1 2 3 4 5 ... 9 Previous Next

Articles

123 Posts tagged with the innovation tag

The Information Technology Infrastructure Library (ITIL) is an industry-leading set of IT Service Management best practices. These best practices for the support and delivery of IT services can help a company document IT processes as required for Sarbanes-Oxley.

 

Troy DuMoulin, managing consultant at Pink Elephant – an organization providing ITIL based consulting, education, conferences and outsourcing services, notes a shift in how organizations approach best practices for IT services: "In the past, companies used best practices out of a desire for self improvement and to create a positive impact on the bottom line. Now, with Sarbanes-Oxley, they have to do it because it's a formal, legal requirement."

 

ITIL is part of the foundation of the COBIT model, which defines control objectives for IT in support of business processes. COBIT was explicitly chosen as the tool of choice for external auditors to use in IT audits for Sarbanes-Oxley. "Since auditors are using COBIT, it makes sense for organizations to learn about the model. The model identifies key performance indicators and critical success factors that organizations can take into consideration when documenting or re-engineering a process," DuMoulin says.

 

"Although there are many different control frameworks out there, many of them have ITIL at their core. With COBIT for example, 45-50% of the control objectives are covered within ITIL. In particular, ITIL's Service Support and Service Delivery processes address almost a dozen specific control objectives," DuMoulin says.

The ITIL process documentation and COBIT control objectives are a powerful combination that can accelerate Sarbox compliance.

| More
904 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

The Word is

Posted by Tom Parish Dec 5, 2007

by Tom Field

 

While CIOs have faced flat, to slow growth in their annual budgets, the same cannot be said of business expectations when it comes to innovative use of IT.

 

As a result, CIOs face this challenge: How to reduce costs while  simultaneously using IT to drive competitive advantage. As CIO magazine's fifth annual State of the CIO survey reveals, the best executives have realized that simple cost-cutting won't work. Technology innovation is a team sport, and it demands strong partnerships with business decision makers.

 

The survey asked nearly 100 senior CIOs for their thoughts on how to implement IT-led innovation throughout the company. Fifty-nine percent of them consider innovation a significant aspect of their job, but they also recognize that no executive is an island. More than one-third say that innovation initiatives are best led by a joint team made up of the CIO and other business leaders, and 28 percent say that innovative ideas best spring from collaboration and brainstorming with business-side peers. If the ideas and work are shared, so should be the responsibility as well: 42 percent of the respondents think that IT and the business units should share accountability for the results of their labors.


How much of your roll is concerned with innovation?

InnovationRole.gif

Where do innovative ideas come from?

InnovativeIdeasFrom.gif

Who leads innovation initiatives?

LeadsInnovation.gif

Who is accountable for innovation results?

AccountInnovationResults.gif

| More
801 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Elizabeth Ferrarini

 

Geoffrey Moore, a managing partner at TCG Advisors, has made the understanding and effective exploitation of disruptive technologies the core of his life's work. He divides his time between consulting on strategy and transformation for tech companies such as Cisco Systems, and developing mental models to support this practice. His best-selling books, Crossing the Chasm,  Inside the Tornado, The Gorilla Game, and Living on the Fault  Line, have become required reading at leading business schools. Moore's  most ambitious work to date, Dealing With Darwin -- How Great Companies  Innovate at Every Phase of Their Evolution -- offers the bold theory that innovation takes many forms, not just disruptive, and these forms change radically during a company's or product's lifecycle.

 

Geoffrey Moore recently provided Enterpriseleadership.org with some insight  into his new book, Dealing with Darwin, as well as thoughts on outsourcing IT, putting IT into a shared service, and defining the core versus context role of the CIO. Here's what he had to say:

 

EL: In Dealing with Darwin, you use a series of metaphors to define categories in the lifecycle of a company and/or a product. Can you elaborate on what causes people to get swept into the tornado cycle and how well new technologies will fit into this category?

 

GM: As a technology or product begin to take off, they start to sustain and then fade, depending on where it is in its lifecycle. The very new stuff starts off the technology adoption lifecycle, called "early market." People who want to try to stay ahead of the herd usually comprise this early market. The tornado emerges immediately once everyone decides they need the product or technology. This has an explosive amount of growth and just sucks every one in its vortex. If you were a vendor in the 1980s and 1990s, you always looked for the next tornado. Things advanced so fast that IT departments wiped out the prior generation of systems and started over.

 

The new millennium signaled the maturity of technology as if it were a standard industrial sector. New technologies and new ways of adoption still abound, but they now emerge on a beach that has been hit by many waves. The notion that you would swap out a lot of infrastructure and start over is no longer even considered. The real question now is this: How do you evolve your systems rather than revolutionize them?

 

EL: Still referencing your book's categories, what tech sectors are  in the "bowling alley" right now, or the tornado?

