Posts with keyword: policy

5 entries

Why Do Policy Languages Feel So Hard?

Tue Apr 15 11:41:00 2025

Policy languages can feel intimidating due to unfamiliar syntax, poor tooling, and the high stakes of getting access control wrong. But once understood, they simplify application logic and make security more reliable and maintainable.
Continue reading {Why Do Policy Languages Feel So Hard?}

Jim Harper on Identity and Public Policy

Thu Nov 30 20:27:00 2006

Jim Harper(click to enlarge) Tonight Jim Harper gave a talk on identity and public policy at the Utah State Capitol. I've recorded the talk and will hopefully have it up on IT Conversations soon. Jim starts by telling the story of his book, Identity Crisis: How Identification is Overused and Misunderstood. . A few years ago, Jim joined the CATO institute and was invited by the ACLU to join them at the US Capitol for an event on national ID cards. He read the ACLU briefing and thought it was good, but overly simplistic. He sat down to read
Continue reading {Jim Harper on Identity and Public Policy}

Federated Identity Checklist

Tue Feb 28 16:51:00 2006

I'm putting together a checklist of things to do to help federation succeed for the feature I'm writing for InfoWorld. Here's my list so far. Any other's that ought to be in there based on your experience? Find win-win situations where both parties benefit from the federation Start with internal projects Find an experienced partner for your first external federation Create a center of excellence in the CIO's office Establish a federated identity council to get input from business users Educate the legal department about federation and develop an in-house legal expert Pay attention to privacy Make sure your
Continue reading {Federated Identity Checklist}

SOA Governance Questions

Tue Dec 13 11:46:00 2005

As I work on my SOA governance story, I came up with a list of questions for companies about SOA governance. Feel free to leave comments or to contact my directly with answers and ideas. As I dig into this, it's clear there's a book waiting to be written around this topic. How would you characterize the stage your company is at in deploying SOA-based systems? (some examples; pilot, beginning, advanced) Do you have a strong Enterprise IT Governance process now? If so, how is you SOA governance related to IT governance? Is it just a piece of it
Continue reading {SOA Governance Questions}

Flushing the 'Net Down the Tubes

Wed Nov 16 15:46:00 2005

Doc Searls has written a brilliant piece framing the battle for the 'Net at Linux Journal. The piece is long, but if you take the time to read just one essay on the 'Net and the politics surrounding it this year, read this one. We haven't framed the conversation correctly If you're involved in public policy, it's especially important that you take the time to understand what's at stake here. One of Doc's main points: we haven't framed the conversation correctly and our poor choice of words makes the argument seem overly technical and arcane when it's really about
Continue reading {Flushing the 'Net Down the Tubes}