Hackers exploit year's fourth PDF zero-day

For the fourth time this year, Adobe has admitted that hackers were using malicious PDF documents to break into Windows PCs. The bug in the popular Reader PDF viewer and the Acrobat PDF maker is being exploited in "limited targeted attacks," Adobe said yesterday. Adobe promised to patch the vulnerability on Tuesday, Oct. 13, the same day that Microsoft plans to issue its biggest-ever collection of security updates . The bug exists in Reader and Acrobat versions 9.1.3 and earlier on Windows, Mac OS and Linux, said Adobe in a security advisory published Thursday, but as far as the company knows, it is being exploited only to hijack Windows PCs. "There are reports that this issue is being exploited in the wild in limited targeted attacks," said Adobe. "The exploit targets Adobe Reader and Acrobat 9.1.3 on Windows." Adobe will plug the hole next week as part of its quarterly security update for Reader and Acrobat. That phrasing generally means hackers are sending the rigged PDF documents to a short list of users, oftentimes company executives or others whose PCs contain a treasure trove of confidential information. Last June, Adobe announced it would follow the lead of companies like Microsoft and Oracle, and release regular security updates for Reader and Acrobat.

It said more than a month ago that it would instead push the patch date into October. Originally, Adobe was to post patches last month, but a scramble during July to fix several flaws, including some introduced by Microsoft in a code "library" used by its own developers, as well as those in other companies, wreaked havoc on Adobe's schedule. Until a patch is released next week, Windows Vista and Windows 7 users can protect themselves by enabling Data Execution Prevention (DEP), a security feature designed to stop some kinds of exploits - buffer overflow attacks in particular - by blocking code from executing in memory that's supposed to contain only data. Windows XP users should disable JavaScript in Reader and Acrobat, added Adobe. Instructions on how to enable DEP are available on Microsoft's support site.

That wouldn't block all possible attacks, but will stymie the exploit now in the wild. In March, the company quashed a PDF bug that attackers had been using for more than two months . It again patched Reader and Acrobat in May to block another zero-day . In July Adobe fixed a Flash PDF-related flaw that was being used by hackers. Adobe has struggled this year to stay ahead of hackers. Next Tuesday's Reader and Acrobat updates will also patch a unknown number of other vulnerabilities, Adobe said.

Malware Threat Emanates from Growing Unemployed Ranks

Looking at the statistics, February was a positively brutal month for workers being idled. There were 2,769 mass layoff actions putting throwing 295,477 out of work. Last Friday, the Bureau of Labor Statistics (BLS) released the ugly numbers. That's 542 mass layoff actions more than January and 57,575 laid off.

The BLS only obliquely breaks out what could represent IT workers as "professional and technical services." Not surprisingly, manufacturing bore the brunt of February's layoffs accounting for 47% of the unemployment claims, but IT folks could represent a small piece in all the 19 industry sectors that BLS follows. I wondered how many of those were IT people and what percentage might turn to cyber crime. Suffice it to say there's plenty of IT folks with little or nothing to do. The story explores how idled workers in China are turning to cyber crime. That out of work IT professionals turn to cyber crime should come as no surprise so the headline China becoming the world's malware factory on top of an IDG News service is to be expected.

Everyone needs to be vigilant (but not turn into vigilantes). Indeed, a story at Chief Security Officer cites a Symantec study that says 98 percent of organizations suffer "tangible loss" as the result of cyber crime (more than a little self-interest on Symantec's part should be noted). With the third variant of the Conficker worm set to strike on April 1, take the message of vigilance to heart (let's hope it's as tepid as Y2K). By the way, the BBC reported this morning that the U.K. Government is monitoring social networking sites like Facebook to "tackle criminal gangs and terrorists." That's vigilance of a controversial nature. It's obvious: the latter. Is this just another day in the cyber jungle or is the cyber crime problem exacerbated by the expanding ranks of the idled? So if you want to freshen up your knowledge of malware, check out the many primers on the subject. I like Wikipedia's or check out the Chief Security Officer web site.

