CONTACTS 
0201 - Dan Palanza and NSF                  508 548 7421
020101 - Mr. Dan Palanza

SUBJECTS
Commercial Partners for Phase II Funding
Partners to Support Development
Privacy, Security - Discovery
Risk Management Office 2000 Features Present New Problems
Risk Management, Privacy Risk Key Information Accessed
Security Privacy Communication on Internet
Secuity Issue, 990718

0809 -    ..
0810 - Summary/Objective
0811 -
081101 - Follow up ref SDS 25 0000, ref SDS 22 0000.
081102 -
081103 - Dan is writing a book to follow up the Phase I final report.  He asks
081104 - about security of the record created using Communication Metrics,
081105 - including formulating guidance on record content.  He also wants to
081106 - know if Communication Metrics can help people meet specific goals.
081107 -
081108 -     [On 990720 submitted response. ref SDS 27 0001]
081109 -
081110 -     [On 990728 Office 2000 presents same risk. ref SDS 28 5678]
081111 -
081112 -     [On 990728 sent follow up. ref SDS 29 0001]
081113 -
081114 -
081115 -
081116 -  ..
0812 -
0813 -
0814 - Project
0815 -
081501 - Received ref DRT 1 from Dan, responding to my letter, ref DIP 8 0001,
081502 - linked to analysis of his Phase I report on 990716, ref SDS 25 1470,
081503 -
081504 - Dan is planning a 350 page book to develop the material in his Phase I
081505 - NSF report on network bookkeeping. ref DRT 1 0902
081506 - ..
081507 - Dan cites two factors that influence his interest in
081508 - Communication Metrics....
081509 -
081510 -    1.  Control access to the record, security, privacy.
081511 -
081512 -        He raised this issue on 990711. ref SDS 23 9680
081513 -
081514 -        Who would lead the effort, and how would one's team of users
081515 -        control access to its data? ref DRT 1 7234
081516 -
081517 -        I cannot picture a team of workers wanting the world to read
081518 -        quotes of their comments.  Naturally, I see lots of contexts in
081519 -        which it is very valuable for a team to have access to one
081520 -        another's words--particularly in the context of software's
081521 -        analysis and design phases.  But how would that be controlled?
081522 -        ..
081523 -        Communication Metrics, as I see its application, not
081524 -        everything should go into the record.
081525 -
081526 -           [On 990719 article recounts worry about security of medical
081527 -           records. ref SDS 26 0945]
081528 -
081529 -           [On 990728 Office 2000 presents same risk. ref SDS 28 5678]
081530 -
081531 -        How do you picture a community of users deciding what should be
081532 -        a part of the time journal, and what should not? ref DRT 1 7056
081533 -
081534 -        The system looks to me like big brother looking over my
081535 -        shoulder. ref DRT 1 6120
081536 -
081537 -         ..
081538 -        Response...
081539 -        Requirements, Objectives, Policy Guide Record Content
081540 -
081541 -        Security is an enterprise management issue that is beyond the
081542 -        scope of the Phase I proposal.  Security is critical to
081543 -        effective implementation of Communication Metrics, and will be
081544 -        addressed in future research. see Part 2. ref OF 7 4582
081545 -
081546 -        Dan does not address the record on 990711. ref SDS 23 0784
081547 -
081548 -        Experience the past 15 years shows...
081549 -
081550 -        a.  Communication Metrics has been used in sensitive government
081551 -            work.  The government reported Communication Metrics saved
081552 -            money, ref DRP 3 0129, and improved management without
081553 -            breaching security. ref DRP 2 1302,
081554 -
081555 -               [On 020722 confidentiality important to enable
081556 -               collaboration. ref SDS 30 YM4K
081557 -            ..
081558 -            Software, and research and design of any kind pose
081559 -            special security requirements.  The record on 990530
081560 -            illustrates software support. ref SDS 16  However, even
081561 -            talented, experienced engineers have difficulty using the
081562 -            record, absent a history that makes content meaningful. But
081563 -            close association on a project, cited by Dan, makes this
081564 -            record very valuable, based on industry standards to
081565 -            document the work, as reported on 990525. ref SDS 14 0966
081566 -
081567 -        b.  Passwords and intranets control access to the record.
081568 -
081569 -      [On 990727 Office 2000 uses similar protection. ref SDS 28 0674]
081570 -
081571 -        c.  Formulation of policy and procedures for records management
081572 -            is often led by a Controller or Chief of Operations.