 

GM: The bowling alley is where technology is gaining acceptance in one or more markets. RFID is still crossing the chasm between general acceptance or not; in other words, it's between and betwixt. Digital photography and WiFi are in the tornado. Electronic books never crossed the chasm. WiMax hasn't crossed the chasm yet. The bowling alley is a transitional phase. Linux is still in the bowling area. Linux has established itself in either scientific clusters or in embedded computing. Linux could be in the bowling alley forever.

 

EL: Your article in the Harvard Business Review (July-August 2004) says that a lot of companies make the assumption that the success of the new systems will draw resources away from the legacy systems. Thus, companies leave the legacy systems unchanged. Is this a common mistake IT makes?

 

GM: It isn't always a mistake. IT needs to freeze the legacy systems, and then make them a module in a larger architecture. No further changes should be made inside of them. The goal of the new architecture is to turn them into a services-oriented module. To this end, you can ask the systems to do what they have always done, but don't ask them to do anything new. Trying to change a legacy system can cause more damage then good.

 

EL: I've read that you're a big proponent of outsourcing. Should IT be outsourced to an EDS or put into a shared services model, which has kind of slowed down a bit?

 

GM: The shared services model and the outsourcing model are part of the same march. You're a little way down the path with the shared service and at the end of the path with outsourcing. We came to this conclusion based on going through three pairs of levers. The first pair says to "centralize and to standardize," which is the shared services model. The second pair says to "modularize and to optimize," both of which provide a transition to outsourcing. Here you deconstruct your systems into smaller ones so you determine which ones to eliminate, which ones to keep unchanged, and which ones to consolidate. The third pair includes "instrument and outsource." If you had outsourced without going with the second pairs of levers, you would waste a lot of money. To "instrument" means to put service levels in place before outsourcing.

 

EL: Can you run a shared service as a third-party  business?

 

GM: Some companies have tried it and failed. It's usually a bad idea. Keep in mind, the parent of the shared services usually isn't in the IT business, and probably won't be willing to invest in an IT service business. So, as an independent company, the shared services needs to transform itself into a commercial entity with a sales and marketing force.

 

EL: You are well aware of GM's major effort to establish common processes for its $15 billion IT outsourcing initiatives. What went wrong?

 

GM: GM made a horrible mistake the first time with EDS. Why? GM didn't use the three pairs of levels before it decided to outsource. Instead, GM through IT over the transom and prayed for the best.

 

Now let me tell you about the time GM did a brilliant job of outsourcing. In the 1990s, GM used the three pairs of levers to move the supply chain to tier-one and tier-two vendors.

 

EL: What is core and what is context for a CIO?

 

GM: Each company has a unique core. To this end, the company defines what is core for the CIO. The CIO has to first interact enough with the executive team to understand the company's claim to fame in its market space. Is it to be the most cost efficient or to provide the best customer experience? Any IT system that can help differentiate the company's performance in that area is core; any other system is context. The CIO's number one task is to figure out what is core for the business, and then figure out what it means for IT. The CIO's colleagues can provide some of the answers, which will be different for every business. So, the CIO needs to excel as a thoughtful leader. The CIO also needs to develop different strategies for dealing with technology as it moves through its lifecycle.

 

EL: An IT department came up with the idea of rollover minutes. In  his book, Does IT Matter, Nicholas Carr asks the reader to consider whether or not IT can help a company innovate. What's your feeling about this argument?

 

GM: Carr assumes that IT serves no core, but simply all context. That's not true. He says this to be deliberately provocative. For years, too many IT professionals have pretended they were core to the business. Most companies have the same IT resources as their competitors. If you use these same systems in the same way, then IT isn't core. On the other hand, if you build your systems in-house, then you have something different from your competitors. That uniqueness becomes core.

 

EL: Oracle, which is more than 25 year old, bought a slew of startups and now is buying its competitors. Is this a feasible strategy for Oracle?

 

GM: The relational database rests at the heart of client-server computing, which has been around since the 1980s We nearing the end of the client-server lifecycle, but Larry Ellison has no intention of leaving and moving on to services-oriented architectures or Web servers. The network, not the relational database, forms the foundation of this new architecture.

 

To this end, Ellison is buying all of the old client-server properties the same way Computer Associates bought all of the mainframe properties. He's not innovating, but consolidating to create a legacy installed base to milk.

 

EL: Do you think it was a good idea for Sun to acquired  StorageTek?

 

GM: Sun has some similar issues as Oracle, but Sun also has some very visionary ideas, but is caught in a tough place. Sun's idea of computing by the drain doesn't lend itself to an expensive research and development model, which Sun has.

 

By purchasing StorageTek, Sun gained a source of revenue during its transition. Sun views storage has tactical, but strategic. It will be interesting to see where Sun ends up.

 

EL: How do your views differ or compare from those of Harvard  Business School's Professor Clayton Christensen?

