Archive for the ‘Industry Comment’ Category

Joe Ruck

Don’t Leave a Message at the Beep

Tuesday, July 12th, 2011

The News International phone hacking scandal is front page news, a result of its scale and depravity.

In addition to the seriousness of what was perpetrated, what shocked was the nature of the hack. Popular mythology has it that a phone hack requires deep technical expertise, but that was definitely not the case here. What the hackers took advantage of was the simple fact that many people don’t reset their voice mail passwords after signing up for the service. The absence of a password reset means that practically anyone can break in. All you have to do is use the default password issued by the phone company. That is, in fact, what happened in this case: http://www.nytimes.com/2011/07/07/world/europe/07phone.html?_r=2.

It strikes me that celebrities and other newsworthy individuals are not the only ones at risk. There are implications for directors of major corporations as well.

Even if you, as a director, are disciplined enough to secure your voice mail with an effective password, when you leave a message on someone else’s voice mail what guarantee exists that the recipient has done the same? Without a proper password on the part of the recipient, the sender of the voice mail is unknowingly exposed.

How many directors are aware of this risk? It is widely assumed that certain communication media are more secure than others. The phone is considered one of the more secure forms, thought to be virtually immune to breaches. As this episode has highlighted, this is a falsehood. On the other hand, directors have always been aware of the risk surrounding email communication. It is time that they treat voice mail in the same way they treat email – with extreme caution.

Here’s something to consider: if you are a director, and you need to leave a message on a sensitive topic, skip the phone and instead use a system designed and tested for secure communications.

Joe Ruck

Social Tools without Social Risk

Tuesday, July 5th, 2011

Consumer social media companies are getting eye-popping valuations, and only last week Google laid down their bare-knuckle challenge to Facebook with Google+. No doubt, consumer social is hot.

So the question that we asked a couple of years ago, how to adapt the consumer models to the needs of leadership teams, is more relevant today than ever. It was obvious then that social media was an ever-strengthening force, and that it was only a matter of time before it would play a role in leadership communications.  On the other hand, there was an argument to dismiss these models entirely as nothing but a distraction.  After all, did we really expect boards and leadership teams to spend their time photo sharing?

Looking around the software market we noticed some vendors touting Facebook-style walls to improve enterprise collaboration. Those examples were compelling at first until it became apparent that they illustrated use at the lowest levels of the enterprise, and unfailingly, in non-business-critical situations.  Of course, where confidentiality concerns are minimal and the stakes are low, it’s easy to improve communication – just open up access! The problem is that doing so will sacrifice process along the way.  Perhaps that trade-off works in some organizations and at some levels, but it would backfire painfully at the top. When you’re charged with the safekeeping of highly confidential board documents, proliferation of content is not an option.

The second problem was executive role complexity. Rarely discussed, but critically important nonetheless, it is a reality that executives wear many different hats. They invariably hold stakes in a wide range of initiatives.  That role complexity, pervasive among executives, is simply not existent among the rank and file.  It is for that reason that consumer networks and their simple corporate adaptations, may work great at the department level, but have little value at the executive level. Without a richer model to address this challenge these networks would never be a viable option for the leadership team.

That is the reason we built the NextGen architecture with a capability to segregate sensitive communication streams.  Inside the platform, ring-fenced TeamSpaces let executives create destinations for open and direct communication without chancing information leaks. It gives them focal points for collaboration where they can share information using a range of traditional (e.g. shared repository) and social (e.g. feeds) tools. In effect what we’re doing is using ‘social’, not as standalone functionality, but as an organizing principle. The social paradigm is integrated at the core of the platform where a permission model exercises control over all content and communication flows. This assures that no content can proliferate outside its permissible boundaries.

At BoardVantage we agree that much of the promise of social media resides in sharing but, when applied to leadership teams, it cannot be done in isolation. The challenge is to strike a balance between the need to share and the need to maintain control. Q2 was significant for us in this context because it was the first quarter that we began implementation in over a dozen F-500 customers of these multi-TeamSpace arrays. In Q3 we will post updates on the most interesting of these as we progress with additional customers.

Mary De Frenchi

SCSGP Conference Update

Tuesday, June 28th, 2011

One of the highlights in any governance professional’s calendar is the annual Society of Corporate Secretaries and Governance Professionals’ Annual Conference. This year was no exception and was held at the luxurious Broadmoor resort in Colorado Springs, drawing something like 700 attendees.

This was a great show for BoardVantage with a record amount of booth traffic. It was nice to see so many old friends stop by and say “hello” to us, but it was obvious that most people were really at our booth to see the real star – our iPad app.