ProMOS plans to sign R&D pact with Taiwan Memory

ProMOS Technologies may soon sign a deal to work on DRAM manufacturing technology with Taiwan Memory Company (TMC), the government-sponsored entity designed to take over debt-ridden DRAM makers in Taiwan. "We have reached a mutual understanding to start working with them," ProMOS vice president Ben Tseng said by phone on Monday. ProMOS has been manufacturing DRAM in Taiwan since 1996 and was the first company on the island to run a factory making chips on 12-inch wafers. The cooperation will begin with research and development work, but Tseng says ProMOS is hopeful it will turn into a manufacturing partnership as well. "It only makes sense," he said. "Once the R&D is done, then you do the manufacturing on the same site." TMC could not immediately be reached for comment.

TMC is a brand-new company designed by the government to bail out its heavily indebted DRAM makers. DRAM prices have rallied over the past several months, recently hitting profitable levels for most DRAM companies. Taiwan's five big DRAM makers ran into financial trouble amid the global recession and after suffering two years of losses caused by a massive chip glut. Before ProMOS and TMC can enter an agreement, TMC needs to finalize its funding plans. The company slashed production as the DRAM downturn bit, and is currently producing chips on fewer than half of its production lines. The Taiwan government has discussed investing NT$30 billion (US$925.9 million) in the new company, while TMC chairman John Hsuan has said private investors will also be invited to put money into TMC. ProMOS needs money to move forward.

It has used up most of its cash paying off debt. The coming launch of Microsoft's new operating system, Windows 7, has stirred demand for new PCs and they need DRAM chips inside. New funds from TMC would help ProMOS reopen closed factories just as DRAM prices are hitting profitable levels. Tseng said his company must also soon decide whether to invite workers back full time after keeping some on unpaid leave for months due to the global recession. Once the company ends the unpaid leave, however, it will have to start paying full salaries again. Under Taiwanese labor law, companies putting workers on unpaid leave must do so for fixed periods of months at a time, but ProMOS may need them back quickly to ramp up factory lines if it signs a deal with TMC soon.

Microsoft shows off Bing tool for measuring ad effectiveness

Microsoft on Monday demonstrated a new tool for its Bing search engine that will allow advertisers to measure the effectiveness of their ads with online users. Mehdi pointed out that statistics show that 39 percent of Web users do 65 percent of the online searches, so it would be beneficial for advertisers to see which of those "heavy users" are targeting certain ads, versus which ads are favored by "light users." The tool Microsoft created shows where the interest in a marketing or advertising campaign is specifically coming from, he said. Speaking at the IAB MIXX Conference and Expo 2009 in New York on Monday, Yusuf Mehdi, senior vice president of Microsoft's Online Audience Business group, showed off what he called a "user-level targeting" tool that allows Microsoft to see which search-based ads that appear in the Bing search engine are getting the most traffic and from where. "What we're doing with Bing for vigorous measurement is we're matching the exact ad online with the exact user," he said. This measuring ability for Bing was demonstrated as part of Mehdi's presentation, in which he discussed how Microsoft is applying lessons it's learned from studying advertising campaigns and creating technology to reflect that learning.

You have to pick and focus." Microsoft revamped and rebranded its Live Search engine "Bing" in June, and making it more effective for search advertising is something the company continues to work on, Mehdi said. One of those lessons was what he characterized as "relentless measurement and optimization" to find out what ads are most effective so they can be better targeted to their proper audience. "One of the big things is trying to build a loyal fan base for the product," he said. "You can't just go out and put your message everywhere. It was unclear from Mehdi's presentation whether this technology is available for advertisers using Bing today or whether it's just something Microsoft is using internally. This kind of ability to measure what kinds of online advertising is working with users is becoming essential as more and more business is being done on the Web. A representative from Microsoft's public relations firm, Waggener Edstrom, declined to answer follow-up questions about the technology or his presentation. In fact, Microsoft competitor Adobe Systems - an executive from which spoke before Mehdi on Monday - last week said it was purchasing Web analytics company Omniture to build measuring technology directly into Adobe's tools for creating online media.

Report: Apple to unveil new iMacs by mid-October

Apple will refresh its iMac desktop computer within a matter of weeks and will unveil the first revamp of the all-in-one's exterior since mid-2007, a prominent Apple enthusiast site reported Thursday. But details are few and far between. According to AppleInsider , Apple will introduce new iMacs sporting a new enclosure "anytime between next week and mid-October." Taiwanese manufacturers have been producing the redesigned iMacs for the past two weeks, sources told the Web site, and other clues, including $100 to $200 discounts on existing models to volume customers, point to an imminent release, said AppleInsider. Although the site said its sources claimed the redesigned iMacs will sport a thinner design, perhaps one that mimics the look of Apple's LED-backlit Cinema Display line introduced last December, information about other enhancements, tweaks and additions was scanty.

