The National Security Agency (NSA) released the “Commercial National Security Algorithm Suite 2.0” (CNSA 2.0) Cybersecurity Advisory (CSA) today to notify National Security Systems (NSS) owners, operators and vendors of the future quantum-resistant (QR) algorithms requirements for NSS — networks that contain classified information or are otherwise critical to military and intelligence activities.
A cryptanalytically-relevant quantum computer (CRQC) would have the potential to break public-key systems (sometimes referred to as asymmetric cryptography) that are used today. Given foreign pursuits in quantum computing, now is the time to plan, prepare and budget for a transition to QR algorithms to assure sustained protection of NSS and related assets in the event a CRQC becomes an achievable reality.
“This transition to quantum-resistant technology in our most critical systems will require collaboration between government, National Security System owners and operators, and industry,” said Rob Joyce, Director of NSA Cybersecurity. “Our hope is that sharing these requirements now will help efficiently operationalize these requirements when the time comes.”
“We want people to take note of these requirements to plan and budget for the expected transition, but we don’t want to get ahead of the standards process,” said Joyce.
NSS owners and operators should not deploy QR algorithms on mission networks until they have been vetted by NIST and National Information Assurance Partnership (NIAP) as required in CNSSP-11.There will be a transition period, and NSA will be transparent about NSS transition requirements.
For additional information, the CNSA 2.0 CSA is accompanied by a cybersecurity information sheet (CSI), “The Commercial National Security Algorithm Suite 2.0 and Quantum Computing FAQ.” This CSI provides updated answers to quantum-related FAQs that were previously published on NSA’s website.
From the factory floor to delivery robots, innovation is moving fast with real-time data processing.
Luxury auto maker Audi is driving full-throttle toward Industry 4.0, using AI inference and computer vision on the factory floor with autonomous robot welders that can react in real time and fix issues that may arise when welding the frame of a car. That’s just one example of how the company is moving toward realizing its ultimate vision of creating smart factories with a scalable and flexible platform that will enable data analytics, communications and processing at the edge, powered by 5G.
In the past, welding required a lot of manual intervention and inspection to ensure sufficient quality, says Nick McKeown, senior vice president and general manager of the network and edge group at Intel, which is working with Audi. Now, with cameras reviewing the quality of the weld the need for human intervention has greatly decreased.
“If you want, or need to process data in real time, you actually have to bring the compute to the data, to the point of data creation and data consumption.”
Sandra Rivera
“Edge computing is taking the technology resources we’ve been developing over many years for the computing industry and using them to analyze and process data at the edge”, McKeown says. The concept of edge computing is storing data closer to where it is generated and used—like the factory floor–instead of in the cloud, which means it can be processed in real or near real time.
“If you want, or need to process data in real time, you actually have to bring the compute to the data, to the point of data creation and data consumption”, explains Sandra Rivera, executive vice president and general manager of the datacenter and AI group at Intel. Not having to move large amounts of data enhances security, and increases reliability while reducing latency. And because data is kept more private there is an additional layer of data sovereignty available when needed, adds McKeown.
GROWING OPPORTUNITIES FOR 5G AT THE EDGE
As telecommunication operators continue rolling out 5G infrastructure, “there are opportunities that start to emerge because the data rate, the latency, the control that you have over the 5G network means that we can start to use it for applications that we would not have previously thought suitable for a cellular technology,” McKeown says.
In the Audi factory example, controlling a robot arm in real time requires either a cable, a wire, an ethernet cable that connects to it to guarantee connectivity, the data rate that is needed, and the low latency control—or it has to be replaced with a wireless link, he says.
“Now imagine that robot is moving around. You really don’t want a wire trailing around on the floor for other robots to trip over. You’d really like it to be a wireless link”, McKeown says. “And the problem is, wi-fi hasn’t really gotten there just yet in terms of the quality that you would want. What 5G, in particular private 5G, offers is a much more reliable, much lower latency, much more controlled-by-software experience.”