 

GM: I love his book, but both of us have spent too much dealing with the disruptive nature of innovation in the 1990s. The title of my new book, Dealing with Darwin -- How Great Companies Innovate in Every Phase  of Their Evolution, sums up where innovation is today. Christensen, on the  other hand, still associates innovation with disruption.

 

My book says that innovation is whatever it takes to create competitive advantage. The book defines 15 different types of innovation -- only one is disruptive. The innovation types include application, product, process, and marketing.

 

Today, the big tech gorillas, such as Cisco and Microsoft, are creating enormous wealth. They're doing incrementally valuable things, such as unique integration methods, which help to differentiate them from their competitors. Their competitors have to try to match these gorillas on a point-to-point product basis.

 

EL: Should IT professionals or even marketing professionals be  concerned about offshoring?

 

GM: At one time, IT professionals presumed they were insulated from offshore challenges. This is no longer true. Today, no one can tell, nor do they care, where bits come from across the Internet. Unless you're doing something unique in IT in a geographic area, such as San Francisco, you face the challenge of offshoring.

 

If you're a global corporation, you need to engage in offshoring or else give your competitors a price advantage. This is why I called my book, Dealing  with Darwin. To survive in the tech ecosystem, you need to raise the bar on what competitive success requires through every cycle. Clinging to entitlement puts you at risk. Look at General Motors.

 

--

 

Elizabeth Ferrarini is a free-writer technology from Boston,  Massachusetts. Reach her at elizabethferrarini@yahoo.com.

| More
821 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Howard Rohm and Larry Halbach

 

Reprinted with permission from the Balanced Scorecard Institute. Note: This article represents Part 2 of Howard Rohm's article "A Balancing  Act," published in Volume 2, Issue 2 of Perform Magazine.

 

Creating a High Performance Organization

"Build it and they will come" works for new cell phones, Internet services, residential home subdivisions, sports arenas, new dog food brands, and for many other new things. But it doesn't work so well with Balanced Scorecard systems.

 

"Let them build it and they will use it" works much better. "Them" and "they" refer to the people in an organization who are responsible and accountable for performance and results. In practical terms, this means using cross-functional teams to build the scorecard system rather than giving responsibility to strategic planning, finance, or any other single group or department. Besides using cross-functional teams, here are some other things you can do to increase the chance of a successful Balanced Scorecard implementation: spend at least as much time developing interactive communications, vision, and business strategy as you do developing performance measures; focus on aligning strategy with operations by starting with an organization's strategic components (mission, vision, core values, customer value proposition, and strategic themes) and working down to operations, projects, activities, and tasks; and plan for and follow through with deploying, managing, and sustaining the scorecard system after it is built. Simply put, we have found that building and implementing a scorecard system is more about changing hearts and minds and sustaining new directions, than it is about selecting performance measures and buying Balanced Scorecard software. If you are the Balanced Scorecard champion, think of your job to implement a Balanced Scorecard as one of helping to create a high-performance organization, and using the Balanced Scorecard as a framework for aligning the organization and human capital pieces needed to get to high performance.

 

This is the second article dealing with Building and Implementing A  Balanced Scorecard: Nine Steps to Success™. In the .rst article we described a framework for building a scorecard system using our Nine-Step process. By "building" we mean creating the components of a Balanced Scorecard using the following six steps: Assessment, Strategy, Strategic Objectives, Strategy Mapping, Performance Measures, and Strategic Initiatives. If you would like to receive a "Readiness Assessment Checklist" to prepare you for developing a scorecard system, contact us at: info@balancedscorecard.org.

 

In this article, we discuss the steps involved in implementing the Balanced Scorecard, and include recommendations for creating a management system and sustaining the system once it is built. We base our recommendations on our experience helping over 2,000 people in 13 countries and 60 organizations build and implement Performance Management scorecard systems, and on being part of the strategic planning and Performance Measurement landscape for 30 years.

 

Implementing the Balanced Scorecard

By "implementing" we mean turning the scorecard into a true management system and deploying, managing, and sustaining the newly created system. We use three steps to implement the scorecard: Automation, Cascading, and Evaluation. The output from each step links to the input of the next step, as shown in Figure 1.1. The circle of chevrons helps to convey the sense that scorecard building and implementation are a continuous journey, not a project.

MgmtSysSC.jpg

Figure 1.1. Building and Implementing a Balanced  Scorecard

 

Following the completion of the building steps outlined above (Steps One through Six), the critical few performance measures have been developed. For a Tier 1 (enterprise-wide) scorecard, 20 to 30 strategic Tier 1 performance measures and targets (expected results) are typical. It is probably worth repeating a lesson shared in our previous article: avoid the temptation to treat performance measures as an end, rather than a means. We see many attempts at developing scorecards (and other performance frameworks, as well) where the effort is best characterized as a "rush to judgment" to get to measures. Precious strategic critical thinking is lost if this path is pursued.