The last time Apple updated the iMac was in early March 2009, when the company doubled the amount of RAM, increased storage space and dropped in faster Intel Core 2 Duo processors while keeping prices stable for all but one model, the least-expensive 24-in. One possibility: an internal Blu-ray optical drive. iMac. But they split on whether the timing is on the mark. "Apple's desktops, as a percentage of their total [system] sales, continue to decline," said Stephen Baker, an analyst with retail research firm NPD Group. At the time, one analyst called the refresh "underwhelming" and "exactly what you'd expect from Apple, more stuff for the same price." The recent gossip of upcoming new iMacs got the attention of a pair of industry analysts, who agreed that an iMac overhaul is long overdue.

Baker said the talk of an iMac refresh made sense because of the long stretch since the line last saw a redesign, and because Apple would like to give its desktops a chance to compete with laptops, long its strength. Apple currently sells the one 20-in. He also suggested that Apple would be smart to cut prices of its iMacs, rather than take its traditional approach of keeping prices flat while beefing up the components' specifications. "The pricing for iMacs is almost the same as for Apple's notebooks," he observed. iMac model at $1,199, and the three 24-in. configurations at $1,499, $1,799 and $2,199. In comparison, the company's MacBook Pro line of laptops are priced between $1,199 and $2,499. Ezra Gottheil, an analyst with Technology Business Research, however, was skeptical of a September or October refresh. "I think it looks likely that Apple will do this, but not until early 2010," Gottheil said, noting that virtually every major component in the desktop systems had been upgraded in March. In the second calendar quarter, Apple sold 2.6 million Macs, 4% more than the same quarter the year before . Only 849,000, or 34% of that total, however, were desktops, which the iMac dominates.

He also cited Apple's strong sales during the recession as another reason why the company wouldn't feel pressured to retool the line. That was down 10% from the 943,000 desktops sold in the same period of 2008. Gottheil also hedged his bet. "The iMac is the longest in the same box," he said, referring to its case design while and acknowledging anything's possible from the Cupertino, Calif.-based computer maker. "Apple is completely unpredictable." Another hint that Apple may do the unpredictable comes from history's timeline: Last year, Apple unveiled the new "unibody" design for the MacBook Pro in mid-October. According to the guide, the iMac has been updated every 220 days, on average, since it's 2003 introduction. Also worth noting is the MacRumors Buyer's Guide , which tracks the product cycles of Apple's hardware, and makes recommendations based on the average time between refreshes. As of Thursday, 203 days had passed since the March 2009 revamp. "Buy only if you need it - approaching the end of a cycle," the buyer's guide warns.

Gartner: Turn server heat up to 75

Data center managers should turn server temperatures up to 75 degrees Fahrenheit, and adopt more aggressive policies for IT energy measurement, Gartner says in a new report.  Five tools to prevent energy waste in the data center After conducting a Web-based survey of 130 infrastructure and operations managers, Gartner concluded that measurement and monitoring of data center energy use will remain immature through 2011. Only 7% of respondents said their top priorities include procurement of green products and pushing vendors to create more energy efficient technology. In a troubling sign, 48% of respondents have not yet considered metrics for energy management. In general, data center managers are not paying enough attention to measuring, monitoring and modeling of energy use. "Although the green IT and data center energy issue has been on the agenda for some time now, many managers feel that they have to deal with more immediate concerns before focusing attention on their suppliers' products," Rakesh Kumar, research vice president at Gartner, said in a news release. "In other words, even if more energy efficient servers or energy management tools were available, data center and IT managers are far more interested in internal projects like consolidation, rationalization and virtualization." About 63% of survey respondents expect to face data center capacity constraints in the next 18 months, and 15% said they are already using all available capacity and will have to build new data centers or refurbish existing ones within the next year. Gartner issued four recommendations for improving energy management: • Raise the temperature at the server inlet point up to 71 to 75 degrees Fahrenheit (24 degrees Celsius), but use sensors to monitor potential hotspots. • Develop a dashboard of data center energy-efficient metrics that provides appropriate data to different levels of IT and financial management. • Use the SPECpower benchmark to evaluate the relative energy efficiency of servers. • Improve the use of the existing infrastructure through consolidation and virtualization before building out or buying new/additional data center floor space.