According to a recent Gartner report, “Predicts 2022: The Distributed Enterprise Drives Computing to the Edge”, 5G is the fastest growing segment in the wireless network infrastructure market—and global revenue will likely reach $23.2 billion in 2022. Gartner has further predicted that by 2025, more than 50% of enterprise-generated data will be processed outside a traditional centralized data center or cloud.
Deploying AI applications at the edge with 5G has the potential to generate new revenue sources—and position AI as standard bearer for 5G. Opportunities range across industries including smart manufacturing, smart cities, rich media, enhanced retail logistics, and automated warehouses, among others.
KEEPING AN EYE ON OBSTACLES
Because AI is a highly compute-intensive process it is critical to have the right infrastructure optimized for the unique demands of AI workloads at the edge. Another consideration says Rivera is that “Computing takes power. And we know that we have to work within restricted power envelopes when we’re deploying on the edge and also computing on small form factor devices, or in areas where you have a hostile environment,” Rivera notes.
“Every day, every week, I see a number of different use cases that our customers or their customers have put in place that we would never have thought of.”
Nick McKeown
For example, if wireless infrastructure is deployed across the globe, that connectivity will exist in both the coldest and the hottest places on earth, she says. “We design and develop our products on our own, as well as together with customers, for much more power-efficient types of platforms to address that particular set of issues.”
There’s always more work to do, because there’s always more computing people want to do on an ever-limited power budget, Rivera says.
“The other big limitation we see is in legacy applications,” she adds. In the case of deploying internet of things (IoT) devices, there is such a broad range of market segments each customer’s environment and individual needs have to be considered.
“Our challenge is, how do we give application developers an easy way to migrate and integrate AI into their legacy applications? When we look at how to do that, first of all, we have to understand that vertical and work closely with customers.”
THE POSSIBILITIES ARE ENDLESS
The combination of AI and 5G will transform the enterprise and accelerate economic growth, as 5G networks provide the backbone, scalable bandwidth, and remote compute resources to process increasing volumes of data that will fuel the proliferation of AI.
If someone had told McKeown a few years ago there would be smart delivery bots in cities and towns being driven by autonomous vehicles that would walk down sidewalks, climb stairs, and deliver right to someone’s door, he would have said that might happen maybe 15 or 20 years from now. Yet, those applications are being tested and rolled out right now.
And that’s just one visible example we will see. That automation and control is happening in warehouses and in factories because of sensors and actuators running on a 5G network. The combination is going to create “a sort of a Cambrian explosion of new ideas” that if we were to try to predict, we would get wrong, McKeown says.
Whatever we think is going to happen by combining new IoT applications with public and private 5G, as well as AI and machine learning at the edge, “will actually shock us”, he says. “And that’s because it’s the wild pioneering west, and it’s wonderful, it’s exciting, it’s terrifying, it’s growing, it’s expanding. Every day, every week, I see a number of different use cases that our customers or their customers have put in place that we would never have thought of.”
Intel technologies may require enabled hardware, software or service activation. No product or component can be absolutely secure. Your costs and results may vary. Performance varies by use, configuration and other factors.
As the Department of Veterans Affairs looks to finalize its contract with Cerner, the agency has laid out some comprehensive expectations for the EHR vendor that emphasize change management and interoperability.
Documents released by the VA last week outlined some specific requirements for Cerner, which was tapped to overhaul the agency’s EHR system in June. The rollout is expected to cost at least $10 billion and is poised to consume the next decade.
Last week, Politico reported that the final contract, which VA officials expected to complete by the end of November, was held up because of lingering interoperability concerns from Secretary David Shulkin, M.D.
Unsurprisingly, interoperability and data exchange make up a significant part of the VA’s focus. A performance work statement (PWS) finalized by VA officials in October states that the EHR system will “become the authoritative source of clinical data” for the 168-hospital system to support “improved population health, patient safety, and quality of care provided by VA.” Although the impetus of the sole-source contract was to better align the VA with the Department of Defense, the agency clearly expects Cerner to improve information exchange with community health providers.