081573 -            Project managers and counsel may be involved in a team to
081574 -            set policy on record content.
081575 -            ..
081576 -        d.  Communication Managers, like doctors and lawyers,
081577 -            have skills and experience to produce a record that
081578 -            protects the interests of the client.  Lawyers prepare
081579 -            legal briefs to secure benefits for their clients.
081580 -            Communication Managers work similarly, in consultation with
081581 -            the client.
081582 -
081583 -        e.  Record content does not include everything that occurs. The
081584 -            content aligns conduct of the work with requirements,
081585 -            objectives and commitments aimed toward improving earnings.
081586 -            Information that does not improve earnings should not be in
081587 -            the record.
081588 -
081589 -        f.  Fortune reports in an article reviewed on 990625 that the
081590 -            biggest cause of CEO failure is failing to execute good
081591 -            management practice consistently. ref SDS 18 0460  The key
081592 -            practice that brings down CEOs at GM, IBM, AT&T, etc., is
081593 -            failing to "grab a pen and start writing" at the end of
081594 -            meetings to capture the record of who, what, when, where
081595 -            and why. ref SDS 18 1024
081596 -            ..
081597 -        g.  There is always tension about what to write and what
081598 -            to withhold for security reasons.
081599 -
081600 -            CEOs are responsible to put in the record information that
081601 -            helps everyone do a better job, and to avoid information
081602 -            that compromises security.  CEOs who fail to execute are
081603 -            fired, according to the article.  Communication Managers
081604 -            perform under the same rules in producing timely, accurate
081605 -            intelligence to improve earnings.
081606 -
081607 -               [On 990720 sent letter citing this point. ref SDS 27
081608 -               0001]
081609 -  ..
081610 -    2.  How is Communication Metrics tied to work of real people,
081611 -        working toward specific goals? ref DRT 1 5096
081612 -
081613 -           Dan's questions relates to ideas about using SDS to support
081614 -           network bookkeeping explained in the record on 990710,
081615 -           ref SDS 22 LF5I, and discussed in Dan's report to NSF
081616 -           received on 990716. ref SDS 25 4940
081617 -
081618 -
081619 -         ..
081620 -        Response...
081621 -        Communication Metrics Helps People Accomplish Specific Goals
081622 -
081623 -        Communication Metrics was used by the Pacific Gas and Electric
081624 -        Company (PG&E) on several projects in 1994.
081625 -
081626 -        The project manager, who interacted with Communication Metrics,
081627 -        submitted an evaluation on 950113, ref DRP 1 8444, showing how
081628 -        the system helps people accomplish specific goals. ref SDS 3
081629 -        9482
081630 -        ..
081631 -        On 940901 project manager with the California Department
081632 -        of Water Resources (CDWR) noted it is shocking to see dialog in
081633 -        the SDS record; but, Communication Metrics none-the-less helps
081634 -        people on the project accomplish specific goals. ref SDS 2 4920
081635 -
081636 -        On 961101 executive with the US Army Corps of Engineers
081637 -        reported that experience using Communication Metrics showed it
081638 -        works much differently from what expected based on reading
081639 -        about it prior to gaining experience. ref SDS 6 8888
081640 -
081641 -        On 970107 the president of a contracting firm reported that
081642 -        Communication Metrics worked better than he expected prior to
081643 -        gaining experience. ref SDS 7 4953
081644 -
081645 -        On 970328 the US Army Corps of Engineers reported Communication
081646 -        Metrics improved management and saved money. ref DRP 2 6172
081647 -           ..
081648 -           Scope of Services published by USACE shows how
081649 -           Communication Metrics interacts with people to accomplish
081650 -           specific goals. ref DRP 2 4929
081651 -
081652 -        On 971008 the US Army Corps of Engineers reported Communication
081653 -        Metrics saved $M of dollars by reducing management mistakes
081654 -        that cause "rework." ref DRP 3 4172 This enabled goals to be
081655 -        accomplished at less cost.
081656 -
081657 -        On 981027 District Counsel reported additional savings were
081658 -        realized using Communication Metrics because the record was
081659 -        prepared to protect the interests of the client, in this case
081660 -        the government, in addition to improving the quality of
081661 -        management. ref SDS 9 7315
081662 -
081663 -
081664 -
081665 -
081666 -
081667 -
081668 -
081669 -
081670 -
081671 -
081672 -
081673 -
081674 -