. The company is confident it will continue this trend going forward and says it is following a strict roadmap to profitability. Kalahari.net benefited from the collapse of rival e-tailer The Shopping Matrix earlier this year; but, even if it reaches profitability, it is hard to see it ever becoming a significant earner for the media giant. A tale of small earnersMore about M-Web and Naspers later, but it appears the real story of stand-alone South African B2C e-commerce is a tale of small earners. Pick of the bunch could very well be NetFlorist, the sole dot com survivor within contact centre outsourcing company CCN Holdings (formerly the ISP NetActive).MD Ryan Bacher says the online flower retailer turns over around R10 million, with profits in the region of five percent of that princely sum. He believes the key reason NetFlorist has remained afloat is that it exists in a market that has no dominant player.“Secondly, there are a number of recognised consumer brands out there selling flowers and what we have succeeded in is building partnerships with them. These relationships give us access to our partners` customers and account for nearly half of our business,” he says.This partner programme has enabled NetFlorist to eliminate marketing and stock holding costs that have rung the death knell for so many dot coms, and reach profitability after just three years.“It`s not about above-the-line marketing: the returns are still too small. If we had relied on above-the-line, we wouldn`t have survived,” Bacher says. “Partnerships do not drain the income statement, although the challenge is you`re always going to be the smaller company. We play a role in our partners` businesses, but we`re a blip on their radar screens.“We`ve been building partnerships for around four years and while there`s often a bit of scepticism at first, our reputation is good and we`ve established a name for reliability. Currently 80 percent of our orders are made online and the balance through our call centre,” he saysNetFlorist is probably as close to a true e-tailer as you`re going to find in South Africa. It holds no stock, relying on florists throughout the country and, importantly, does not look to differentiate itself on pricing.“Our product lends itself to the `Net. Customers were accustomed to using the phone to order flowers and the shift to the Internet has been easy. If you`re looking to sell a big screen TV online, for instance, your only selling point is that it is cheaper. That`s a business model that just can`t work,” Bacher says.He estimates the current “flower sending” market at around R200 million a year and has no reason to assume NetFlorist cannot continue to achieve growth rates of between 60 and 100 percent in the medium term.Another success story is the online flight-booking agent kulula.com. While kulula.com is not independent – it falls under the Comair Group – it`s worth looking at as it`s something of an anomaly: a dot com that claims to have been profitable from day one.At least that`s according to executive IT director Carl Scholtz, who was unable to give exact financial figures as JSE-listed Comair was in a closed period at the time of writing.Kulula.com follows a mixed business model in that it does not rely on the Internet alone for distribution. Comments Scholtz: “We understand that transacting on the Internet is not everyone`s cup of tea so we have catered for a number of options.“While around 60 percent of our clients book and pay online, others make use of the option of paying for their flights at First National Bank branches around the country, while those who are not Internet-active can make use of our call centre.” Keep it simple – and cheapKulula.com is also active in B2B e-commerce in that it interacts with travel agents online. Agents can make use of a separate travel agent website that allows them to make bookings and keep tabs on their travel spend and commission earned.There`s no doubt that air travel lends itself to the online business – it is, according to Scholtz, the second largest market wordwide in terms of transactions. This said, the main reason for kulula.com`s success is, unlike NetFlorist, probably its price competitiveness – flights can be up to 42 percent cheaper and the company recently added a further R50 discount on return tickets booked online.“We learnt quickly that customers disappear if they encounter any problems online, you simply have to offer the simplest and quickest deal around,” adds Scholtz.The learning process must have been intensified by the server-crashing response to a recent special offer, in which R400 return tickets between Johannesburg and Cape Town left the website unavailable for nearly a day.Kulula.com, Scholtz says, is working towards providing an “integrated travel experience”. The company currently offers both flight and car rental services and is investigating the possibilities of adding accommodation to its bundle of services.Da Silva has pinpointed Woolworths and Pick ‘n Pay as traditional retailers that have successfully employed the Internet as an extension of their existing business channels. However, according to Alison Vorster of Internet infrastructure provider Internet Solutions (IS), clothing retailer and consumer credit pioneer Edcon is a far more interesting example.Edcon, she says, was one of the original customers and first casualties of the dot com craze. The company invested a considerable amount in its online venture edgars.co.za (almost R3 million in software alone) and severely burnt its fingers.How this situation has been turned around is, according to Vorster, an e-commerce success story that spans both the B2B and B2C spaces.“Edcon changed its strategy to one which identified areas within the organisation that could realise significant value from an e-commerce initiative and where success could be measured,” she says. The new model at Edcon focuses on operating expenditure and capital expenditure, ensuring investment in technology is both justified and yields a return.“Edcon immediately saw the economies of scale and value it could realise through the IS infrastructure model and migrated from its existing B2C vendor`s software to ours, hoping to be in time for last year`s Christmas rush. Delivering real value“We went live on time and, within the first week, significantly increased the ratio of customers returning to the site. This was a major turnaround. The company moved from a situation where neither it nor its customers were seeing any value to implementing a fully interactive, continuously enhancing site that`s delivering real value to customers,” Vorster says.Edcon, she adds, is now in the process of adapting its B2B processes to the IS model.“The way our infrastructure model is structured means the more functionality you add, the more cost effective it becomes. The total cost of ownership for the B2C solution stood at around 50 percent of revenue, but once B2B was added this dropped to around a quarter.”The secret, according to Vorster, is to focus on the actual business processes and areas that add value. “At Edcon, in B2C the company has focused on improving the status of statements and payment procedures, the things that really affect the bottom line. The B2B side is very process driven – streamlining internal processes with suppliers for instance – and that`s where Edcon is seeing its return on investment,” she says.Victoria Vaksman, MD of software solutions company Tilos, agrees that a focus on business processes is the route to follow.“The take-up of e-business will be accelerated through the deployment by companies of three basic components that fulfil the base requirements of any organisation wishing to e-enable its existing processes. They are the corporate portal, integrated workflow and document management,” she says.“Together, these three components, along with a shared knowledge base, provide a solid foundation for e-business, allowing companies of any size to e-enable their processes and gain the clear benefits to be had from the new paradigm.“But,” Vaksman cautions, “their implementation must be accompanied by a holistic review of the business and change in core processes, or you`re simply putting lipstick on the pig.”One of the most hyped phenomena of B2B e-commerce has been e-marketplaces. Unfortunately they`ve also accounted for some of the most spectacular failures, both globally and in South Africa.Commerce One South Africa – Distributor Operations` MarketSite is perhaps the most well known locally due to its high profile customer and partner Sasol, which has, by all accounts, benefited greatly from taking the e-procurement route.More recently, M-Web launched CommerceZone and claims transaction volumes totalling over R9 billion in its two-year existence. CE Andreij Horn ascribes its success to the fact that customers on the buy and supply side are seeing real bottom-line returns each day.