 

Once we have a good set of strategic performance measures, a Performance Measurement information system is needed to collect and report performance data and transform the data into performance information. The distinction between data and information is important, as raw performance data is of little use to most people. Think of information as data with value added. The value comes in the form of context, visualization (reporting formats), trends, and benchmark comparisons to others' results.

 

Step Seven involves automating the Balanced Scorecard system, and consists of analyzing software options and user requirements to make the most cost-effective software choice for today and to meet enterprise performance information requirements in the future. Software options fall into the general categories shown in Figure 1.2, which shows relative comparisons of software solutions based on meeting overall enterprise requirements for performance information, and the relative cost and time to implement a software solution. Software options range from spreadsheets and databases, designed to meet very simple enterprise reporting requirements, to full data warehouses, designed to link disparate information (performance and other) together in an integrated management system.

DataWarehouse.jpg

Figure 1.2. Performance Information Software Solution  Space

 

We treat Automation as the seventh step in the nine-step framework, to make sure that the proper emphasis is placed on strategic thinking and strategy development before "software seduction" sets in. Building a scorecard system is a lot like building a house, where the pieces need to come together in the right shape, size and time, and need to be assembled by the right craftsperson to make the house structurally and functionally sound. Purchasing software too early limits creative strategic thinking, and purchasing software late makes it dif.cult to sustain momentum for the new system, as performance information reporting and utilization is clearly an early bene.t to be captured from the process of building the scorecard system. Having said this, it is also clear that software can help the critical thinking process (and the project management process at the end of the building steps -- Step Six: Strategic Initiatives) by capturing the results of strategy development, objective commentary, and strategy mapping as the process unfolds. Our recommendation is to analyze your software options early in the building process, decide if a software selection early on will add value to the process of building the scorecard, and then timing the software purchase to maximize the value to the Balanced Scorecard team and the managers and other employees who will use the performance information to better inform decision making.

 

The costs of deploying software information systems (including the price of the software, plus training and support) range from several thousand dollars to several hundred thousand dollars. A software choice should be based on value to the organization. In addition to the price of the software, key selection criteria include: visualization of performance results; ease of setup; training and maintenance; robustness of the underlying database engine; compatibility with existing enterprise IT architecture; vendor product and technical support; product maturity and vendor experience; and ease of use.

 

Step Eight involves cascading the corporate scorecard throughout the organization to business and support units, and ultimately to teams and individuals. Cascading means translating the corporate scorecard into department and division scorecards that are aligned with corporate strategy. In other words, aligning and translating corporate strategy throughout the organization. We have found that the most effective way of cascading is to start with the objectives and measures from the enterprise-wide (Tier 1) strategy map, and develop supporting objectives (and measures) for business and support units (Tier 2), and again for teams and business and support units (Tier 2), and again for teams and individuals (Tier 3). In a typical organization, separate scorecards are developed for each major department and support of.ce, and these scorecards are linked to the corporate scorecard through objectives. Since objectives are the building blocks of strategies, the alignment of objectives aligns strategy. Performance measures align as well, some as roll-ups to higher-tier measures, and sometimes to composite measures where the weighted average of a number of measures is used as a composite index.

 

Cascading to the objectives, tasks, and activities of Tier 3, aligns corporate and department strategy to teams and individuals. In some (typically large) organizations, an additional cascading level may be used, such as for customer-facing services.

 

Strategies developed during the corporate scorecard building process are the links that make the mission and vision of the corporate organization operational to operating business and support units, such as IT and human resources. Starting with a corporate scorecard and cascading objectives down to business and support units and then to teams and individuals assures that the work performed in all organization units is relevant and linked to organization mission and strategy. Each business and support unit can "connect the dots" and trace the work that they do back up to the overall "big picture" direction of the organization.

 

Figure 1.3 shows the concept of cascading, assuming one starts with a corporate scorecard at Tier 1, and then develops Tier 2 scorecards. One could continue the example to Tier 3 scorecards by developing Tier 3 objectives and connecting them to Tier 2 objectives. As a practical matter, objectives are more operational and less strategic as one goes farther down to lower tiers. For example, teams and individuals link what they do at Tier 3 (typically tasks and activities) to what the organization must do to be successful (objectives and strategies) at Tier 2.

 

StrategicThemes.gif

Figure 1.3. Cascading Scorecards Based on Linked Strategic  Objectives

 

Some organizations start not with a Tier 1 scorecard, but with a Tier 2 scorecard. This could occur when a support unit scorecard is built .rst (e.g., IT). In this scenario, other scorecards are developed horizontally (e.g., to Finance or HR) and/or vertically (e.g., to Tier 1 corporate, or to Tier 3 teams and individuals). In these situations, it is important to keep strategic intent of the organization in mind, to avoid sub-optimizing a department's activities at the expense of enterprise goals.

