<div dir="ltr"><div><div><div><div><div><div><div><div><div>Hi Ngigi,<br><br></div>Yes, Enterprise Service Bus.<br></div>All major banks will tell you that they have ESB, but they are either shells or highly un-optimized installations.<br><br>The difficult part in ESB is building connectors/ adapters to and from core system....and maintaining those adapters such that all applications are fully dependent on middleware and not point to point with core. <br><br>The most ubiquitous ESBs... websphere, Oracle, Red Hat's JBoss Fuse and such others lifted off Gartner's magic quadrant come at a stiff implementation, support and maintenance cost. Other more robust and affordable such as I-CON from Prosol and Talend - lack name recognition and smooth talking salesmen; but are more promising <br><br></div>(JBoss is not too expensive, but often confused with Wildfly - the open source API). Let me paste a very partial picture of ESB adoption in .ke<br><br></div>A nice, best-of-breed bank acquired one of big name ESBs 4 years ago... it has never worked. To just get something configured you need a consultant from Mars at $500 per calendar hour, per diem to boot.....and hey - he flies business and must see family every 6 days.<br><br></div>Another was cross-sold to an emerging ESB with little field proof....it worked....for a few years... could not scale...now they are changing....<br><br></div>The third example is too blatantly reckless to be written...<br><br></div>The day central bank will demand ESB as a standard, is te day 1) banks will cut the shackles of core system vendors, 2) banking 'IT audit' will become easier and possible, and 3) changing/ upgrading core systems will no longer be as dramatic as today. <br><br></div>You can read more <a href="http://www.jackhenrybanking.com">here</a> about possible direction banking platforms are headed.<br><br></div>KM<br><div><div><div><div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 28, 2016 at 3:30 PM, Ngigi Waithaka <span dir="ltr"><<a href="mailto:ngigi@at.co.ke" target="_blank">ngigi@at.co.ke</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Machuhi,<div><br></div><div>ESBs would be Enterprise Service Bus? If so, whats the current status of their adoption amongst Banks in .KE?</div><div><br></div><div>Rgds</div></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On Thu, Apr 28, 2016 at 3:20 PM, K Machuhi via kictanet <span dir="ltr"><<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><p dir="ltr">Disclosure: bank's so called 'IT audit' is part of what puts food on table in my house.</p>
<p dir="ltr">The correct approach is Enterprise IT audit; looking at (core) system, data, processes. Then people and bank's strategy. Subject matter expertise (SMEs) on core system is must have for most Kenyans bank's, but as ESB's get adoption, that necessity will diminish. </p>
<p dir="ltr">The worst mistake bank's make is to get 'IT audit' from conventional auditors. Technology side is cryptic, and unless you have someone who can ask the right questions, auditors will be made to find out what the bank IT team wants them to find out.</p>
<p dir="ltr">Central banks IT audit should simply be outsourced to SMEs. Experts will not apply for employment with cbk. <br>
Also, you will not yet find the SMEs registered with a sector association. At the moment, highly qualified persons capable of doing a proper IT audit are so few, the world needs them more than they need the world. </p>
<p dir="ltr">Unless central banks act fast (moreso in kenya), there will be faceless banks operating outside the regulator. Purely driven by peer to peer and non conventional delivery channels.</p>
<p dir="ltr">Km</p>
<div class="gmail_quote"><div><div>On Apr 27, 2016 5:41 PM, "waudo siganga via kictanet" <<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<div><div style="font-family:Arial;font-size:medium" dir="ltr"><div>
<div>
<div>Hi Kivuva,</div>
<div> </div>
<div>My understanding, although of course open to correction, is that IT Systems Auditors are essentially certified auditors with specialist training and skills to audit "through" and "around" IT systems. I would envisage someone with an auditing qualification backed up with a supplementary qualification is systems auditing but at the end of the day this person is an AUDITOR. In addition the training for today's certified auditors already includes systems audit as a subject. So the key skill is auditing, supplemented by systems knowledge. If this is the case then these professionals are already covered under statutory provisions.</div>
<div> </div>
<div>Waudo </div>
<div> </div>
<div>On Wed, Apr 27, 2016, at 04:25 PM, Mwendwa Kivuva via kictanet wrote:</div>