“Deriving value from procurement is not rocket science – it is not even new. But, integrating all the elements for a successful e-business exchange is much more complicated than could be imagined. By enabling even the most complex of our customers to feel the benefits of e-procurement within 12 weeks of implementation, they see a real return on investment in the same year of moving to a new system,” he says. Maturation processAt present, M-Web CommerceZone claims to process transactions worth more than R450 million per month (although it must be pointed out that many of its clients fall, like M-Web itself, within the Naspers stable).Horn believes the nature of B2B e-procurement has changed substantially during the last two years, maturing into an accepted practice used by leading organisations worldwide.A recent international poll indicated that almost 80 percent of respondent companies were using e-procurement to some extent – an increase of more than 50 percent over the previous year. However, 70 percent of the companies using e-procurement use it for less than 10 percent of their purchases, pointing to the fact that a large number of companies have failed to see real benefits.Horn, however, sees the biggest obstacles to e-procurement growth not as being IT-related, but as the result of flawed business cases associated with these projects. “M-Web CommerceZone combined our e-procurement offering with a strategic sourcing project for each client.“By adding a new client`s indirect procurement volumes to the billions we already manage on behalf of our existing clients, we can offer our clients an immediate reduction in procurement costs and a contract management service that ensures that the requirements of the new client are met,” he says.Tjaart Kruger, executive consultant for Strategic Solutions at Comparex Africa, adds that while the Marketsite solution has been a reasonable success, it must be remembered that, like most other marketplaces in South Africa, it is a horizontal marketplace serving indirect goods procurement.“Furnex has a hosted catalogue environment that allows independent [small] retailers to purchase household goods from larger suppliers, and Collaborative Exchange and Gateway Communications provide electronic forms management services to the automotive and FMCG markets. These are, however, very basic forms of managed environments and do not yet fulfil the dot com promise,” he says.“Technology is certainly improving, but business models will have to change if we are to see sustained business improvement based on a real value proposition in this space.” Beyond technologyKruger says despite the negativity of the past, the benefit of online business is mainly that it can enable a new level of value chain management that was never possible before.“Just as ERP enables the internal functional integration of a business, electronic business can integrate value chains across company borders and enable real value chain management.“The technology on its own, however, will not bring about the improvements. The business practices and processes have to be changed to exploit the power of the technology and this is the challenge for local companies,“ he says.One of the most disappointing Internet performers has been online publishing, which has suffered locally and globally from the unwillingness of users to pay for content and slow take-up by advertisers.Here, the major media houses like Independent Newspapers, Johncom and Naspers have enjoyed limited success by using the Internet as a medium to disseminate repackaged content from their existing traditional publications.Two small companies that do stand out, however, are MoneyWeb and (Brainstorm publisher) ITWeb. Both have survived torrid market conditions and negative sentiment and have firmly established themselves as the dominant players in their respective niches.MoneyWeb, the brainchild of financial journalist Alec Hogg, is listed, though not heavily traded, on the JSE. The site provides high quality, up-to-date financial and business news and commentary and is given further impetus by Hogg`s radio show on Classic FM (also a MoneyWeb project).While MoneyWeb reported a minor loss on revenues of around R15 million for the past financial year, this can credibly be explained by the tough conditions experienced by the media industry in general. The company has been proactive in identifying additional revenue streams, in print and television, and is ambitiously eyeing expansion into the rest of Africa. Not into temptationMoneyWeb has taken a mature approach to its top-level management structure, appointing a number of non-executive, independent directors and an operations specialist as CEO. (One wonders how many of the dot bombs would still be around today if they had had the sense to follow a similar route?)Specialist IT portal ITWeb was launched in 1996, apparently as the first online news service in the country, and has, so far, fended off feeble challenges to its dominant position in its chosen market.CEO Jovan Regasek, who, quite wisely as it turns out, resisted the lure of going public, says the company has been nominally profitable since inception and enjoyed revenue growth of 36 percent to more than R20 million last year. ITWeb earns the majority of its revenues through its so-called company “press offices” which are utilised by a large percentage of local IT companies to disseminate their news releases.Regasek believes the main reason for success has been ITWeb`s basic business premise, which differs from many of the failed content providers.“Their main thrust has been that ‘content is king` where, in reality, the amount of free information available on the `Net has turned content into a commodity. ITWeb, on the other hand, works at creating communities of interest, drawing readers in and then transacting with them.”The paucity of online advertising revenue has also, however, forced Regasek to explore other revenue possibilities, most notably through Brainstorm magazine.Both Regasek and Hogg have hailed the recent formation of the Online Publishers Association (OPA), an organisation whose main aims are to standardise online advertising metrics and educate advertisers about the advantages of Internet advertising. Don`t get too excited“All the major online players have joined,” says Regasek. “We hope it will serve as a vehicle to raise the profile of online publishing and restore trust in our industry.”The probability of a South African dot com renaissance rivalling that which is now being detected in the US remains slim.There will, no doubt, be a measurable increase in B2B activities – especially with adoption of standards such as web services. However, small volumes will probably continue to relegate B2C to its position as an add-on to the banks and the traditional retailers, and as the domain of a few, small independent niche players.But, never mind, there`s always the mobile telephone – and people are used to paying for that!

Life in the old dog yet

Much like Mark Twain when he said that rumours of his death had been greatly exaggerated, enterprise resource planning (ERP) vendors are indignant that anyone would imagine that demand for their solutions has died.Much of the large corporate market is saturated, and the multi-million dollar deals that characterised the ERP market in the nineties have fallen off. In response, the emphasis of most major players has shifted away from selling expensive core applications (such as financials, HR, manufacturing, or distribution) to add-on modules such as supply chain management and enterprise portals.“There are many doomsayers who would advise that ERP is dead. Nothing could be further from the truth, as our sales pipeline and order book shows,” says Mike Evans, MD of JD Edwards SA.Banking on new marketsWhile AMR Research says the core ERP market will show only modest growth from a projected $20.6 billion in 2003 to $21.6 billion in 2004, the market researcher projects healthier growth in complementary applications that the likes of SAP, PeopleSoft and Oracle also sell. And new opportunities for ERP abound in untapped vertical markets such as government and financial services, as well as in the burgeoning mid-market.“A remarkable trend over the last few years has been for organisations which typically fall outside the scope of ERP systems to implement discrete modules of ERP suites, in order to gain some of their benefits,” explains Evans. “For example, many banks, which are in themselves not ERP candidates, have chosen to implement the financial modules of ERP suites so as to gain overall control of their financial operations.