CDW surveyed 752 IT pros in U.S. organizations for its 2009 Energy Efficient IT Report, finding that 59% are training employees to shut down equipment when they leave the office, and 46% have implemented or are implementing server virtualization. In addition to Gartner's report, a recent survey by CDW illustrates trends related to data center efficiency. The recession has helped convince IT organizations of the financial value of power-saving measures, with greater numbers implementing storage virtualization, and managing cable placement to keep under-floor cooling chambers open and thus reduce demand on cooling systems. Data center managers are finding it easier to identify energy efficient equipment because of the Environmental Protection Agency's new Energy Star program for servers. CDW found that 43% of IT shops have implemented remote monitoring and management of their data centers, up from 29% the year before. But data centers are still missing many opportunities to save money on energy costs. "Energy reduction efforts are yielding significant results … Still, most are spending millions more on energy than necessary," CDW writes. "If the average organization surveyed were to take full advantage of energy-savings measures, IT professionals estimate they could save $1.5M annually." Follow Jon Brodkin on Twitter 

It's hard to find anyone who likes audio conferences. Or play Facebook Scrabble and check e-mail until it's their turn to talk. Sure, worker bees can put themselves on mute to chat with fellow cube dwellers.

Yes, for true lows in productivity, the fuzzy, disembodied, dial-in audio conference is hard to beat. Office voice mail, cell phone voice mail, office e-mail, personal e-mail, texting, instant messaging, social media communiques. And what about all those mail and messaging systems anyway? Make it stop, you cry! At its most basic, UC makes real-time communication systems, such as instant messaging, share information with non-real-time systems, such as e-mail or voice mail, and runs them over the same network. Unified communications won't do that, but depending on which communications and messaging systems you integrate, UC could make it better.

Ideally, there is one simple interface or dashboard for users to access these systems. Using voice over IP to cut the traditional phone bill (the foundation for UC) doesn't hurt, nor does reducing travel costs as employees meet in video or audio chats rather than fly to faraway hotel conference rooms. With UC, CIOs aim to speed up communication and collaboration internally and perhaps raise customer satisfaction externally. About 31 percent of 466 organizations surveyed recently by Forrester have deployed some form of unified communications. In Forrester's survey, 42 percent of respondents who said they weren't investing in UC cited lack of money or the absence of clear business value to justify the investment.

Half of those who haven't say they are investigating or piloting UC, up from 30 percent in 2007. Yet UC isn't on fire this year, as the recession continues to batter IT spending. To read more on this topic, see: How to Get the Most From Unified Communications and Video Conference Software Now Works with Other Apps. "Certainly it does make sense to connect voice mail, e-mail and mobile systems," says Jerry Hodge, senior director of information services at appliance distributor Hamilton Beach. "Unfortunately, the current economic situation has limited my aggressiveness in moving forward." The same is true at movie-rental chain Blockbuster and food and beverage maker Shaklee, their CIOs say. The Original Social Networking UC has evolved from a back-room effort to simplify networking by, for example, running data and voice traffic on the same infrastructure, to applications that let employees share information no matter the device in front of them. Still, if you have money and want to move forward with UC, early adopters have advice about planning projects and measuring returns. Well, almost. But it's coming, predicts Steven John, CIO of manufacturing company H.B. Fuller.

We're not quite at the point yet where a BlackBerry, say, can get you into any corporate system and connect you to any colleague. The rise of consumer social networking platforms such as Facebook, Flikr and Twitter reinforce daily the desire among corporate employees to strip the friction from communicating at work, too, John says. Presence, meanwhile, is moving from a cool, gadgety technology to real corporate tool. He says he feels that heat and is studying potential UC systems, but he hasn't yet decided on any. That's when computer devices detect each other and indicate the fastest or preferred way to reach the person on the other end.

One simpler UC move is to integrate voice mail and e-mail so that users can listen to e-mail or read voice mail. It's like instant messaging for every kind of connection you might make to your corporate network or, if configured for it, the public Internet. Another is to allow instant messaging or document sharing during video conferences. Autodesk went whole hog into Cisco's TelePresence system, which involves super high-quality video conferencing that can connect up to 48 locations at once, along with on-screen, interactive data sharing. According to Autodesk VP of Strategic Initiatives Billy Hinners, the ultimate in video istelepresence technology.