<blockquote type="cite">
<div dir="ltr">
<div>
<div>On 27 April 2016 at 16:12, Paul Roy <span dir="ltr"><<a href="mailto:roykoikai@gmail.com" target="_blank">roykoikai@gmail.com</a>></span> wrote:
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>Last - As long as I am a the helm of ISACA Kenya, I would like to open up our doors to the various experts within the industry who are willing to retrain IT auditors, IT Security professionals to consider ISACA as an ally. Let us work together, talk to me, come for one of the evening talks and let us grow and strengthen the profession. </div>
</blockquote>
</div>
<br>
Hi Paul,</div>
<div> </div>
<div>Thanks for the elaborate reply. </div>
<div> </div>
<div>My main concern is if it's legislated that people with valid IT Systems Audit certifications are the only ones doing IT audits for public interest organisations. The way only Lawyers can only do certain duties, or CPAs. Is this something feasible?</div>
<div> </div>
<div>Regards<br>
<div>
<div>______________________<br>
Mwendwa Kivuva, Nairobi, Kenya<br>
<a href="http://twitter.com/lordmwesh" target="_blank">twitter.com/lordmwesh</a><br>
<br>
</div>
</div>
</div>
</div>
<div><u>_______________________________________________</u></div>
<div>kictanet mailing list</div>
<div><a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a></div>
<div><a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a></div>
<div> </div>
<div>Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.com" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/emailsignet%40mailcan.com</a></div>
<div> </div>
<div>The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.</div>
<div> </div>
<div>KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.</div>
</blockquote>
</div>
</div>
</div></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/kmachuhi%40gmail.com" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/kmachuhi%40gmail.com</a><span><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></span></blockquote></div>
<br>_______________________________________________<br>
kictanet mailing list<br>
<a href="mailto:kictanet@lists.kictanet.or.ke" target="_blank">kictanet@lists.kictanet.or.ke</a><br>
<a href="https://lists.kictanet.or.ke/mailman/listinfo/kictanet" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/listinfo/kictanet</a><br>
<br></div></div>
Unsubscribe or change your options at <a href="https://lists.kictanet.or.ke/mailman/options/kictanet/ngigi%40at.co.ke" rel="noreferrer" target="_blank">https://lists.kictanet.or.ke/mailman/options/kictanet/ngigi%40at.co.ke</a><span class=""><br>
<br>
The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.<br>
<br>
KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.<br></span></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div><div dir="ltr"><div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><font face="Calibri"><font size="2"><b>Regards,</b></font></font></div><div><br></div><div><font face="Calibri"><font size="2"><b>Wait</b></font></font><b style="font-size:small;font-family:Calibri">haka Ngigi</b></div></div><div><div><font face="Calibri"><font size="2"><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse">Chief </span></font><font color="#888888"><span style="border-collapse:collapse">Executive</span></font><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse"> Officer | </span></font><font style="border-collapse:collapse;font-family:'Droid Sans',arial,sans-serif;font-size:13px" color="#FF6600">Alliance Technologies</font><font face="'Droid Sans', arial, sans-serif" color="#888888"><span style="border-collapse:collapse"> | MCK Nairobi Synod Building</span></font></font></font></div></div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><font face="Calibri"><font size="2"><span style="font-family:arial"><font face="Calibri"><font size="2">T +254 20 525 0750</font></font></span></font></font><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px"> </span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px">|Office Mobile: +254 716 201061 </span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px"></span><span style="font-family:Calibri,sans-serif;font-size:13px;line-height:14px">| </span><span style="font-family:Calibri">M +254 737 811 000<a style="color:rgb(103,117,58)"><br></a></span></div></div><div style="border-collapse:collapse;color:rgb(136,136,136);font-family:'Droid Sans',arial,sans-serif;font-size:13px"><div><span style="font-family:Calibri"><a href="http://www.at.co.ke" target="_blank">www.at.co.ke</a></span></div><div></div></div></div></div></div>
</font></span></div>
</blockquote></div><br></div></div></div></div></div></div></div></div>