“Such an approach can lead to rapid processing, tight integration with their core systems, ease and speed of reporting, an enhanced view of the business, and risk containment. This approach is not possible with older ERP products which have an all-or-nothing philosophy, typified by hard-wired best practices and rigid implementation rules,” he says.Wynand Wolmarans of Atos KPMG Consulting, says that there are strong growth opportunities in the public sector for ERP vendors. Recent SAP deals at SARS and Cape Town Unicity (together worth around R500 million in services, software licences and hardware) have given the local ERP market a major shot in the arm, and provide only a small inkling of the potential the major integrators and software suppliers see in the public sector.“If the public sector goes for ERP, it could be an even bigger market than the private sector,” says Wolmarans, who believes that government could find strong uses for ERP in handling some of its challenges such as the management of its huge workforce or combating shrinkage of medical supplies and pharmaceuticals at hospitals.Gunning for the middle tierMuch of the real action is in the mid-market, however. Definitions of small to medium businesses vary between ERP vendors and between countries (a South African “top 100” company may be a medium-sized business by US standards), but it`s not unusual to look at companies with up to 1 000 potential ERP users as the mid-market.Paul Whalley, MD of IFS South Africa, says that this segment is the fast-growing part of the ERP market. He cites research from the ARC Group that shows that the second tier market accounted for 41 percent of the total ERP market in 2002 and will continue to grow its share of the market by a compound annual growth rate of 6.3 percent.It`s little wonder that most of the top tier players badly want a piece of the action. Oracle and PeopleSoft are both interested in this market, but 800-pound gorillas SAP and Microsoft (see separate story) are the ones to watch.“The mid-market is of interest to us. It`s an area where we feel there is a perception that our products are unaffordable that we need to address,” says Michelle Beetar, director for services and commercial industries at Oracle SA. “However, it will never be the low-end of the SME market for Oracle – it`s an area where no one vendor dominates.”Meanwhile, PeopleSoft`s desire to move into the mid-market is one of the reasons why it considers JD Edwards, which is a strong player in the middle tier of the manufacturing market, a good match.SAP`s latest foray into the mid-market is its Business One product, which is meant to be faster to implement and less hardware intensive than its enterprise suite.Explains SAP Africa`s GM for cross-industry solutions, Simon Carpenter: “It`s a ‘what-you-see-is-what-you-get` environment that addresses the pricing needs of a small business. The product is a good fit for companies with up to 250 users, with an entry point of somewhere between five and 50 users. We`re looking at the sophisticated middle market with this product.”This isn`t the first time SAP has tried to crack the mid-market. Its previous attempts have been only moderately successful, and sceptics doubt its ability to scale its applications down to the price range of smaller companies and put together a suitable go-to-market and services model to reach such customers.Says Whalley: “Yes, the larger tier one ERP suppliers are responding by re-architecting their solutions for this segment, but they are still coming in at a cost premium. When ROI is king, that`s a tremendous differential to recoup, bearing in mind that ‘light` tier one solutions offer essentially the same functionality, or even less, than second-tier solutions.”Picking up the paceBut SAP has come a long way in the past few years, says Dave Vink, an executive director at systems integrator CS Holdings. “It doesn`t cost multiples of five or six times the price of the software to implement SAP any more.”In addition, notes Leon Tromp, alliances manager at the local office of EDS, the use of an application service provision model to serve up plain-vanilla applications could help the major ERP vendors to reach mid-market customers.Consolidation in the mid-market has accelerated in recent years, and is likely to pick up pace as players band together to stave off the threat posed by Microsoft and SAP. Some analysts say they wouldn`t be too surprised to see Microsoft following its Great Plains and Navision deals with yet another acquisition.While this process will leave customers with less choice, that may not be a bad thing in the congested mid-market where dozens of specialised players cater to the needs of a highly niched and price-sensitive customer-base.Ashley Ellington, the divisional manager for Africa at Sage Enterprise Solutions, takes a sanguine view of consolidation: “Rather than alienating potential customers by forcing them to deal with large conglomerates, it adds an element of flexibility to the solutions that can be implemented.“Good discounts, high service levels and closer relationships with the systems integrators that implement the solutions are just some of the benefits.”UK-based Sage Enterprise, the leader in the mid-market by most estimates, is one of the key players driving consolidation in its sphere. Its growth-by-acquisition strategy has seen the company acquire the Concert Group in France in January, Timberline in the US in July, and it also has an offer on the table to buy South African vendor Softline.Even as consolidation of the market continues, a handful of companies are carving out niches for themselves in vertical markets where customers have specialised needs.Aiming at SAPRecent news that Baan was sold for $135 million to an investment group consisting of Cerberus Capital Management and General Atlantic Partners was overshadowed by the acquisition of JD Edwards by PeopleSoft and Oracle`s subsequent hostile bid for PeopleSoft. But the Baan transaction positioned it as the fourth biggest ERP player and a force to be reckoned with in the middle tier of the manufacturing vertical market.“Baan/SSA will go back to being a niche player, but it will be a significant niche,” says Jane Thomson, MD of EOH subsidiary Softworx. Similarly, Sweden-based IFS has grown into one of the top ten ERP vendors in the world while keeping a close focus on three major vertical markets: engineering, telecoms and manufacturing.Nonetheless, PeopleSoft/JD Edwards, Oracle and SAP between them control around 70 percent of the ERP market, according to the Yankee Group. With a 36 percent share of the market, SAP is the runaway leader.Challenging SAP is the underlying reason for PeopleSoft`s acquisition of JD Edwards and Oracle`s bid for PeopleSoft. For its part, SAP is viewing the activity among the other vendors with glee.“There`s a window of opportunity for us since companies usually become inwardly focused after a merger. It offers us an opportunity to consolidate our leadership position,” says SAP`s Carpenter. It remains to be seen whether the middle class can hold its own against the multi-billion dollar titans of enterprise software. Microsoft muscles inIt prefers to play down the possibility that its strategy could bring it into conflict with the likes of Siebel, SAP and Oracle, but a collision between Redmond and the giants of enterprise software is inevitable.By Microsoft`s standards, its Business Solutions division, with a few hundred million dollars in annual sales, is a fledgling business. But the software giant has identified it, along with initiatives such as the XBox gaming console, as one of the engines of its growth for the next decade.In just over two years, Microsoft has combined some of its own products with those of Great Plains and Navision (acquired for a combined value of around $2.5 billion) to create an imposing portfolio in the Business Solutions division that covers the ERP, CRM and supply chain management markets.From Great Plains, Microsoft added the GPS Dynamics and eEnterprise ERM suites, as well as the Solomon ERM suite and FRx financial analytic applications, to its product range.Navision, meanwhile, bolstered the arsenal by contributing the Navision Attain and Financials suites, as well as the Axapta product range, which it inherited from a prior acquisition of Damgaard.Also in the mix are the bCentral small business portal and Microsoft CRM, products that the software giant built from scratch.The products are broadly complementary since Great Plains offerings are designed to be used off-the-shelf in a non-international operating context, while Navision`s products are better suited to rich customisation and multi-national operating environments.Slow integrationNonetheless, Microsoft`s move into the business applications space has been dogged by market confusion about the positioning of the major product lines it inherited with its acquisitions.But the products will not be merged into a single stream until 2012 to ensure that users can buy any product in the family