Just about every IT professional at some point in his or her career has run into an IT disaster based on either having to do more with way less, or poor decisions made by senior management. Charles Nault, founder and chair of Atrion, a New England-based systems integrator, can sympathize with these IT professionals. Likewise, during the past 20 years his company has pitched, some of the senior executives who have caused these IT problems for one reason or another. He says that IT problems are more rampant in small to medium -size businesses where CEOs do not understand the strategic value of IT. He adds that these types of companies are more vulnerable to network downtime than large enterprise companies. Nault, rather than dwell upon what went wrong where, has written a book called Risk-Free Technology: How Small to Medium Businesses Can Stem Huge Losses from Poorly Performing IT Systems.
Enterpriseleadership.org sat down with Nault to discuss some of the concepts in his book. Here is what he said:
EL. Can you briefly describe Atrion's business model? BTW, how do you market your services?
CN. We think of ourselves as a high-end systems integrator. Our business model includes going into companies and establishing a relationship with a C-level executive, preferably the CEO or the COO. Usually, we just see the CIO or an IT director. First, we want to understand everything we can about the company, especially what it does, how it does it, and what tools will help it do better.
When it comes to getting new business, we hired a marketing company that sets up C-level appointments for us. We found that it is easier to start at the top and work down the organizational ladder. The marketing firm gets paid if I sit down with the appropriate executive. So far, it has worked well for us.
EL. Can you briefly talk about several IT disasters you have run into?
CN. We worked with a company that had a good IT team managed by a great IT director. This person totally revamped the network, making it IP based. The company eventually hired a CIO who had his own set of ideas. The CIO and the IT director butted heads with each other. The CIO fired the IT director. Once this happened, the IT staff had rampant turnover. Because the CIO did not like dealing with us, he gave us the boot too.
We came across a multi-billion dollar with a pieced-together network. Senior management had a hands-off approach to IT, giving full IT responsibility to the new CIO. This individual had two flaws - incompetent and mostly self-taught about IT. He thought he did the company a favor by buying inexpensive equipment and solutions, and making the network run at the lowest cost possible. That is the so-called value he brought to the company. He failed to do any planning.
We came across a hospital CIO whose senior administrators hailed him as its hero for keeping the cost of the new network as low as possible. This CIO apparently went with the lowest bidder for each project. He really did not care about the vendor's credibility, as long as the price was right. Eventually, some of our partners and friendly competitors said they no longer wanted to deal with this CIO because his network was a mess. We tried to sell this CIO some point solutions to correct a few problems, but he would not listen. The CIO's successor had to rebuild the network from scratch. Ironically, the hospital's senior administrators still hold the former CIO in high esteem.
EL. The title of your book is Risk-Free Technology. It is possible to achieve this?
CN. The idea of risk-free technology can come about if IT organizations strive to build what I call utility grade networks. This type of network offers peak performance and little, if any, downtime. Building this network does not happen overnight. You first need to build a rock-solid network infrastructure with enough redundancy and reliability, the appropriate backup strategies, proper documentation, and well-trained and adequate staff. That is just the beginning. You also need support from senior management. You cannot align an ineffective network with the needs of your business.
EL. Do small to medium-size companies invest adequately in their network infrastructure?
CN. Some do. Here is the issue. Some companies have good IT organizations staffed with people who know that they are doing. They submit propositions and proposals. For example, they do their homework and then propose a good solid architecture. Unfortunately, someone at the top gets the pen out and starts trimming the IT budget. Before you know it, the IT organization has no choice but to live with an inadequate budget and resources. Eventually senior management gets surprised and angered when the network fails to live up to their expectations. In this type of company, IT management does a good job of planning but often becomes blindsided by slashed projects or shelved projects. In the end, the IT organization might give up on system redundancy or settle for an inadequate service contract.
EL. What motivated you to write this book?
CN. When I met with the multi-billion dollar company with the pieced together network, I said, 'The CEO cannot possibly know what type of a shoestring his network operates on. If he did, he would not sleep at night.' I also knew it was not my place to call the CEO and throw his CIO under the bus. That scenario became my original motivation. As I started talking with CIOs and IT managers who worked for our customers, I learned that they shared a common frustration: Senior executives, especially CEOs, do not want to know anything except how much does it cost and how can I cut costs. IT organizations in small to medium-size companies suffer from a lack of realistic support from senior management. My other motivation for writing the book included being a champion for these IT professionals who did not get what they needed to do a job, and at the same time, give a wakeup call to those CEOs who paid lip service to IT, not realizing how it could make or break an organization.
EL. Will a technology such as cloud computing eliminate some of the networking problems you mention in the book?