Cisco calls it an "immersive" experience-think Star Trek's Holodeck. Autodesk spent $350,000 to outfit its first six-person TelePresence room. Of course, the price for such a system is steep. It runs 15 rooms now, ranging from two-person to 12-person sites, and spends about $10,000 per month on networking costs. "Cost savings was not a big driver for us," Hinners says. Subsequent installations have also been aimed at improving sales communications and efficiency as well as reducing travel and carbon emissions. Rather, the company initially wanted better collaboration between software designers and engineers in the United States and its 1,000-plus software engineers in Shanghai to pump out products faster at an improved quality.

Employees embraced the technology right away, he says. UC projects are some of the most technical ones that CIOs have to contend with today, integrating data and voice in ways that some IT groups have never done before. Time booked in the TelePresence rooms for regular video conferencing has become "a precious commodity." In fact, if there is any project for which success depends on users rather than IT guiding the planning and rollout, it's unified communications. But communicating is, by nature, a personal act. What you really want are users who push for a UC project, says Michael McTigue, CIO of Saint Barnabas Medical Center.

Foisting upon people unwanted changes to how they talk and type to each other makes people uncomfortable, says Don Lewis, president of consultancy Strategic Intersect. "You think all you're doing is taking away someone's phone and giving them another one but you're not," says Lewis. "Changing the button they push to forward a call to someone is hugely disruptive." Is There a Doctor on the Device? The hospital group-which provides cardiac services, burn treatment and organ transplant among its offerings-wanted to speed up the time for doctors, nurses and technicians to reach each other. Indeed, the archaic process of dialing a beeper, hoping the page goes through, waiting for the recipient to get it and call back slowed communications, and therefore reaction time during critical situations, McTigue says. The time-honored pager method was no longer good enough. Fifteen minutes might pass before a physician could reach someone in the telemetry group to order machines to monitor a given patient's heart rate, blood pressure and breathing. "Everyone was looking for a communications vehicle that would give better turnaround time," he says.

In March 2007, Saint Barnabas launched a pilot of Vocera Communication's badge devices. Walkie-talkies, while quick, didn't pan out because the crackly speakers made the hallways noisier and they ran through a lot of batteries. The 2-ounce rectangles are worn on a lanyard around the neck or clipped to a collar or pocket. A nurse might press the activation button and speak into it the name of a physician who is needed to check a medication order. They allow hands-free voice communication.

Via a wireless network, the device pings a database to look up the doctor's name and relay the call. Saint Barnabas spent $500,000 for devices and software for 450 concurrent users, starting with the telemetry group. The doctor taps his button and speaks to respond. That 15-minute wait time plunged-responses now take nine to 15 seconds, McTigue says. Within nine months, the hospital spent $250,000 to add another 300 concurrent users, giving 2,700 employees access to the system. Such dramatic results convinced the hospital to get as many of its 3,000 employees on the system as quickly as possible.

IBM managed the initial training, helping new users enunciate and speak directly into the Vocera device. The training helped get Saint Barnabas to a high rate of calls recognized and completed on the first try: 83 percent. In the emergency room, where there's more noise than in other parts of a hospital, the staff uses headsets rather than dangling the device at chest level. Seventy percent is more typical, McTigue says proudly. They had to fiddle with wireless access point configurations to get all areas hot. "If you don't have tight infrastructure, the application will get a bad name," he warns. Along the way, the hospital worked with IBM, Cisco and Vocera to identify and fix wireless dead spots in stairwells, elevators and the lead-walled radiology area.

The system works only on campus but the hospital is testing a Vocera smart phone with the same capabilities for off-campus use. The hospital expects to connect 1.5 million to 2 million calls through the system, eliminating the need for one full-time switchboard operator, according to McTigue. Yearly operating costs are $75,000 to $85,000, mainly for Vocera software maintenance, he says. The hospital has saved another $70,000 by getting rid of its backup phone system used during power outages. Payback from UC projects doesn't typically come from savings on networking equipment because those prices are low already, says Lewis of Strategic Intersect. The wireless Vocera system replaces a traditional dedicated circuit for that old emergency system.