with peace of mind, says Stephen Green, group manager of Microsoft Business Solutions SA.In the interim, Microsoft is working on a common XML and EDI-based web services layer, the Microsoft Business Network, for the major Business Solutions product. This will in time replace some of the unique middleware in each of the products and thus allow them to behave more like members of the same product family.Microsoft Business Solution is also working on integrating the products more tightly with other Microsoft assets including the SharePoint portal, BizTalk process orchestration engine, Office productivity suite and Microsoft Commerce Server. The solutions already use the Microsoft operating system and SQL Server database.Graham van Zijl, MD of Microsoft Gold Partner nVisionIT, says that Microsoft can be expected to make further inroads into the local ERP market now that it is finally focusing its resources on its Business Solutions division and creating the necessary integration between its core back-end solutions and the Business Solutions portfolio.Another priority, at least in South Africa, is to train and certify the company`s network of business partners in the applications space, says Green. Many of Microsoft`s partners are not up to speed with all the Business Solutions offerings, and some resellers fear the market could be flooded with under-skilled competitors.“Microsoft needs to ensure it appoints partners who are sustainable. The solutions your partners install is a reflection of how good your products are,” says Rob Hawley, CEO of Microsoft business partner SIS, who welcomes Microsoft`s drive to certify and train local business partners.Worthy adversaries?Apart from the strong revenue potential Microsoft sees in the business applications arena, sales of the Business Solutions products will help to drive sales of other Microsoft products including its e-mail and web server software, operating systems, office suites, databases, portal products and development tools. Bundling these products into a solution where the parts all work well together will make Microsoft an attractive supplier to mid-range customers.Microsoft`s move into the enterprise applications arena can be expected to catalyse a huge shakeout of the market. In line with its traditional strategy, Microsoft is competing aggressively on cost, which could start a price war and erode the margins of smaller mid-range companies as well as those of the top-tier suppliers such as Oracle, PeopleSoft and SAP.The first to be affected will be low-end and mid-range players such as Accpac and Sage. The fragmented and segmented mid-market has been ripe for consolidation for some time, and Microsoft`s entry will no doubt spur defensive mergers and acquisitions among many of the players.Green insists that Microsoft will not position itself to compete with SAP and Oracle in the high-end market where deals are typically worth millions of dollars and involve complex software customisations.Simon Carpenter, GM of SAP Africa`s cross-industry solutions, agrees: “Microsoft is still an extremely strategic business partner of ours. I don`t foresee we will bump heads too much.”How big is big?Nonetheless, Redmond does have an ominously broad definition of a mid-market organisation: any business with up to $1 billion in revenues or up to 1 000 ERP users.The upper end of that market is SAP territory, especially in a small economy such as South Africa, and the German giant also hopes to push into the middle tier of global market to make up for falling sales in the saturated Global 2000 market. Given Microsoft`s strengths as a supplier of software to SMEs, it is likely to give SAP the fight of its life in the mid-market.But the potential for conflict doesn`t end there. Says Green: “There`s been huge acceptance of our products among top tier organisations. For example, large companies with SAP at the corporate level are deploying Navision or Axapta at the branch office.”Of course, we`ve seen this story play out before and, like last time, it will probably unfold over five years or more. Remember, Microsoft started its infiltration of the enterprise data centre with its operating systems and databases by taking over the departmental servers... Give us a foot in the door!To have local roots is a liability rather than advantage in the South African enterprise resource planning market, complain the country`s software development firms.South African developers of enterprise software, evidently feeling the pinch of a slowdown in IT spending, have lashed out at the government and private sector for giving the bulk of their business to international software vendors while paying lip service to the Proudly South African campaign.Their complaint is not that their products lose out in fair competition with alternatives from SAP, Microsoft or Oracle, but that South African developers are often passed over in the first place.The slowing of the market for enterprise applications, together with a concerted push into the mid-market by the international top-tier vendors, has given companies such as Emsoft and ACS even more reason to resent the global giants.“The corporate market is getting saturated, and now [SAP and the others] want to play in our space,” says Gilbert Parsons, MD of Emsoft. “But people in the top end of the market will not buy South African products.”“We`ve become a Proudly South African company, and we would like to believe that would get us a foot in the door. However, many local companies don`t seem to feel that South African products are good enough,” agrees Mike Stefanski, MD of ACS, the developer of the ACS-Embrace applications suite.Rands across the oceanParsons is particularly incensed that government bodies such as the Cape Town Unicity have rejected locally developed products in favour of expensive international software.Cape Town`s budget for its project is more R300 million for hardware, software licensing and consulting and other services, although some sources say it is running way over budget. “Is there really that much value sitting in SAP for the Unicity?” asks Parsons, and repeats the oft-heard complaint that contracts awarded to the likes of Accenture and SAP simply result in outflow of money from the domestic economy.The Cape Town Unicity did its homework before it committed itself to SAP as its product of choice, including extensive consultation with analysts such as Gartner as it whittled down the list of potential services and software vendors.It has publicised details, but Parsons remains unconvinced. “In a typical SAP implementation, the customer`s IT staff triple and quadruple, and those that benefit the most are the consultants hired to put the software in place,” he says.Local developers claim that their products cost up three or four times less to licence and implement than offerings from the likes of Oracle, SAP and PeopleSoft. Many give their customers access to the source code of their products and are able to tailor their software to meet the needs of South African customers at a low cost because the product developers reside in the country.Besides these business reasons, they`re also hoping to capitalise on the sort of patriotic feelings the Proudly South African campaign is meant to stir. So why are they battling to sell to software locally?The more cynical observers suggest that they`re unable to offer technology buyers trips overseas on reference site visits, or the opportunity to sex up their CVs with experience in implementing an internationally known ERP system.But the truth is more mundane than that. As John Olsson, sales and marketing director at Ability Solutions, points out, it isn`t just South African application developers that are battling to win new business - it`s everyone in the enterprise applications market.Betting on the big guysIn addition, software companies that developed in the years that South Africa was isolated from the rest of the world have needed to adjust to the changes in the market since the multinationals established formal presence in the country.“Do you bet on company X with 20 developers in South Africa, or on Microsoft with 1 700 developers?” asks Stephen Green of Microsoft Business Solutions. Green`s words, as biased as they may be, resonate with many CIOs.“We were previously a privately owned company, and in the event of unforeseen circumstances, we`ll be able to support and run our business as an independent entity again. Besides, we supply our source code to all our customers,” counters Stefanski, whose company forms part of the beleaguered Global Technology group.“American companies are going through more turmoil than anyone else,” says Parsons, referring to the ongoing PeopleSoft, JD Edwards and Oracle saga. “Many South African products are as feature-rich as offerings from PeopleSoft, but they don`t have the American dream behind them.”