The PWS features specific requirements for Cerner, including an interoperability plan delivered to the VA each year. At minimum, Cerner’s solution must be able to do the following:
Allow the VA to release and consume a veteran’s “complete longitudinal health record” with DOD and community partners
Share interactive care plans
Share URL-based images with community and academic partners’ systems
Connect with interoperable networks like eHealth Exchange, CareQuality, CommonWellHealth Alliance, Direct Trust and the National Association for Trusted Exchange
Allow providers to collaborate via secure email within the EHR workflow.
Within two years of awarding the contract, the VA also expects Cerner to:
Connect with the DOD and community providers to provide a referral management solution
Notify providers when a veteran is admitted, discharged or transferred
Identify and manage veterans at a high risk for suicide.
The VA also referenced its “digital health platform/digital veteran’s platform,” a project that has been in the works for several years. The agency calls on Cerner to “work in good faith” to integrate EHR data into the platform, including through an “API gateway.”
The PWS makes numerous references to organizational change management, an issue that Shulkin has repeatedly emphasized as a critical aspect of the EHR deployment. The VA wants Cerner to provide localized and national change management strategy using credentialed clinicians, change management specialists and project managers.
The PWS states that Cerner will also be responsible for identifying change management “hot spots” and pain points that might hinder adoption, and conduct site assessments to determine readiness.
The US Army has announced that it will create an office next year dedicated to overseeing the country’s offensive cyber and space capabilities.
Offensive cyber refers to cyberspace operations intended to project power through application of force in or through cyberspace.
Called the Program Manager Cyber and Space, the office will be responsible for testing and fielding cutting-edge equipment, such as aerial jamming pods, biometric information systems, and battlefield navigation tools.
Establishing a new office is reportedly an important move due to increasing workloads and demands related to cyber and space.
“Because we’ve seen mission growth in that area, we’re going to spin off,” Mark Kitz from the Program Executive Office for Intelligence, Electronic Warfare and Sensors said.
The new cyber and space office will be led by a colonel.
Last month, the US Army announced the establishment of a “triad” that will combine space, cyber, and special operations capabilities to conceptualize effective battlefield strategies for modern warfare.
CIOs must possess five key characteristics to lead and deliver on digital transformation.
In short:
CIOs must rethink their role as digital leaders, due to workplace disruptions and ongoing changes to business, operating and IT delivery models.
When CIOs deal with uncertainty and change, they are more effective business leaders.
Digital transformation requires technology leaders to reinvent their approach, rather than simply respond or react to business requirements.
As CIOs face ever-expanding responsibilities in their roles, they must remain effective in dealing with uncertainty and change. Digital not only disrupts business, it also transforms leadership. Gartner research shows that successful digital business initiatives demand paradigm shifts in technology leadership and new ways of thinking and approaching challenges.
“CIOs know they must function with flexibility and agility to thrive in the dynamic world. The realities of a disrupted workplace, business model transformations, operating model changes and IT delivery model changes, all force fundamental shifts in the activities and responsibilities of the given role of a CIO,” says Apoorva Chhabra, principal analyst at Gartner. “All of this also creates opportunities for the CIOs to expand their executive leadership.”
How to be a successful digital leader: Five characteristics to adopt
Business transformation can be accelerated or derailed depending on how effective leaders are at transforming themselves. Executive technology leadership must anticipate digital opportunities and threats, use technology to adapt to changing conditions, and find leverage and value from disruption. To become an effective digital CIO, it is important to understand and adopt these five characteristics:
No. 1: Neophilia: A Tendency to Like Anything New; Love of Novelty
Neophiliacs are naturally curious and attracted to new things. They seek to explore and find new ways to create value.
Neophiliacs welcome varying ideas from others that shift from the past, a key component of any successful digital transformation. A neophiliac asks, “What do we want to achieve?” rather than “What have we got?”, rejecting current assumptions. The ultimate objective drives solutions to seemingly complex problems.
Effective digital CIOs also embrace innovation. They tend to have a high degree of creativity, defined as the ability to connect seemingly unrelated areas.