 

Step Nine involves evaluating the success of chosen business strategies. The key question is: Were the expected results achieved? Remember that strategies developed in Step Two of our Nine Steps to Success™ framework were hypotheses of how an organization believes it creates value for customers and stakeholders. Adjustments to strategy (and mission and vision, if necessary) are likely as performance information is analyzed and market competitive forces are considered. Creating an analysis feedback loop to test strategy assumptions is an important step and one that many organizations overlook in their strategic planning implementation. The evaluation step includes the following components:

      • Ensuring that organization learning and knowledge building are incorporated  into planning;
      • Making adjustments to existing service programs;
      • Adding new programs if they are more cost-effective;
      • Eliminating programs that are not delivering cost-effective services or  meeting customer needs;
      • Linking planning to budgeting.

 

The Nine Steps to Success™ framework is a disciplined way to develop the pieces needed to build a strategic management system. Now it is time to put the pieces together into a strategic management system and start using the system to produce the results you want.

 

Building the Management System and Managing with the Balanced Scorecard

Building and implementing a scorecard system is one thing; turning the scorecard into a useful and used management system is something else entirely.

 

The key to transforming a scorecard into a management system is to start at the right level of granularity and "connect the dots" among the components of strategy (mission, vision, values, pains, enablers, strategic results and themes, and strategic objectives) and the components of operations (projects, processes, activities, and tasks), and the budget formulation and cost reporting processes. Performance measures tie the parts together, and give us a way to measure how successful we are at achieving our goals. Figure 1.4 shows the logic for connecting strategy to operations. Strategy is shown as a vertical sequence of steps (equivalent to starting with expectations at a high altitude, such as expected organization-wide strategic results, and deriving aligned lower altitude initiatives, projects, and tasks). Operations is shown as a horizontal sequence of steps, with the activity or project outcomes linked to the outputs, process steps, and inputs required to deliver the activity or project results. The Balanced Scorecard gives us the ability to develop the aligned components of this strategic management system in an ordered, disciplined manner.

 

MgmtSysSC2.jpg

Figure 1.4. Linking Organization Strategy &  Operations

 

We are often asked "How do you effectively manage an organization once you have a Balanced Scorecard in place?" In other words, "What are the key things you should do that differ from your traditional way of managing?" We attempt to answer these questions below and give guidance on how to best take advantage of the strategic levers the Balanced Scorecard provides. This is a compilation of the experiences and wisdom of the associates of the Balanced Scorecard Institute, based on our collective knowledge from a wide variety of organizations. The following are management practices that we have seen lead to success in imbedding the scorecard philosophy into an organization and enhancing the results achieved from the scorecard system. These practices represent the key elements of using the Balanced Scorecard as a "Strategic Management System."

 

It's time for a change -- avoid "Business As Usual." Until you have been managing with a scorecard for some time, people will naturally be inclined to manage in the same ways they always have, without regard to the scorecard and the direction it provides. Now that your scorecard is built, be careful not to go back to business as usual. Work hard to cut off attempts to revert to the old ways. The scorecard provides a natural framework for reorganizing (actually revitalizing) discussion around your strategic themes and your scorecard perspectives (and maybe reorganizing the organization as well!). Organize all of your executive, management, and department meetings around the elements of strategy. In this way, attention will be focused on the strategically-important issues and the organization will naturally be led in those directions. People will likely try to structure meeting agendas in the same functional/departmental format that has been used in organizations for decades. Use a different approach after you have built your scorecard system, such as holding meetings around your strategies, your initiatives, or your perspectives (or, ideally, all of them!). Also, ensure that scorecard meetings are strategic, not operational. Focus meeting energy on strategic visioning ("How safe will our streets be in ten years?" not "How many potholes did we fill last month?") Avoid executive discussion on detailed, operational strategies, objectives, and measures that are not on the corporate scorecard. Push operational discussions down to the departmental (business or support unit) level, or to teams and individuals.

 

Assign permanent Balanced Scorecard roles. To continue emphasis on the scorecard and strategic management, it is important to have a number of people assigned to scorecard roles on a permanent basis. You should assign specific scorecard roles and responsibilities to key people throughout the organization. This imbeds strategic thinking in the organization and builds commitment to ongoing strategic management. These roles include the scorecard champion, corporate and departmental performance measure owners, and the assignment of responsibility for individual themes or perspectives to specific owners. Often, client organizations will assign departmental scorecard champions who are responsible for scorecard management and communication in their individual areas. In addition, these champions can be members of a scorecard advisory group that meets regularly to discuss scorecard issues and suggestions.

 

One client formed permanent teams around each of their strategic themes to provide guidance and continual direction that will carry the scorecard efforts forward into the future. Each of these teams is headed by a key manager, but made up of a combination of managers and cross-functional staff members from across the organization. This approach ensures that the strategic themes receive attention throughout the year, and year by year into the future.