The penguin marches inexorably on

Described famously by Microsoft`s Steve Ballmer as a cancer, open source software is challenging strongly in the low to mid-tier server market and beginning to make its present felt, albeit lightly, on the desktop. Adoption at the high end still appears slow, however, as corporate users worry about issues concerning support, accountability and availability.Critically, however, open source has been recognised by the traditional hardware vendors, most notably and vociferously IBM, as well as by many influential application vendors.Local Linux solutions provider Obsidian Systems` Anton de Wet believes the influence of IBM throwing its considerable weight (and around $1 billion) behind open source in general, and Linux in particular, cannot be overstated in terms of its growing credibility as a workable alternative. He says big strides have been made in the high-end space in the US, but the uptake in the South African market is far slower.“Over the last couple of months we`ve seen some movement from the technologists at the bigger vendors, but the local market still lacks the evidence of a major implementation on large, mission critical systems. Once someone has taken the plunge we will see Linux take off in this sector.”Stephen Owens of enterprise solutions provider Epi-Use Systems agrees that Linux has the potential to make a huge impact on the high-end market.“IT managers feel more comfortable because Linux has established a very good track record in terms of stability and security. All the high-end server type applications have long been capable of running Linux,” he says. “Now that the major vendors are embracing it, it will become more mainstream.”Linux unlimitedInus Gouws, a consultant at Computer Associates (CA) Africa, is also convinced Linux has moved beyond its “cheaper option” status. “Linux is not limited at all. The only limit that Linux has is resources. Yes, it runs on lower specification hardware, but when you consider it has the capability of running on clustered environments, the whole picture changes.“The bigger the resource pool the more capable it becomes. You can now have a distributed environment with mainframe availability and reliability. This is very good news for the mainframe crowd as operating system and hardware changes also affect them.“Indeed,” adds Gouws, “some organisations leverage the power of Linux to run their high-end servers, again lowering the costs. These servers are usually clustered environments and have hardware specifications second to none, hosting applications that range from web servers to mission-critical medical information centres and online e-business transactional applications.”Thomas Black of the Shuttleworth Foundation believes the advance of Linux in the server market is not limited to low-powered boxes, but is best suited to high-cost utility servers. Linux has experienced most of its growth in Unix territory, he explains, because of the similarities between these operating systems.Battle for the desktop“Whereas Unix was previously restricted to expensive, high-end hardware, Linux introduced Unix-like power and functionality to low cost systems. Linux, in turn, has seen a steady migration from lesser hardware to high-end systems, allowing a single operating system to be run across the spectrum of available hardware, thereby placing less emphasis on the hardware itself,” Black says.“Linux facilitates clustering and grid computing for lower spec hardware to achieve the same results as a high-end mainframe, but at a lower cost.”Open source software`s future on the desktop is, perhaps, less clear but always the cause of heated debate – much of which is driven, rather unproductively, by anti-Microsoft sentiment.While it can be argued with some validity that open source desktop options offer much of the basic functionality of the ubiquitous range of Windows offerings, it is hard to imagine them posing a serious challenge to Microsoft`s dominance for some time.No new tricks to learnBlack believes there is still a long way to go before open source becomes competitive on the desktop, particularly in the home user environment. He points out, however, that there has been strong development over the past two years and that current options can be effectively rolled out in mass deployments that are centrally managed. This means companies can consider alternatives to Windows for their fleets of PCs – which will familiarise employees with open source.Obsidian`s De Wet agrees and, while he concedes that open source operating systems are not necessarily better than Windows as yet, is confident they will get there in the next couple of years. (That`s assuming Microsoft stands still, eh Anton? Just kidding.)IBM South Africa`s Aubrey Malabie is more confident: “With current versions of Linux, there is not even a paradigm shift for users moving from another desktop to a Linux variant. It`s not as if users have to re-learn skills or change the way they work.“There are differences, though, between what most users are used to today and what a Linux desktop offers. The biggest difference is that with a Linux desktop you scale up, and users can realistically expect more from their systems in comparison with what they use today,” he says.The question of licensing is important, but not as important as many open source disciples would have us believe. Research house Gartner estimates the licensing of software accounts for just eight percent of total cost of ownership.However, says Anton van der Berg of Linux proponent Bisart, for small companies faced with the spectre of having to update illegal software quickly, or face the wrath of the Business Software Alliance, it becomes an issue.“Our experience shows that if you look at the average small South African business, running around seven PCs, perhaps only three of these will be fully licensed. This is where Linux becomes an option,” he says.Adds Obsidian`s De Wet: “Any switch to Linux should be slow and measured. Licences usually come up for renewal in a three-year cycle, so companies that are up to date and wish to make the change for other reasons would be advised to use the time to plan ahead for the migration.“I would recommend beginning with OpenOffice as a pilot and then, if that is found to be acceptable, moving on to a full Linux implementation,” he says.Despite (or perhaps because of) the hype and publicity generated by open source software, a number of myths have arisen, both positive and negative, that require examination. The most widespread, not surprisingly, centres on the cost savings and has largely been perpetuated by the perception that open source software is free, as in gratis, as opposed to free as in free to adapt and distribute, and free from lock-in through proprietary standards.A bogus argumentWhile it is true that much of the open source software available is cheaper than proprietary alternatives, credible open source proponents have moved beyond citing this as a reason for adoption.Comments Epi-Use`s Owens: “Cheap is a bogus argument. Instead, the real benefits of open source – the ability to spread the adoption of open standards, the robustness and inherent inter-operability of the software, and the availability of hundreds of thousands of people in the market to test it – are attracting the interest of companies.”Shuttleworth Foundation`s Black agrees: “Price is getting less and less important. Now, more emphasis is being placed on the freedoms – not being locked into a particular product, the ability to be able to adapt software as your needs change.”One query often raised concerns the availability and quality of support for open source software. While it is true that companies using the truly free distributions will have to rely on the open source community for support, Gartner stresses this is not necessarily a bad thing.“Enterprises in some more-remote geographies point out that open source support can be better than what they`ve been paying vendors for. However, enterprises that require professional support for their client OS will need to pay for it. These costs may work out to be less than the cost of a Windows licence and support, but they need to be understood, and not assumed to be zero,” the research house says.Owens concedes it is probably fair to say there is not as much support for open source as there could be, but points out that in most countries there are a number of companies that offer support services.“Globally, the big vendors like IBM, Oracle and HP all offer Linux support as part of their overall offerings,” he adds.“When you start talking about the lesser-known open source products, then you can argue there`s less support. Conversely, the argument can be made that the technology is so open that you require less support.“If something goes wrong you have full access to the source code and the availability of the community that developed it. It does, however, remain one of the challenges to open source adoption, if only from a perception point of view,” Owens says.Another myth, common to users of desktop applications, is that extensive retraining is not necessary. Not so, says Obsidian`s De Wet, who adds that the misconception is also prevalent among Windows power users.So much for the myths, but what other, real, factors should proponents of open source software consider when they try to persuade companies to come on board?Mark Rotter, principal analyst for software, IT services, telecoms and networking at the BMI-TechKnowledge Group, believes it is essential they understand what their enterprise customers feel is important about software.Beyond bogusMost companies, he says, are firstly concerned with the financial benefits to be gained from implementing new software, be this in new income or improved cost and process efficiencies.Other factors to bear in mind include business benefits in terms of help with day-to-day business challenges, usability of the technology, and the introduction of predictability into environments plagued by human error.Rotter believes South African open source software vendors have not yet found a sound business model, but adds that the introduction of web services should see more rapid adoption, driven by Linux, over the next three years.And where`s the money to be made? In the short term, says Rotter, the main areas will be web content management, basic Linux implementations and support, and some consulting work.So, the penguin marches on, now with the support of many of the major vendors. Will it eventually become dominant? Probably, but that`s still quite a way off, particularly on the desktop. There are still a number of advantages that lie with proprietary software and, perhaps, it`s appropriate to give the final word to Microsoft SA`s Danny Naidoo.“Our software gives the customer several value benefits, such as our industry-leading R&D investment, market leadership, reliability, accountability and commitment to improving our service capabilities through an ever widening and improving partner base.” Government - the new disciple of open sourceIt is perhaps ironic in the light of the open source software movement`s “anti-establishment” roots that governments around the world, particularly in developing countries, are fast becoming fervent converts. The South African government is no exception.Open source and proprietary software have co-existed in government IT infrastructures for many years, but the new millennium has seen more and more countries adopting measured strategies that will free them from their reliance on commercial software vendors.At first glance, this can be explained by a desire to save costs and, in the developing world, foreign currency; but there are wider considerations. Research group Gartner has identified a number of issues behind this public sector flirtation with open source software:* A reaction to the cost implications of new, fixed-term software licence fees introduced by several large commercial software vendors;* Significant lobbying activities by commercial vendors that support open source software as a business strategy;* Anti-trust cases that have raised the profile of Microsoft as the software industry`s most dominant vendor;* The realisation by several governments that technology expenditures have not benefited local players, but rather foreign, mostly US-based, vendors;* Heavy investments in e-government have been made without ascertaining their sustainability over time;* Many governments are looking at open source software for the “perceived” savings and ease associated with its implementation, as well as its flexibility;* The widening of choice in “good enough”, supported, open source products.All this is true enough, but, argues Epi-Use`s Stephen Owens, governments of countries like South Africa, Peru and Brazil have taken the open source debate to a higher level. “Open source is viewed as a way to solve social and socio-economic problems and these countries have adopted a more philosophical approach.