Not surprisingly then, the highlight was a breakout session on the adoption of technology in the boardroom — portals, iPads and teleconferencing. The session was attended by nearly 300 — standing room only! And the 3 panelists (Gale Chang of Met Life , Angela Hilt of Clorox, and Carol Schwartz of American Express) were coincidentally all BoardVantage users, a reflection of the market uptake in our iPad app. The panel covered a number of topics including:

  • The importance of due diligence around ease-of-use and security when selecting a board portal
  • 10 Tips for successful implementation of a board portal and how to achieve ‘paperless’
  • Conferencing with boards
  • How to effectively facilitate iPad adoption

The interest level remained high throughout the conference with all the attendees having in-depth discussions on board portals and iPads. It seems the main question now being “when”, rather than “if” you will move your Directors to iPads.

Joe Ruck

A Brief History of Board Portals

Monday, October 18th, 2010

At BoardVantage we do our fair share of product demos, during which we answer all manner of questions about functionality and how the portal is being used, standard demo stuff. Lately, another set of questions has entered the mix. Customers are now also asking about the board portal market itself, and how it has evolved. They’re more interested in our product roadmap and in the trends that have shaped the market as it exists today. It’s a departure from demos a year ago, but I think I understand why. There is a new dynamism in the space driven by a range of external and internal factors all the way from the iPad to the advent of social media, to the increased adoption of board portals beyond the board. Having been in board portals for almost eight years, I thought I’d provide a Cliff notes version of the space, and shed some light on how it might evolve from here.

All about Access: The Electronic Board Book

Unlike other recent business applications, board portals were not part of the Dotcom crop of the late nineties. They are a more recent phenomenon with the first vendors releasing products in the early 2000s’. BoardVantage was among them receiving our first round of VC financing in late 2002. Other early entrants received their funding around that same time, some from their corporate parent, and others from private sources.

There were two factors that propelled market development. The first was a cadre of progressive directors who, enthusiastic about technology and weary of bulky board books, advocated electronic access to meeting materials. The term used by them was “electronic board book”, an apt description given the rather primitive solutions in existence, which did not support much more than rudimentary online access.

The second driver was the passage of the Sarbanes-Oxley act. This major piece of legislation, written in response to the scandals of that the time (Enron and others), threw a spotlight on board portals as a vehicle to drive governance. At BoardVantage we recognized the value (Technology in Corporate Governance, 2008) in that area but never regarded technology as a substitute, recognizing that corporate governance is ultimately a matter of expertise, ethics and transparency. Taking a pragmatic approach to the role for technology, our focus was increasing director visibility and improving timely access to information. That meant investments in alerting, secure email and Web conferencing. This approach has been validated, as online access has proved its staying power while governance faded as purchase justification for board portals.

Demand came from surprising corners. Contrary to popular expectation it was strongest from brick-and-mortar companies, not the tech sector. Also, large enterprises, typically perceived as conservative, were among the early adopters. Despite this contrarian trend, overall demand remained modest because product functionality was inadequate for widespread uptake.

From Access to Process: The Board Portal

It wasn’t until 2005 that the category found its footing. Technology matured, buying criteria firmed up, and naturally deal flow increased. Right around this time the term electronic board book fell out of favor while the term board portal took hold and is in use to this day. This reclassification was an implicit acknowledgment that newer technology could do much more than provide simple electronic access to board materials. Driven by customer requests, BoardVantage made major technology investments to stay ahead of the trend. Product enhancements allowed capturing virtually all aspects of board process including written consents and director questionnaires. We launched the corporate secretary toolkit with dashboards to manage and tally director input. We shipped an agenda builder for creation of an online agenda and assembly of a board book from Word. By the time 2007 rolled around we had re-engineered our product from top-to-bottom and had Web-enabled all board process as it was practiced inside a typical Fortune-500. With this second generation portal a General Counsel could provide the board with access to board materials AND support process in meetings as well as in-between meetings.

Other material developments during that time included improvements in the process aspects of security architectures and the initiation of SAS70 audits. Also, during this time hosted solutions vanquished the on-premise model. In the early days it had been possible to purchase an on-premise license, but this rapidly faded when F-100’s and financial institutions broadly adopted the hosted services model, correctly perceiving security would be better and director support greater. With time, the vendor hold-outs of the old model dropped out, and as of this writing the market is exclusively based on hosted services. After this rapid series of advances the board portal space entered a maturing phase (temporarily as it turned out) where customers were satisfied to absorb the improvements in their organizational process.

By now some of the biggest companies in America had embraced board portals although often preceded by lively debate. On one hand there were “the progressives”, on the other hand “the traditionals”. This debate has carried on in many boardrooms and reached a stalemate for several years. It’s only recently that the balance has begun to shift.

From Process to Collaboration: The Cross-Over

Starting in 2007 we noticed a change in the demand picture. Whereas up until that time board portals were strictly used by directors, “inside the boardroom”, requests started to come in to deploy the service for applications “outside the boardroom”. Driven by a growing need to include senior executives in the boardroom conversation as well as the desire for executives to collaborate more closely among themselves, companies were reaching out for something better than email.