 

Use the scorecard process to develop the strategic plan. Strategic planning is more valuable if you use the development of a Balanced Scorecard as your framework. Instead of using a consultant or the internal strategic planning department to write a plan, use key employees in the organization to build the plan and the management system. We find that the process of using cross functional teams to build the strategic plan and management system, with expert facilitation and guidance, is critical to longterm success of the new management system. Those of you who have experience with strategic planning the old way (i.e., giving the assignment to a few internal planners or hiring a consultant to do it for you), know how few times the resulting strategic plan becomes the ‘guiding light' of the organization's resourcing, and strategic and operations planning. In the old way, most strategic plans are little more than thinly veiled justi.cations for favorite programs and projects the organization is already funding. The Balanced Scorecard puts more strategic thinking into the strategic plan development process. When we .nish a scorecard system, the resulting strategic plan is under ten pages, and all the important strategic elements of the organization are laid out clearly and concisely, and aligned. The dots do, indeed, connect.

 

Your planning process will become an annual evaluation and revision of the corporate scorecard. Be sure to fully integrate the Balanced Scorecard into your strategic planning process. Each year you should assess your progress against the strategic goals and determine whether or not your strategic hypotheses (the causeand-effect linkages of your strategy map) are valid. You should also assess the strategic impact of external events and adjust the scorecard (strategies, objectives, measures, and initiatives) to re.ect your experience and the current environment. This is Step Nine of the Nine Steps to Success™ framework,  and is essential to long-term strategic management success.

 

Use the Balanced Scorecard strategic plan to drive budgeting and cost  control. In Balanced Scorecard organizations, the scorecard should play an active role in the organization's budgeting process. It is usually dif.cult to obtain funding for new initiatives, and in many organizations, the budgeting process is driven by funding "favorites," or day-to-day operations. The Balanced Scorecard improves the budget process because strategic initiatives have been identi.ed through the scorecard building process, and it is practical and even essential to set aside a portion of the budget for these strategic projects. Using the Balanced Scorecard to drive the budget results in a "strategic," or "performance budget." Day-to-day activities can be separately funded, but linked, in an "operating budget." A Performance Budget is a budget formulated by activities and programs, as opposed to organizational units. Results-oriented business planning is combined with planned measurable outcomes to produce a budget where policy decisions can be informed by program performance and cost information. Once those policy decisions are made, the same performance measures guide the day-to-day operational management of programs to ensure that budgeted services are delivered with the intended results. These measures (leading and lagging) provide information on how results are produced, what is working, how well, and where improvements are needed to achieve the strategic goals.

 

Some organizations have eliminated the formal annual budget "dance," and instead use a rolling quarterly budget that allows real-time adjustments based on a quarterly strategic assessment. In addition, many organizations use the scorecard to lead them into Activity Based Costing, which can further ensure that the strategic goals of the organization are accomplished cost-effectively.

 

Figure 1.5 shows how the elements of strategy, operations, budgeting, and employee accountability can be combined into an integrated strategy-driven management system. Employee Performance can then be aligned with enterprise and department performance to produce an integrated management system where what is accomplished is more important than what is produced or how many hours are spent in the production of services.

 

BalancedSC.jpg

Figure 1.5. Balanced Scorecard Strategic Management  System

 

Continue to work on the strategic enablers. There are a number of the elements of scorecard building and implementing that need to be continued in order to sustain progress made and strategic focus. These enablers include: communications, change management practices, incentives, reporting results,  and prioritizing initiatives.

 

Early in the process of building your scorecard system, the importance of  communicating organization strategy and desired results will become obvious. So will the importance of communicating why you are building a new management system. In the absence of information on "why" from the leaders of the organization, employees will make up their own answer as to why. Ensure that you maintain and implement a communications strategy and plan even after the scorecard has been implemented. Remember that communications is an outcome, not an activity, and two-way communication is the key to a good outcome. The Balanced Scorecard strategic management system is a change initiative, designed to change behaviors, and this can only be accomplished by interactive, two-way communications at all levels of the organization. Regularly communicating results is important, listening to what employees think and feel is more important. Hearts and minds will not be won over with a news article or a web page, so communicate often and well. Also, be sure to highlight successes that resulted from the scorecard process. Highlighting early success is crucial to maintaining momentum of the new system and building sustainability. Periodically review your communications plan, and make changes as appropriate to reflect organizational or strategic changes.

 

You should also continue to follow good change management practices during and after development of the scorecard. These practices are incorporated in the Nine Steps for Success™ framework, and should be continued as you go forward to ensure that progress is sustained. Some of the key areas to consider are: continued communication of the vision and rationale behind the scorecard, involvement of people from across the organization in planning and implementing the changes, communication of results to everyone in the organization, ongoing scorecard training especially for new people, employing process teams to improve throughput, and use of rewards and recognition to emphasize and reinforce desired behaviors.