“In Peru, for instance, they`ve taken a constitutional standpoint on open source. They`re trying to ensure that information and data is available for the future and, therefore, believe they can`t be locked into proprietary software.“Also, this information has to be available to their citizens, who have to be able to access the data and be protected from any malicious intent. They have to have access to the source code to ensure there aren`t any ‘bugging devices` in their software. Out of this flows the demand for free software.”National interestGartner confirms that much of the proposed preferential legislation for open source software is fuelled by long-term strategic objectives, often expressed in terms of “national interest”.“Open source software is initially seen as a shortcut to technological independence in terms of satisfying internal technology needs with local skills and resources, while at the same time building a basis for future service and product exports,” the research house says.“For some of the emergent economies in Latin America or Africa, the ability to introduce IT more widely – in schools, businesses or the public sector – is limited, to a large extent, by up-front software costs. A preferential attitude toward open source software is justified in terms of narrowing the ‘digital divide`.”This certainly appears to be reflected in the South African government`s approach to open source. According to Minister of Public Service and Administration Geraldine Fraser-Moleketi, developing countries like South Africa spend billions on software licences. Billions of dollars in valuable foreign exchange that, she believes, could be used to build houses, roads, hospitals and schools.“Not only will we save taxpayers` money directly but, because government is the country`s largest IT user, its adoption of open source is expected to act as stimulus for adoption in other sectors.“Open source has the potential to improve the cost and speed of service delivery and thereby efficiency in the public service. It can also have a positive impact on quality. Existing open source software can be obtained at low expense and then redistributed widely without further payment for licences,” adds Fraser-Moleketsi.“This creates a potential for significant cost saving. Furthermore, because different vendors all have access to the source code, they can compete to sell their support services, exercising downward pressure on prices.”State Information Technology Agency (Sita) group CIO Mojalefa Moseki claims government has already made significant savings on licensing, software procurement, support and upgrades through the use of open source.Government, he adds, has also benefited from increased levels of security and improved response times. “Because the software is supported internally, software errors and support calls are responded to more quickly. We believe open source software is as good as, if not better than, commercially available software. In many cases, it is more stable and more reliable,” Moseki says.It is clear the expectation is that the absence of up-front licence fees and the availability of community-based support can lead to lower costs. However, Gartner warns that while open source software has some obvious acquisition cost advantages, adopters would be wise to investigate the longer-term total cost of ownership.“Additional outlays for maintenance and support may negate any licensing cost savings,” the research house says.Nhlanhla Mabaso of the CSIR`s Open Source Resource Centre believes proprietary vendors have unwittingly popularised open source software.“There`s certainly more to open source than licence fees: we have to focus on the total cost of investment. This must include the benefits of investing in the development of our people and our economy as opposed to a strict financial cost approach,” he says.Mabaso stresses that the South African government`s approach to open source is not prescriptive. Rather, he says, it is aimed at eliminating discrimination and levelling the playing fields.Prescription and Ignorance“There are usually two factors that limit choice – prescription and ignorance. In South Africa people were failing to exercise their right of choice because they were both ill informed and misinformed. You must remember it is often easier to opt for a well-established foreign vendor`s solution than expend the effort investigating less publicised yet viable alternatives,” he says.CSIR CEO Sibusiso Sibisi confirms that government should not be construed as campaigning against proprietary offerings. “Government needs to investigate open source software as an alternative. In some cases proprietary software may be preferred, and in other cases open source software.“Government also needs to encourage open source software development activities. It must not enter into a debate taking entrenched positions. But we do object strongly to people who offer proprietary solutions and criticise attempts to implement open source software solutions,” he says.Epi-Use`s Owens welcomes government`s ‘middle of the road` approach. “A government strategy like this stimulates the economic environment in that far more companies can now become players in the field. Black empowerment companies in particular stand to benefit greatly,” he says.There can be little doubt that government and the public sector is an ideal breeding ground for the expansion of open source software, but it must be remembered that the caveats that apply to its adoption in the private sector are equally relevant. An animal of a different kindUninitiated adopters of open source software, seeking to be free of the licensing burdens imposed by the proprietary vendors, confront an animal of an altogether different kind – the GNU GPL.Licences associated with conventional proprietary software are relatively easily explained – despite their length and complexity. They`re there to protect the developers` intellectual property, investment in R&D, market share and, to a lesser extent, ability to generate revenue.Licensing requirements of the open source movement, on the other hand, are driven by altogether more altruistic motives.In order to understand this, it`s worth taking a step back in history to 1984 when Richard Stallman, a researcher at the MIT AI Lab, started the GNU Project – the name being self-consciously self-referential, denoting “GNU`s Not Unix”.The thinking behind the GNU Project, and that of its umbrella body the Free Software Foundation, is simple – a belief that software source code is essential to advancing the discipline of computer science and, in order to encourage innovation rather than market domination, should be free.Stallman was not naïve enough, however, to dismiss the threat of companies snapping up the code for profit, and instituted the GNU General Public Licence (GPL) to prevent this.The GPL is designed to enshrine the freedom to distribute copies of free software, open up the source code to those who want it and allow the adaptation of the software, or the use of pieces of it in new free programs.It replaces the standard copyright agreement with what Stallman dubbed “copyleft”, an idealistic scheme that, while not prohibiting the sale of software, is aimed at preventing monopolism.Obsidian Systems` Anton de Wet explains: “The GPL can be described as a ‘viral licence` in that it ensures that everything you do has to be available to the community at large. It is one of the main reasons behind the rapid development of the open source movement.”The GPL is not the only licensing model covering open source software. According to research house Gartner, it is now generally recognised that a valid open source licence has to comply with the definition of Eric Raymond`s more utilitarian Open Source Initiative (OSI) (see www.opensource.org) in that it:* Allows free redistribution* Provides access to the source code* Allows modifications and the creation of “derived works”* Protects the integrity of the author`s source code* Does not discriminate against persons, groups or fields of endeavour* Applies automatically and without a signature* Does not “contaminate” other software.“In commercial licence agreements, the enterprise acquires only the right to use the software; it does not take intellectual property ownership from the software vendor. Likewise, with an open source licence, intellectual property ownership stays with the original holder,” Gartner says.The success of the GPL has made it the dominant open source licence model, but some – the Berkeley Software Distribution (BSD) licence for instance – are even more liberal.Under the BSD-type licence, users basically can do what they want with the code as long as they credit the original developer. Companies like web server specialist Apache believe this is the best type of licence for those looking to further extend an existing commercial project.Mix and matchUnder the BSD licence, a company can mix and match the software with its existing proprietary code, only releasing what it feels will further the development of its own goals.Gartner believes that enterprises must understand this crucial difference if they need to go beyond simply using open source software or making modifications for internal use.“This is particularly important for software vendors planning to extend open source products,” the research house says.Who you gonna call?Advocates of proprietary software are often quick to point out that an open source licence offers no protection in terms of warranties to the user. This is generally true and, in theory, makes it impossible for a company to sue for damages when the software breaks down.Gartner, however, points out that this should be seen in perspective. “Typically, the warranties in commercial software only guarantee that the software will ‘perform substantially in conformance with documentation`, with no express fitness for any purpose, and that ‘reasonable efforts` have been made to ensure it does not contain viruses.“These scant protections are also often limited to 90 days after receipt of the software. In many cases, the warranty has expired before the enterprises have even thought about deploying the software. Finally, the remedy, if warranty is breached, is usually limited to recovery of the licence fee.”(It`s worth noting that proprietary vendor indemnity against third party copyright claims and the like can generally be viewed in a similar light.)While the freeing up of source code to allow adaptation and free distribution of software remains anathema to many proprietary vendors, there appears to be some recognition of the value that can be derived from open source innovation.Sun Microsystems` Community Licence and Microsoft`s Shared Code fall into this ambit, but they cannot be described as open source licences. While they do allow some access to the source code, there is no free redistribution, use is restricted and no modifications or derived works are allowed.Gartner stresses, however, that this does not mean that they are better or worse than open source licences in general – just that they are not the same thing.The issues behind software copyrights, patents and licensing continue to be a source of heated debate between proprietary vendors and the open source community. Both sides` arguments carry valid points and potential customers of either would be well advised to study them and identify which better suits their individual needs.

