Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Still not worried about Windows Server 2003? Think again

Anthony Stevens, CIO of KPMG Australia | Jan. 30, 2015
Anthony Stevens, CIO of KPMG Australia debates why CIOs are delaying the migration from Windows Server 2003

A few factors that I've observed from my interactions with my peers. CIOs in the region are not assigning a high enough "risk" level to the Windows Server 2003 end of support issue when they are determining overall risk assessment. IT risk is generally assessed through the equation: "risk= threat x vulnerability x asset."

Organisations should note that with regard to "assets," Windows Server 2003 is a server operating system which directly affects a large portion of the IT ecosystem within a business. The impact would be on a greater scale than that of Windows XP's end of support, which was just a desktop operating system.

Similarly, the stoppage of security updates that comes with end of support will sharply increase "vulnerability." So when the overall IT risk of Windows Server 2003 end of support is assessed within a company, it is logical to conclude that the risk level associated with failure to migrate is unacceptable.

Another point to note is that IT risk acceptance also analyses the cost of counter measures. Some may not be aware that a Custom Support Agreement for extended support of Windows Server 2003 is at best a stop-gap measure. Analysts have indicated that the cost of tailored support for the system will vary by customer, but will likely be three times that of Windows XP[v]. Extended support is simply too expensive to be considered a cost-effective counter measure in the long run.

Whilst the above two points are possible reasons for the general malaise when it comes to technology refreshes, the most likely reason is that people are underestimating just how long server migrations take. The entire migration process can take anywhere between 200 and 300 days to complete. A cause for concern given the end of support deadline is less than 200 days away.

Beyond mitigating risks incurred from failure to migrate, I encourage my fellow CIOs to also consider this event as a golden opportunity to get strategic, modernise their IT and help drive innovation within their companies.

As one chapter ends, another begins. This is your chance to redefine the role of IT to lead business transformation through the use of the cloud, mobility, big data and social. Are you going to let outdated technology like Windows Server 2003 hold you back? 


[i] http://www.datacenterknowledge.com/archives/2014/09/12/ditching-windows-server-2003-necessary-easy/

[ii] https://www.us-cert.gov/ncas/alerts/TA14-310A

[iii] https://pcissc.secure.force.com/faq/articles/Frequently_Asked_Question/Unsupported-OS

[iv] http://www.microsoft.com/apac/news/OneyearcountdowntoWinServer.aspx

[v] http://www.theregister.co.uk/2014/12/19/got_a_few_million_tucked_under_the_mattress_for_microsoft

 

 

Previous Page  1  2 

Sign up for MIS Asia eNewsletters.