But hard returns can be calculated: Obviously, meeting virtually can cut travel costs. Softer results, Lewis says, can also be important: By merging voice mail, e-mail and BlackBerry messages, your sales organization may save 30 minutes every day. Setting up call center staff to work from home, but access integrated voice, e-mail and document capabilities frees up physical room at the company for other uses. How valuable is that in productivity and morale? The more people on the system, the faster and more frictionless their communication. Try It, They'll Like It As the experience at Saint Barnabas shows, unifying the communications for lots of people at a company can be more beneficial than unifying communications for only some people.

In a hospital, that can save lives. Woods Bagot, an architectural design firm with offices in Dubai, Hong Kong and London, among other cities, has built elaborate buildings worldwide. At a corporation, that can make money. Recent projects include the oval dish-shaped campus of the United Arab Emirates University, a mixed residential and commercial district in Shenzhen, China, and the Cesaria beach resort in the Cape Verde islands. Exchanging drawings is key for an architecture firm, of course. In 2007, the board at Woods Bagot decided that it wanted the company to operate like one big studio no matter where its clients, engineers and architects lived.

But the people who work at Woods Bagot are visual thinkers, so any new communications tools would have to let them see each other, not just share data and documents, says CIO Nectarios Lazaris. "Being a design firm, we don't sit in a boardroom and look at Excel spreadsheets," he says. "We walk around and interact with people." Not to mention swap 3-D visualization files that are a couple of gigabytes unto themselves. Same with Polycom's Web conferencing product, he says. He tried at least five products, including Microsoft Live Meeting, whose video quality users found poor. Lazaris chose Microsoft Office Communicatorfor desktop video conferencing and collaboration, products from Tandberg for boardroom video conferencing and Blue Coat's software for secure Web connections. The first test came when a week after the video system went live, the Woods Bagot board opted to try the new toy instead of meeting in person. "It was a nervous time for us," he says, noting that Blue Coat had people on-site to troubleshoot should something go wrong during the pivotal meeting. He was impressed that Blue Coat sent engineers-not salespeople-to Woods Bagot during the decision phase and let them stay as long as needed during and after launch.

The company saved $450,000 by not flying the 12 board members to Sydney or providing their accommodations for that meeting as well as the remaining ones planned that year, Lazaris says. The technology lets Woods Bagot work with cream-of-the-crop designers and architects residing anywhere in the world, according to Lazaris, which is a point the firm makes in presentations to potential clients. But it was the experience that sold the board. "When they see their investment in play, that's a bigger win than trying to show them a PowerPoint that says, 'I saved you $450,000,'" he says. He says it's gotten the firm work it might not otherwise have won. "This is not follow-the-sun like in outsourcing. Volvo Group wanted a better way to work across time zones with colleagues who don't necessarily respond to e-mail-however red-hot urgent it's marked, says Magnus Holmqvist, director for the IT innovation center at the company.

We're not handing over projects but collaborating in a live environment," he says. "It's comforting to them." How UC Helps IT The mere thought of coordinating a global supply chain project will send many IT managers quivering under their project management software and spreadsheets. Volvo Group makes Mac trucks and Volvo busses and construction equipment; Ford now makes the famously rectangular cars. Previously, various team members would meet every 12 weeks to test versions of the new SAP and Red Prairie applications they are building. An IT team of 70 people around the world are working on a project to streamline Volvo's spare-parts supply chain, which reaches 60,000 mechanics in 180 countries. Early this spring, Volvo started virtual test rooms online, using Microsoft Office Communicator and Hewlett-Packard's TestDirector quality-check tool running over VoIP. So far, half of the in-person meetings have been eliminated, but plane trips have been reduced by more than half because the technology is so good, Holmqvist says.

He declines to say how much money Volvo has saved in travel costs but says the system has cut carbon dioxide emissions by 630 tons-about the equivalent of taking 250 cars off the road for a year. Even people in the same city sometimes opt to attend meetings virtually rather than trek across town. Don't underestimate the mileage, so to speak, that you may get from promoting the green ROIof cutting travel, Homqvist says. "People don't feel too good about flying across the Atlantic when we know we have climate change going on. Linking that idea to cost-cutting has helped IT get the new technology more eagerly accepted across the company, he adds. "That is real." Homqvist predicts work quality and productivity will rise because employees will spend less time planning meeting logistics and traveling. "Our perception is that we're already earlier on these test-suite sessions. But people feel much better about eliminating those kinds of meetings," he says.