No. 2: Develop New Opportunities: Invent, but Also Copy
Digital leaders don’t necessarily invent and innovate all the time. In reality, successful digital leaders appreciate exactly where their organizations need to be different, where they can copy and where they should improvise.
Successful digital leaders are selective, doubling down on particular areas that deliver a greater advantage, acceleration or value contribution. In areas where they do not see any clear advantage, digital leaders are comfortable copying and improvising based on already established methods. Ineffective leaders lack focus, and tend to be all over the place with innovation.
No. 3: Pioneer New Opportunities: Look Beyond Industry Boundaries
This leadership characteristic is personified by what Gartner labels “digital dragons,” who actively seek value beyond any specific industry and create whole new industries as they redefine value in any industry they pursue. Strategies and digital adoption plans are often made only as a result of a market disruption mindset.
Effective digital leaders see threats that aren’t necessarily distinct, and make decisions while maintaining a clear vision of their industry’s future, as opposed to considering the industry static or unchanging.
No. 4: Seek New Value Creation Opportunities: Never Consider Digital to Be the Outcome
Successful digital leaders understand that digital is a means, not an end, and that simply making something digital does not necessarily increase its value. It may actually decrease it.
Digital technology tools either change the way people work, or change the products and services provided, whether through extending the life cycle of a product, adding digital features or providing goods as a service.
Consider the logic behind the product/service’s value proposition before implementing digital tools. Ask how the digital offering drives the business outcomes of customer centricity, greater market share and revenue enhancement. Use digital to boost your value proposition such as on-demand services, hyperpersonalization, dynamic pricing and real-time applications.
No. 5: Focus on Technology-Driven Opportunities: Geek Out on Technology
A successful leader possesses a deep understanding of the technology underlying their business. It’s challenging to get value out of technology if you don’t understand what it does or doesn’t do.
CIOs need to enable a technology-enriched environment, where learning is engaging, collaborative and customized. They should follow —geek out on — technology as a passion, as well as an essential way to stay innovative and relevant in the crowded and competitive business spaces.
Summary. Culture is like the wind. It is invisible, yet its effect can be seen and felt. When it is blowing in your direction it makes for smooth sailing. When it is blowing against you, everything is more difficult. For organizations seeking to become more adaptive and innovative, culture change is often the most challenging part of the transformation. But culture change can’t be achieved through top-down mandate. It lives in the collective hearts and habits of people and their shared perception of “how things are done around here.” Culture change needs to happen through a movement, not a mandate. To create a movement in your organization, start by framing the issue in terms that stir emotion and incite action; then mobilize more supporters by demonstrating quick wins. Broadcast these wins to an even wider audience by leveraging employees’ social networks, and using symbolism and pockets of innovation to keep momentum going. It’s important to start with actions, not new mission statements or company structures, because culture change only happens when people take action. Show people the change you want to see.
Culture is like the wind. It is invisible, yet its effect can be seen and felt. When it is blowing in your direction, it makes for smooth sailing. When it is blowing against you, everything is more difficult.
For organizations seeking to become more adaptive and innovative, culture change is often the most challenging part of the transformation. Innovation demands new behaviors from leaders and employees that are often antithetical to corporate cultures, which are historically focused on operational excellence and efficiency.
But culture change can’t be achieved through top-down mandate. It lives in the collective hearts and habits of people and their shared perception of “how things are done around here.” Someone with authority can demand compliance, but they can’t dictate optimism, trust, conviction, or creativity.
At IDEO, we believe that the most significant change often comes through social movements, and that despite the differences between private enterprises and society, leaders can learn from how these initiators engage and mobilize the masses to institutionalize new societal norms.
Dr. Reddy’s: A Movement-Minded Case Study
One leader who understands this well is G.V. Prasad, CEO of Dr. Reddy’s, a 33-year-old global pharmaceutical company headquartered in India that produces affordable generic medication. With the company’s more than seven distinct business units operating in 27 countries and more than 20,000 employees, decision making had grown more convoluted and branches of the organization had become misaligned. Over the years, Dr. Reddy’s had built in lots of procedures, and for many good reasons. But those procedures had also slowed the company down.