Computing tax: get used to it

It`s 1994, St Petersburg, the offices of software development company AO Saturn. A24-year-old programmer, Vladimir Levin, allegedly masterminds a virtual bank job, netting a cool $10 million from Citibank. (Hacking underground lore still claims that another Russian hacker, known only as Megazoid, performed the hack, armed with a $10 computer, modem and vodka.)The bank eventually reports the infringement to the police, and Levin is arrested a year later at Heathrow. Citibank recovers most of its money, but the cost to the bank`s reputation is incalculable. Other banks learn this hard lesson, and reporting cyber crime becomes taboo – unless conviction is guaranteed.Although most would rather sweep the issue under the rug, we know security infringements cost even more today than they did in 1994. According to the FBI`s latest Computer Security Institute survey, the loss of proprietary information cost respondents more than $70 million in total in the past year. Coming in second for costly security headaches were the so-called “denial of service” (DDOS) attacks, at $65.6 million for the year – down ten-fold from 2002. Between the 233 survey respondents that could put a monetary value on their losses, a good half-billion dollars was reported lost.Where are the hackers?But the most worrying stat is that only 33 percent of respondents reported incidents to authorities. According to the findings, 53 percent that answered a question as to why they didn`t report incidents claimed they didn`t know they could. So while, on the one hand, lack of security is a costly risk for a business or government agency, on the other, knowledge about security is low – even in the US.So how does South Africa match up to the US? Not too well, according to former hacker Kriek “Kokey” Jooste. Says he: “[The level of IT security in corporate South Africa is] poor. I think it reflects the level of IT skill available. England is slightly better since economic conditions allow English companies to spend more on security than South African companies can. England itself is still behind a lot of other countries, including the US, Germany and Finland.”Total onslaughtSecurity expert (and hacker in the original MIT sense of the word) Andrew G Thomas of Hobbs & Associates recently scanned the co.za domain space to test South Africa`s commercial web site security.“In excess of ten percent of the 11 000 active name servers running at that time were vulnerable to various attacks,” says Thomas. One well-known hack method “could have, at the time of this audit, taken out in excess of 30 percent of the primary websites hosted in the co.za domain space”.Jooste, who has worked both in South Africa and abroad as a security expert and was once notorious for being the country`s top hacker, adds: “While the majority have ‘wised up` to previous security threats and are protecting against it, new threats have appeared which haven`t been dealt with yet. Security is constantly changing and people need to keep up with the change.“IT security in South Africa can be improved by reducing the time it takes to adapt to new threats. This doesn`t mean spending on new technologies, but rather spending on keeping the necessary skills up to date.”Companies perceive security as a complex and expensive animal. It has to keep out multiple types of attack, at multiple entry points and from multiple sources.Hackers, by contrast, have the freedom of low barriers to entry (a PC with an Internet connection), of selecting targets at random and of spending weeks or months attacking a single target. Defence against this anonymous and all-encompassing threat is going be pretty intricate.Not so, maintains Dr Andrew Hutchinson, member of the T-Systems solutions crafting team. “The best approach is keeping it simple,” he says. “One of the enemies of security is complexity.”Hutchinson goes as far as to propose Linux as a possible security solution – not because it is free, but because it is easily configurable. “If you can keep the modules clear and defined, you can make a better solution. If you look at something like Linux, you can take out the modules you don`t want to install. It`s much simpler in Linux to leave out a particular service, like the mail server.”Mike van den Bergh, MD of Gateway Communications, agrees. “The simplest systems provide the best security. When a system is unusable, people start to look for ways around it to make it useable. You`ve got to have something that is intuitive and built-in automatically.”Get some cultureBut while simple is best, don`t confuse a simple system with a simple solution. Security often falls down because corporate entities don`t see it in a holistic way. Security isn`t about a “point solution” like a firewall or a virus scanner. It should permeate a company`s culture.Thomas believes small, medium and micro enterprises (SMMEs) are more vulnerable than corporates to point solutions.“At an abstract level, larger corporations have a significantly greater awareness of the value of information security practices and skills, brought to them and sold to them by both the media and by the larger audit firms and their related consulting arms,” he says.“The SMME market by comparison shows greater exposure to information security risks and here information security management is often performed poorly, if at all. Additionally, SMMEs do not have the advantage of being able to afford the level of staff specialisation that larger companies have, instead relying on general staff or outsiders. They are particularly vulnerable to the sales pitches of unscrupulous or ignorant vendors that advocate a particular product or style of solution, as opposed to an integrated and holistic risk management approach.”Jooste agrees: “Technology vendors love to tell people that they can give you a complete solution in a box. In most situations even the simplest of technologies are more than adequate, if configured and managed right. Apart from having the right skilled people in place, in-house or outsourced, companies need to ensure that everyone partakes in the IT security function of a company, through education and awareness.“I think that, coming from a holistic point of view, security is everybody`s responsibility, because your security is only as strong as the weakest link. Companies need to also look at user education,” says Van den Bergh.Ultimately people are the weakest link. In Gates we trustMicrosoft`s trustworthy computing initiative is getting up steam. But will it have the desired effect in the market?“Trustworthy computing” is the latest bit of jargon buzzing around the security community, and it is widening the rift between open source protagonists and what they dub The Man – otherwise known as Wintel (the Microsoft/Intel partnership).The term originated among Microsoft execs, catching public attention with Bill Gates`s memo in January 2002, announcing that: “We must lead the industry to a whole new level of trustworthiness in computing.”Since the fateful day on which Microsoft halted all development to send its staff on secure development training, the phrase has come to represent Microsoft`s “secure by design, default and deployment” slogan. It`s become more than just a marketing placebo.The ultimate goal is to get to what the industry calls a trusted computing platform – a combination of hardware and software guaranteed to be secure, and for which Microsoft`s alliance with Intel will be very valuable.Research company Gartner analyst John Pescatore expects trusted computer platforms to start becoming a standard PC feature around 2005, but believes they will only reach critical mass in about 2008. We will also start to see the trusted platform appearing in cell phones and PDAs around 2008.Good news, bad newsPescatore believes the business impact of this Wintel initiative will be the introduction of “new business models enabled by digital rights management, safer use of public computers for employee remote access and stronger intellectual property protection”.It sounds like pretty good news for the end-user. Early trustworthy products eliminate any doubt that they`re more secure than their predecessors. So why are open source pundits up in arms?Firstly, Gates`s statement in his memo that “no trustworthy computing platform exists today” was a bit of a slap in the face for alternative operating systems – open source included. Whether Linux and its relatives are trustworthy is debatable and dependent on one`s definition of “trustworthy”, but few