 

Be sure to continue to link incentive reward systems to performance (and scorecard measures). Some organizations decide for a variety of reasons to defer this step and some never do affect this linkage. We strongly recommend that reward systems reflect the scorecard objectives and do so as quickly as is reasonably possible. Of course, it is prudent to take time to ensure that the measures are properly de.ned, captured, validated, and calibrated before using them to provide signi.cant portions of people's compensation, but it is the most powerful way of getting people's attention and focusing on the things that matter. Once you have begun rewarding people for performance, continue to do so and make certain this linkage is incorporated into each year's rewardand-recognition program. Rewards and other incentives can take many forms, both monetary and non-monetary. Many studies have shown the importance of non-monetary incentives to achieving long-term positive impacts on behavior.

 

Continue to report performance results often and draw comparisons to expected results. Look for ways to visualize performance that employees will .nd useful. There are many ways to show data and information, and the usefulness of performance information will be tied to how it is visualized and presented. At different levels of an organization, different visualization techniques should be used to drive the behaviors being sought. People need to see regular feedback, and the frequent communication of results enables quick corrective actions to be taken when problems begin to develop. If people can easily and regularly see whether or not they are on track to reach corporate goals, and if their rewards are dependent on achieving those goals, they will naturally apply the effort required to stay on track. Use the scorecard system to improve organizational performance, not punish lack of individual performance, and to track progress across reporting periods.

 

Regularly use the Balanced Scorecard to help select and prioritize  initiatives. The scorecard process enables management to direct resources to those initiatives that have the greatest strategic value. We almost always .nd that an organization's overcommitted resources are assigned to a number of initiatives that do not have large strategic value. By consciously focusing resources on truly strategic initiatives and canceling projects, transferring resources, or deferring those initiatives that aren't strategic, organizations are much better able to implement changes needed to accomplish strategic goals. This prioritization should be part of the regular management practices and should be reviewed periodically to ensure that resources are being deployed only on the truly strategic initiatives.

 

Figure 1.6 shows the components of a sustained strategic management system. By continuing the essential elements of the Balanced Scorecard process, you will be able to sustain and continue to achieve progress in strategic management.

 

BalancedSC9Steps.jpg

Figure 1.6. Sustained Strategic Management System

 

When you have completed the steps and taken the actions described in these two articles, you will be on your way to having developed a high-performance organization. Figure 1.7 shows the construction of a high-performance organization using the example of a house we mentioned earlier. The roof and attic represent the strategic elements of your organization, the load-bearing walls are your strategic focus areas (strategic themes), and the .oors are performance dimensions (perspectives) that allow you to translate your organization's vision and strategy into operational terms (through strategic objectives). Your performance "house" needs to be built on a strong foundation of engaged leadership and two-way communications.

 

HighPerfOrg.gif

Figure 1.7. Building a High-Performance  Organization

 

We hope that these ideas will help you in your efforts to achieve maximum long-term bene.t from your investment in a Balanced Scorecard. If you would like a checklist of additional tips and tricks, send us an email to receive a free copy. If you have questions or wish to discuss any of these recommendations, please contact either Howard Rohm (at hhr@balancedscorecard.org) or Larry  Halbach (at lah@balancedscorecard.org) at the  Balanced Scorecard Institute.*

 

The Balanced Scorecard Institute provides training and consulting services to private, public, and not-for-profit organizations worldwide. Their expertise is in Balanced Scorecard Systems, Strategic Planning, Performance Management and Measurement, and Performance Measurement Information Systems.

 

*Several Balanced Scorecard Institute associates contributed to this article, including: Dr. Gerald Turner, Pam Weppler, Kitty McCoy, Kevin Zemetis, Dr. Kathy Fiedler, Dr. Gardner Shaw, Jeff Parks, and Paul Arveson. Marv Weidner of Weidner Consulting contributed ideas on performance-based budgeting.

 

--

 

Howard Rohm is Vice-President of the Balanced Scorecard Institute, president of Howard Rohm Consultants, LLC and an international trainer, consultant, and facilitator. He has over 25 years of government and private industry strategic planning, Balanced Scorecard, Performance Measurement, and information technology experience. To learn more about the Balanced Scorecard Institute, visit their Web site at www.balancedscorecard.org.

 

Larry Halbach is Deputy Director of the Balanced Scorecard Institute and an international consultant and facilitator. He has over 20 years of experience with IBM, followed by his career as an insurance executive and consultant in strategic planning, Balanced Scorecard development and implementation, and information technology management.

| More
3,613 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_sourcesecuritystrategy

by Craig S. Mullins


Imagine facing the prospect of a large-scale downsizing. Not the most enjoyable thing to think about, but not unrealistic either in today's business climate where "doing more with less" and optimizing ROI are common practices. So, you grab the company org chart and the latest employee reviews, and try to come up with a plan that minimizes impact on the business. You review the data and earmark for dismissal the poor performers and those employees who do not seem to be key parts of the most profitable business lines.