Prasad sought to evolve Dr. Reddy’s culture to be nimble, innovative, and patient-centered. He knew it required a journey to align and galvanize all employees. His leadership team began with a search for purpose. Over the course of several months, the Dr. Reddy’s team worked with IDEO to learn about the needs of everyone, from shop floor workers to scientists, external partners, and investors. Together they defined and distilled the purpose of the company, paring it down to four simple words that center on the patient: “Good health can’t wait.”
But instead of plastering this new slogan on motivational posters and repeating it in all-hands meetings, the leadership team began by quietly using it to start guiding their own decisions. The goal was to demonstrate this idea in action, not talk about it. Projects were selected across channels to highlight agility, innovation, and customer centricity. Product packaging was redesigned to be more user-friendly and increase adherence. The role of sales representatives in Russia was recast to act as knowledge hubs for physicians, since better physicians lead to healthier patients. A comprehensive internal data platform was developed to help Dr. Reddy’s employees be proactive with their customer requests and solve any problems in an agile way.
At this point it was time to more broadly share the stated purpose — first internally with all employees, and then externally with the world. At the internal launch event, Dr. Reddy’s employees learned about their purpose and were invited to be part of realizing it. Everyone was asked to make a personal promise about how they, in their current role, would contribute to “good health can’t wait.” The following day Dr. Reddy’s unveiled a new brand identity and website that publicly stated its purpose. Soon after, the company established two new “innovation studios” in Hyderabad and Mumbai to offer additional structural support to creativity within the company.
Prasad saw a change in the company culture right away:
After we introduced the idea of “good health can’t wait,” one of the scientists told me he developed a product in 15 days and broke every rule there was in the company. He was proudly stating that! Normally, just getting the raw materials would take him months, not to mention the rest of the process for making the medication. But he was acting on that urgency. And now he’s taking this lesson of being lean and applying it to all our procedures.
What Does a Movement Look Like?
To draw parallels between the journey of Dr. Reddy’s and a movement, we need to better understand movements.
We often think of movements as starting with a call to action. But movement research suggests that they actually start with emotion — a diffuse dissatisfaction with the status quo and a broad sense that the current institutions and power structures of the society will not address the problem. This brewing discontent turns into a movement when a voice arises that provides a positive vision and a path forward that’s within the power of the crowd.
What’s more, social movements typically start small. They begin with a group of passionate enthusiasts who deliver a few modest wins. While these wins are small, they’re powerful in demonstrating efficacy to nonparticipants, and they help the movement gain steam. The movement really gathers force and scale once this group successfully co-opts existing networks and influencers. Eventually, in successful movements, leaders leverage their momentum and influence to institutionalize the change in the formal power structures and rules of society.
Practices for Leading a Cultural Movement
Leaders should not be too quick or simplistic in their translation of social movement dynamics into change management plans. That said, leaders can learn a lot from the practices of skillful movement makers.
Frame the issue. Successful leaders of movements are often masters of framing situations in terms that stir emotion and incite action.Framing can also apply social pressure to conform. For example, “Secondhand smoking kills. So shame on you for smoking around others.”
In terms of organizational culture change, simply explaining the need for change won’t cut it. Creating a sense of urgency is helpful, but can be short-lived. To harness people’s full, lasting commitment, they must feel a deep desire, and even responsibility, to change. A leader can do this by framing change within the organization’s purpose — the “why we exist” question. A good organizational purpose calls for the pursuit of greatness in service of others. It asks employees to be driven by more than personal gain. It gives meaning to work, conjures individual emotion, and incites collective action. Prasad framed Dr. Reddy’s transformation as the pursuit of “good health can’t wait.”
Demonstrate quick wins. Movement makers are very good at recognizing the power of celebrating small wins. Research has shown that demonstrating efficacy is one way that movements bring in people who are sympathetic but not yet mobilized to join.