doubt that Linux has trounced Redmond on security, and nobody will argue that it has won the perception battle.Linux distributions usually include heavy-duty security tools, and deployments are by habit more secure. Linux vendors tend to warn users that their installation choices could create security risks.Linux supporters also argue that open source is the ultimate in secure design. Thousands of skilled users can assure themselves – and others – of the robustness of Linux`s security, and even choose to improve the source code themselves.Civil rights lawyers, privacy pundits, open source programmers and free speech fans also harbour justified fears about hardware-enforced digital rights management, as proposed by the trustworthy computing paradigm. It could limit the utility of what used to be personal, all-purpose computers, and will implement copyright and patents in a manner substantially removed from their original legal basis, by prohibiting fair use and sneaking off with statutory expiry provisions.But as much as Linux users might protest Microsoft`s claim to being the pioneer of trustworthy computing, such sour grapes do not affect the validity of Microsoft`s security initiative in principle.What might have a greater effect is Microsoft`s own users` reaction to trustworthy computing. While some will no doubt embrace the change with open arms (and maybe a few comments of “about time”), two opposite ends of the user scale could be negatively affected by the development.The first is the “power user”, whose primary concern with trustworthy computing to date has been the automatic installation of patches – little applications that Microsoft sends out to users regularly (a little too regularly, some argue) that fix a specific problem with the operating system. The patches, however, have developed a reputation of often causing more problems than they remedy, making systems administrators unwilling to install a patch until it has been comprehensively tested in their operating environment.Kicking backThe second type of user Microsoft might alienate is on the opposite end of the scale – the non-technical user. Microsoft has made its name by offering operating systems that work out of the box. But, by its nature, trustworthy computing means most services don`t work out of the box. Users will have to install and configure every service they want to use, which is not an ideal situation for the unqualified.Whether these two extremes will kick back against the changes or accept them as the price of higher security remains to be seen. It will be a good test of whether the “trust” in trustworthy computing is taken to heart – not only by Redmond, but by Microsoft`s customers too. Microsoft`s turning pointWindows 2003 is no doubt the most secure operating system from Microsoft to date, but it still needs some TLC.Let`s face it. Microsoft has a pretty bad track record for security. Gartner puts security (and lack thereof) as one of the three factors driving what it calls “the anti-Microsoft movement”.“Many governments are unhappy with its aggressive strategies (which have garnered significant antitrust investigations and actions) and a less-than-perfect record in software quality, security and privacy. The Microsoft juggernaut has, at times at least until recently, seemed oblivious to the growing antipathy shown by some of its previously loyal customers – especially in countries outside North America,” says Gartner bluntly.Partly, of course, it is most vulnerable to security threats for the simple reason that it is by far the most common desktop operating system in use.But even so, its security record is about to change. At least that`s what Microsoft tells us. Its first product to roll out under the trustworthy computing banner is Windows 2003 Server, and Microsoft is hoping that this product will convince concerned customers eyeing Linux that all is well (and safe) in Redmond.“Secure by design, secure by default, and secure by deployment” is the rallying cry, heard from Seattle to Sunninghill. From what we can tell from the outside, Microsoft has taken this motto to heart. So far, Standard Bank, Ster Kinekor and Professional Provident Society (PPS) have migrated to the new product and, according to Microsoft SA`s director of the .Net and developer group Danny Naidoo, they are “thrilled” – in the positive sense of the word.Password: PasswordNaidoo takes us through some of the new security features of Windows 2003: “The attack surface is reduced with less services running by default. For example, you need to explicitly run IIS (Microsoft`s web server and a common point of attack) on the server. Administrators can`t create an administration account with the password ‘password`, or with a blank password.”Microsoft has also committed itself to fixing bugs and making patches available to users faster than before. It went through every line of code looking for vulnerabilities. It has got a ton of open- and closed-standard authentication protocols built in. It offers encrypted file systems, smart card support, wireless LAN security and a built-in sandbox for applications running on the common language runtime platform. Compared to previous versions of Windows, Microsoft has made a momentous effort to live up to the trustworthy computing cry.But before you toss out your firewalls and sell your anti-virus licences, there is some bad news. First and foremost, Microsoft is only providing companies with the tools to make a more secure system.“We see security as a shared responsibility between ourselves and our customers,” says Naidoo. “We will need the customers to act and use the products the way they are designed to be used.”This is what Microsoft calls “secure by deployment”. If customers don`t implement patches and fixes, leave unused and unsecured ports open, or use “money” as their administrator password, there isn`t much hope for them.Microsoft hasn`t made any claims that its platform is “bug-free” or “unhackable”. (Oracle went down that road and its unhackable platform was duly hacked.)And a complaint by a concerned South African journalist to the Advertising Standards Authority shows that it won`t do to make claims that Microsoft will make hackers extinct.In fact, a couple of security holes in the new OS have already been discovered and posted to NTBugTraq, a security watchdog community that alerts Microsoft, customers and hackers alike of potential security holes.Although we have not had the opportunity to review the product ourselves, we did spot a worrying glitch on a local site running Windows 2003 recently. The site, hosting a large local retailer, defaulted to showing the ASP.Net source code whenever it had an error on a page. This was more likely a configuration fault than a Microsoft bug, but it does prove that Win2003 is not perfectly secure.Some believe that Microsoft is making its products too secure, compromising too much functionality and ease-of-use.“All organisations seem to be becoming more aware of the importance of releasing software that is more, rather than less, secure by default. Regardless, there is and will for the foreseeable future be a constant tension between ease of use and security, with end users traditionally preferring technologies that work ‘out-of-the-box`,” notes Andrew G Thomas of Hobbs & Associates.“I think Microsoft will be pressurised to remove the security and make it optional again,” opines Mike van den Bergh, MD of Gateway Communications. “Until legislation for seatbelts was introduced, the flashing lights and beeps to encourage you to wear the seatbelt didn`t help. I think they may have to backtrack on trustworthy computing, but I`d be happy if I`m wrong.”Continues Van den Bergh: “You can make people aware of security, and people must understand the consequences of ignoring secure practices – that`s where it comes down to education.”Education is one facet of trustworthy computing that Microsoft can truly be commended on. At the moment, the focus is on third party developers and administrators, but Naidoo says the material includes formulating security processes and procedure for staff, and communicating these throughout the company.“It`s not just about product,” says Naidoo. “We need to create a trust between us and our customers and us and our partners so that they see us as trustworthy enough to do business with. We are also changing our culture – we`re transforming an organisation that`s 55 000 people strong. You can`t do that overnight. I think this programme will run over a decade or so.”

abc