CN. It has the potential to do that. If an organization can use hosted applications and those applications come from a solid organization with a secure configuration, then why not. It can reduce some of the problems associated with the server layer and desktop layer. Few companies will be able to relegate all of their applications to the cloud. Even if they could, they would still need a utility grade networking. For example, if your Internet configuration does not include redundant hardware, redundant circuits, and automatic failover, then you will have more trouble than if you had servers on your location. It could become a double edge sword. If you do it right, cloud computing has a ton of potential.
EL. Which parts of the IT Infrastructure Library (ITIL) are your customers moving towards?
CN. A lag times exist between when you finish the book and the publication date. Much has changed. I wrote my comments on ITIL during the introduction of version 3 of ITIL. Everyone said that this ITIL version was more condensed and well suited to small to medium-size businesses. Because it was pitched as IT as a service, many of our customers, especially those governed by regulations such as HIPPA and Sarbanes Oxley, peeked under the ITIL v.3 hood. Some of these customers even did version 3 training. Many of our customers have postponed moving forward with version 3 implementations because of the expense. In addition to the training, they usually have the cost of an ITIL consulting firm. In fact, I know of ITIL consulting firms that will not work with small to medium-size companies.
EL. What about qualities practices? Do you see Six Sigma or COBIT in your marketplace?
CN. I see COBIT more than anything else, even more than ITIL. I, however, tend to see COBIT in larger organizations. I have not seen much of COBIT in smaller organizations. I have seen it at some banking institutions because they need to inject it into their Sarbanes Oxley strategy. If you are financial institution, you need to be compliant with this regulation. You need to look for some type of a documented strategy that enables you to carry out those best practices.
EL. Can you discuss how you helped a large company and why it brought you in?
CN. I have a presentation called taming the IT beast that touches on a large insurance company with component IT people. Unfortunately, senior management constantly squeezed these folks for money. They had to look first at what equipment cost, not what it did. They did not have adequate staff. Most of all, they did a poor job of writing documentation. We dealt with these people on the fringe. We provided some remote access multiprotocol servers into their network. At the time, we did not have a close working relationship with this organization.
One day, we got a frantic call that the company's network went down. Business had stopped completely. No one could log into the network. We did not have much access to the network, except with the remote solution we provided. At the time, this company had many dedicated connections. We tried to do some remote troubleshooting, but we did not get anywhere. At noon, the senior management team sent everyone home and closed the business. Thousands of agents around the country could not do anything that day. We eventually got the problem solved late into that night. Because we solved this problem, the company called us in to do a more formal presentation of our services. The company wanted to know specifically how it could avoid this in the future. We began with 'here is your business today. We need to understand what everyone does each day. This information will get us to the point where we can make the company's IT infrastructure rock solid.' We did that. To this day, this company has not had an unplanned network outage.
CN. What takeaways would you give CIOs and CEOs about the business impact of IT versus just keeping the lights on?
EL. I advocate that companies pull together a technology advisory committee. We did this at Atrion. It involves getting a member of the senior management team to sit at the IT table. You need to have senior members from IT, as well as leaders from the business units. You also need to have a cross-section of customers, both internal and external, sitting at this table. No way can you isolate yourself from management. If senior management does not want to show up, then you need to work a little harder. Perhaps, you need to do a better job of learning to speak the language of the business. Do you really know what the CEO and CFO consider important? Ask to sit in on the meetings other departments have. Observe what people say; refrain from talking about IT. Learn all about the business, both from both an internal and external market perspective. Acquiring this type of knowledge will help you to know how IT can have a better impact on the business objective.
Remember, IT is nothing more than a means to an ends. You need to learn what the ends are. Finally, you need to have a razor focus on effective networking. For example, in my book I reference Cisco's study about people who try to do alignment with networks that are not utility grade. The study found that you create more problems that way. Making the network infrastructure rock solid includes an initial investment in redundancy, appropriate backup strategies, and the proper documentation. Once you make this investment, you will end up cutting IT costs in the long run. You will also gain more efficiency.
EL. What are you looking for in IT talent?
CN. We want IT people who possess integrity and humility. I say this because they must know how to function as part of a team environment. We have made the mistake of hiring people with a tremendous amount of technical expertise, including the ego to go with it. These characteristics can prove devastating to the entire team. We can spot these people right away. Ego does not work. Next, we look for the core competencies. The IT professional has given way to specialties, such as networking or security. To this end, we look for people with current certifications in specific areas of IT, such as Cisco or Microsoft.
We also look for a specialty area, such as security, routing and switching, or storage. We offer an on-going program so our IT professionals can keep their certifications current. Some IT folks function as jacks of all trades. We prefer people who have mastered a specific area. We also look for people who have exceptional communication skills. They need to be able to talk in technical terms to their peers and in plain English to non-technical folks. The latter capability is harder one to find.
ElizabethFerrarini is a technology writer from Boston, MA. Reach her at elizabethferrarini@yahoo.com.
Sponsored by BMC Software | We'd love to hear what you think. Send us your feedback. |