This might be surprising at first but on closer scrutiny it becomes clear that the way that boards work isn’t so different from the way most executives do. Like directors, executives, depend on a steady flow of information, are often on-the-go, and get their information from an eclectic network of sources. In an increasingly fast-paced world, getting timely access to that information is of growing concern. Compounding the issue is that the information is confidential and is held under some form of process control. To tackle this problem they have email, which had begun to fall short. A board portal on the other hand, with its built-in security, ease of use, and document management has obvious inherent advantages to address this need.

This new demand did however not come without its challenges. As much as there are similarities in the way that boards work there are also material differences. For example, as a group, executives are far more tech-savvy than board members. Also, whereas board process is a relative constant across industries, there’s significant process variation from company to company when it comes to executives.

Before long demand “outside the boardroom” outpaced demand inside. As it continued to grow the BoardVantage flagship product was no longer optimal so in 2008 we green-lighted an engineering effort to build an executive collaboration platform. This platform was equipped with a new UI, a new architecture and new functionality, while leveraging our expertise in security, ease of use and executive team workflow. We also integrated social media because it is increasingly a key component of any enterprise application. Our NextGen product was announced earlier this summer and is now in full production.

We now see ourselves at an inflection point as a company with the market itself on the cusp of a transformation. Of course customers still need online access to board material and Web-enablement of board process but they have also added executive collaboration as a new criterion. No longer is the platform just for the board. It now also includes the leadership team and beyond. All of this has shaken up the stalemate in the boardroom. Whereas before the two forces were at an impasse, “progressives” are getting the upper hand over the “traditionals”, at least that’s the way it looks to us judging by the rapidly growing demand for our service.

No discussion of this topic would be complete without commenting on the iPad. Only announced this spring but it has had the impact of turbo-charging the trends outline above. I witnessed the revolution in computing that emerged with the PC, and I see a similar dynamic here. Every single demonstration we perform includes questions about iPad support (iPad Fever) and it’s not hard to see why. As I wrote in my iPad Experiences, the iPad is the perfect way to review and approve content. Just as the PC needed client-server computing to provide access to centralized systems such as SAP and Oracle, the iPad (and the inevitable follow-on devices, which will be more direct PC replacements) works best with modern hosted systems such as BoardVantage.

These are exciting times for the board portal market as it transforms to a broader market while leveraging the very latest software application trends with the latest hardware in the shape of the iPad. I am pleased that BoardVantage is at the forefront of this wave of change.

Joe Ruck

No Moving Parts

Friday, September 3rd, 2010

In my opinion, one of the biggest benefits customers enjoy with a hosted solution is the reliability that ensues when you only have to support a single environment, one which you as a vendor, have total control over.

Having worked for a number of software companies, and helped them grow from start-up to IPO, I am struck by the change in the character of Engineering. In the early days of the start-up, the engineering team (say, less than 10 staff) spend their time building new functionality. Productivity is impressive, and extrapolating what 1000 engineers could do makes you think you can take on the world. But then, slowly but surely, a greater proportion of engineering time gets sucked up in bug fixes. As the number of customers grows, the number of bugs, rather than decreasing instead tends to increase, and before long you do indeed have 1000 engineers, but the majority are employed on maintenance.

I’ve seen this movie several times within my own companies, and dozens of times with other companies I’ve been familiar with. This is not down it any individual shortcomings, it’s a market dynamic, and one that cripples innovation in those companies.

The problem with Enterprise Software is that no one piece is an island. All software depends the operating system, and typically a database too. Usually there are important cross links to other systems such as email etc. Each of those components exists in many versions and with a variety of patches that can be applied in any combination. The result is that even for a company with 1000 customers, it’s likely that each installation is unique. The number of possible permutations of just 10 patches applied or not is 2048, and cross-dependencies can be both subtle and exponential.

No vendor can regression test 1000+ different combinations of software platform. So when your vendor tells you they haven’t come across your problem before, they are no doubt telling the truth. No customer can run on precisely the exact same software levels that are recommended, since other software will mandate other fixes, and in any event, the inevitable security updates render all such recommendations obsolete within weeks.

Given the complex nature of modern software, it can be hard pinpointing the precise cause of a failure – is it the application, the database, the operating system, or something else? The resultant finger-pointing increases the customer’s blood pressure and length of time taken to resolve as the customer has to take on the role of triage. When a hosted application experiences a failure, the accountability is clear.

A hosted service, with its single environment, takes all of that away at a stroke. Engineering can get back to its core job of innovating, not maintaining. Aside from making life easy for the customer with a more reliable system, the lack of maintenance costs flows directly to the hosted solution vendor’s bottom line and gives them a competitive advantage that enterprise software vendors cannot overcome.