What's a quick win for optimizing spend? What's been your focus or "lowest hanging fruit"?

17.1k views5 Upvotes20 Comments

Sort by:

Director of IT in Retail8 months ago

Actively manage cloud resource utilization. Identify lower environments or 'labs' that don't need to run 24/7. Remove unused resources from use and implement non-production off/on scheduling of resources for use. There is plenty of data, reporting, and tooling to help identify and manage those resources.

Director of IT in Healthcare and Biotech8 months ago

Direct chargeback to owner / project team using resources

Director of IT10 months ago

Optimizing SaaS spend

Director of IT10 months ago

One of the lowest hanging fruits is to quit from proprietary Java.
One of the long-term solutions is to setup Technical Standards in your company to manage vendor products and related annual license expense.

VP of IT in Educationa year ago

By conducting a software license review and an investigation on which tools you have licensed that share functionality. Yes there will be change management, but you can save a bundle. I'd also look at your contracts coming up for renewal and seeing where you can negotiate for a savings. New area I would look at is review your incoming tickets and see what you can automate or fix a process for to save time for your end users and help desk.

Content you might like

What have you found most beneficial in your efforts to ensure that the data and analytics function creates value for the organization?

Ownership of key technologies8%

Ownership of key domain areas57%

Visibility into key domain areas 26%

Engagement and collaboration with the C-suite2%

Engagement and collaboration with VPs and managers6%

Something else

View Results

Can there be benefits to vendor lock-in?

Yes, vendor lock-in can have its benefits and does create market value78%

No, vendor lock-in is never desirable21%

How can I establish consumption-based improvements or reports for on-premise services like k8s, databases, elasticsearch as well as cloud services like cloudflare or azure?
Background:
I would like to provide consuption reports to our internal customers which are mostly developments teams in order to make awareness of there on-premise service usage.

If you get hired by an SMB and you’re the company’s first/only security practitioner, where should you start? (Should you focus on SANS top 20 controls? Or start with the NIST framework?)