When it comes to organizational culture change, leaders too often fall into the trap of declaring the culture shifts they hope to see. Instead, they need to spotlight examplesof actions they hope to see more of within the culture. Sometimes, these examples already exist within the culture, but at a limited scale. Other times, they need to be created. When Prasad and his leadership team launched projects across key divisions, those projects served to demonstrate the efficacy of a nimble, innovative, and customer-centered way of working and of how pursuit of purpose could deliver outcomes the business cared about. Once these projects were far enough along, the Dr. Reddy’s leadership used them to help communicate their purpose and culture change ambitions.
Harness networks. Effective movement makers are extremely good at building coalitions, bridging disparate groups to form a larger and more diverse network that shares a common purpose. And effective movement makers know how to activate existing networks for their purposes. This was the case with the leaders of the 1960s civil rights movement, who recruited members through the strong community ties formed in churches. But recruiting new members to a cause is not the only way that movement makers leverage social networks. They also use social networks to spread ideas and broadcast their wins.
Leadership at Dr. Reddy’s did not hide in a back room and come up with their purpose. Over the course of several months, people from across the organization were engaged in the process. The approach was built on the belief that people are more apt to support what they have a stake in creating. And during the organization-wide launch event, Prasad invited all employees to make the purpose their own by defining how they personally would help deliver “good health can’t wait.”
Create safe havens. Movement makers are experts at creating or identifying spaces within which movement members can craft strategy and discuss tactics. Such spaces have included beauty shops in the Southern U.S. during the civil rights movement, Quaker work camps in the 1960s and 1970s, the Seneca Women’s Encampment of the 1980s and early 1990s. These are spaces where the rules of engagement and behaviors of activists are different from those of the dominant culture. They’re microcosms of what the movement hopes will become the future.
The dominant culture and structure of today’s organizations are perfectly designed to produce their current behaviors and outcomes, regardless of whether those outcomes are the ones you want. If your hope is for individuals to act differently, it helps to change their surrounding conditions to be more supportive of the new behaviors, particularly when they are antithetical to the dominant culture. Outposts and labs are often built as new environments that serve as a microcosm for change. Dr. Reddy’s established two innovation labs to explore the future of medicine and create a space where it’s easier for people to embrace new beliefs and perform new behaviors.
Embrace symbols. Movement makers are experts at constructing and deploying symbols and costumes that simultaneously create a feeling of solidarity and demarcate who they are and what they stand for to the outside world. Symbols and costumes of solidarity help define the boundary between “us” and “them” for movements. These symbols can be as simple as a T-shirt, bumper sticker, or button supporting a general cause, or as elaborate as the giant puppets we often see used in protest events.
Dr. Reddy’s linked its change in culture and purpose with a new corporate brand identity. Internally and externally, the act reinforced a message of unity and commitment. The entire company stands together in pursuit of this purpose.
The Challenge to Leadership
Unlike a movement maker, an enterprise leader is often in a position of authority. They can mandate changes to the organization — and at times they should. However, when it comes to culture change, they should do so sparingly. It’s easy to overuse one’s authority in the hopes of accelerating transformation.
It’s also easy for an enterprise leader to shy away from organizational friction. Harmony is generally a preferred state, after all. And the success of an organizational transition is often judged by its seamlessness.
In a movements-based approach to change, a moderate amount of friction is positive. A complete absence of friction probably means that little is actually changing. Look for the places where the movement faces resistance and experiences friction. They often indicate where the dominant organizational design and culture may need to evolve.
And remember that culture change only happens when people take action. So start there. While articulating a mission and changing company structures are important, it’s often a more successful approach to tackle those sorts of issues after you’ve been able to show people the change you want to see.
BWBryan Walker is a Partner and Managing Director at IDEO San Francisco.
SSSarah A. Soule is the Morgridge Professor of Organizational Behavior an Senior Associate Dean for Academic Affairs at the Stanford Graduate School of Business. She studies organizational theory, social movements, and political sociology including topics like gender bias in the craft beer industry and the impact of women’s protest on congressional attention.