Instead of a 12-week cycle, we may reduce the cycle." Defining the ROI Some organizations, however, aren't seeing the returns they expected on UC projects. The softer benefits of smoother collaboration are hard to quantify and therefore, Dewing says, hard to justify. Or rather, they don't know how to tie a dollar figure to them, says Henry Dewing, a principal analyst at Forrester Research. Especially now. It's hard to pin down the dollars generated or saved by faster project completion or product launches, Dewing says.

Twenty-four percent of the telecommunications and networking managers surveyed by Forrester say they aren't getting all the benefits they expected from UC. Another 11 percent said they didn't know whether they were or not. John, the H.B. Fuller CIO, isn't sure yet what mix of tools will produce the best return. The adhesives company does business in 100 countries, with offices in 36. The pressure is on John to find technological ways to overcome such geographic diversity, he says. As a $1.5 billion company, Fuller's revenues aren't huge but its global footprint is. But he doesn't want to jump too quickly. But standardizing hardware is something Fuller has only recently started to do.

For example, it's easier to unify communications when PCs and laptops are standardized, in part because tweaking the configurations takes less time. He doesn't want to buy more products than he needs. How about accessing your computer calendar by voice, over the phone? Say a Fuller engineer in China views a document created by a U.S. counterpart and can hover over his colleague's name with his mouse to automatically dial that person for a PC-based call. That's the kind of razzle dazzle UC application vendors pitch that isn't available in, say, SharePoint, Microsoft's document sharing and collaboration system. "It's fun, fancy, very sexy but is it needed?

One part of the calculation, he says, will be trying to predict how much bandwidth different combinations of UC technologies would eat and whether the network costs will be worth the UC benefits. Would that be a competitive advantage?" John wonders. He hasn't reached any conclusions yet, but a product like SharePoint might provide enough collaboration for Fuller employees so that a big UC investment isn't necessary. "That's what we're debating." Loomis, the armored car company, has been installing UC components for two years, expecting to cut telecommunications costs and make some business processes more efficient. Wayne Sadin, Loomis' CIO, began contemplating UC a few years ago, when the company was outgrowing its existing phone systems. But first, the company had to lay some infrastructure. Loomis had acquired several smaller armored car companies along with their mix of different PBXes.

Loomis replaced those PBX systems at headquarters and, so far, a little more than 10 percent of its 200 branches with Cisco VoIP. Now those tasks can be done by Loomis' own IT staff, centrally. "You just call the help desk. If a branch's voice mail needed reprogramming, they had to call local providers who would drive over to do the work for $100 to $200 an hour, Sadin recalls. It's 10 minutes of work or even one minute of work," he says. In 2007, Loomis finished putting its Microsoft Exchange e-mail system on VoIP. Meanwhile, Microsoft Office Communicator supplies video conferencing, instant messaging and presence, including a BlackBerry IM client. Not paying PBX vendors for move, add or change orders is a big part of Loomis' ROI, he adds.

Employees can forward voice mails as if they were e-mail and they don't have to log in to separate voice mail, e-mail and BlackBerry messaging systems, Sadin says. When Pacific Medical Centers put in VoIP to let data and voice traffic run unified on its network, it had to rearrange some job responsibilities, says consultant Lewis, who was the hospital's CIO at the time. A Unified Mind-Set Melding all of these capabilities takes some forethought and, perhaps, changes to how the IT group works together and with outside vendors. Network administrators, for example, had to learn to plan for spikes in traffic during peak application usage times as well as for telecommunications. But as UC takes root, CIOs and IT staff must make sure those different vendors coordinate their work, he says. For many companies, separate vendors supply networking gear, servers and software.

For example, Loomis planned to upgrade Cisco's Call Manager administrative suite last spring, in part to more fully integrate Cisco phone handsets with Microsoft's Office Communications Server. But the morning of the scheduled upgrade, the teams discovered that the need for a schema change to Microsoft's Active Directory got overlooked. Loomis' network and server teams planned and tested the upgrade with a local VoIP consultant for two to three months. The upgrade was aborted. Do you Tweet. Loomis tried again in late August, after the Active Directory tweak was tested and rolled out. "I guess the phone-oriented vendor didn't realize how carefully our server team guards Active Directory from untested changes," he says. "The hardest thing about integrating communications is integrating people's mind-sets." Senior Editor Kim S. Nash can be reached at knash@cio.com.

Follow me on Twitter @knash99. Follow everything from CIO Magazine @CIOMagazine.