 

But is this approach optimal? Perhaps not. What you see on the company's organizational chart does not accurately depict how things actually work in your company. There is an underlying social infrastructure that exists in most organizations. It is informal, but functionally powerful. And rarely is it evident just how critical this informal network is until a piece of it is removed.

 

Consider our downsizing scenario: What would be the impact of laying off a critical component of the informal network? Even if your corporate policy manuals outline standard operating procedures, can you be sure that they are being followed? In many corporations, it's not uncommon that, over time, the informal employee network takes over tasks, gets the work done appropriately and on time. But most executives do not understand how this informal network operates in their company. So, they do not typically understand how information is flowing, who picks up their requests, and who doesn't. Clearly, a social network, operating "under the radar" of the official organization chart, can impact business processes.

 

"Technically, a social network is the set of social relations that connect people and or groups, such as friendship or advice giving," says Dr. Kathleen Carley, of the Institute for Software Research Department in the School of Computer Science at Carnegie Mellon University in Pittsburgh, PA. Dr. Carley is the Director of CASOS, the Center for  Computational Analysis of Social and Organizational Systems.

 

CASOS is a university-wide interdisciplinary center that brings together network analysis, computer science, and organization science. By combining computational and social network techniques, CASOS works to develop a better understanding of the fundamental principles of organizing, coordinating, managing and destabilizing systems of intelligent adaptive agents engaged in real tasks at the team, organizational, or social level. In other words, CASOS works to better understand the way things actually work and how work gets done in the real world.

 

Social Networks and Social Network Analysis

Basically, a social network is a system composed of multiple elements related in some way. Each element in the network may or may not have a relationship with the other elements.

 

The word "social" is used to define "social networks" because the most common type of element in the network is a person. However, social networks need not be composed entirely of relationships between people, but can be made up of anything that can have a relationship with something else. For example, social networks have been defined for trade patterns in cities and proteins in the human body.

 

The term "social network analysis" is used to refer to the set of graph-theory based algorithms applied to any network, preferably networks that include humans or groups as at least some of the nodes. Traditionally, managers look at the attributes of the people (individual elements of the network) they manage. Social network analysis looks at the relations between the elements. This is a significant change.

 

Consider, for example, conducting a survey of your organization in which everyone is asked: "Who are the people you are most likely to discuss technical problems with?" and "Who are the people you are most likely to go out with for lunch or after work for a drink?." The results of these two questions will not likely be the same. But both help create useful social network maps.

 

Social network analysis is the process of collecting data, organizing it in useful ways, and examining the network structure to understand its influence on real-world events. It is possible to compare the structure of a healthy organization to an unhealthy one, or of a successful startup to an unsuccessful one.

 

A manager with access to the social network mappings within the organization becomes empowered to view the operations of the company with a clearer perspective and understanding of how things are actually happening. Social network analysis can enable management to identify emergent groups, potential areas of information blockage, and other key actors within the organization who can effect change.

 

Consider, for example, the employees who are well-respected as technical gurus, or founts of knowledge on a particular aspect of the company's business. Every company has a few such employees that everyone else relies upon. It would be to management's benefit, first of all, to know who these gurus are, and secondly, to be able to leverage them and their network to successfully launch new initiatives and practices. A new initiative can have a much better chance of succeeding when it is being championed by the leaders -- that is, the gurus -- who already have the trust of the organization.

 

Dr. Carley notes that CASOS has developed a tool, named ORA, to help provide management with information on social networks. When fed the appropriate data, the tool can deliver a management report with the pertinent social network information to the business executive.

 

An interesting application of social network analysis being conducted by CASOS is the investigative research of e-mail from Enron Corporation. The e-mail being reviewed is voluminous in that it covers a 3-and-a-half-year period. The data contains a large amount of information on interaction, communication, knowledge, cognition, resources, tasks, and relationships on an individual and group level in Enron. According to Dr. Carley, the analysis shows dramatic shifts in the social networks in response to corporate events such as change in CEO, president, and so on. Enron's social network was used to pass information, reduce concerns, and promote the adoption of ideas.

 

Crossing Organizational Boundaries

It is also possible for companies to look at the inter-organizational networks among companies or the social network of an individual, such as a CEO, that extends across multiple organizations. In such cases, the CEO can use his social network to vet ideas and do information gathering to reduce risk before making major decisions.

 

A better understanding of inter-organizational networks can be critical for up-and-coming companies as it helps them better position themselves relative to their competitors. Dr. Carley notes that many companies actively build the network of relations with those companies whom their competitors are also linked to. Highly influential companies are often key nodes in the inter-organizational network. For example, Microsoft would have a higher level of connections to other companies than its smaller competitors. By growing these links, large influential companies can become, effectively, network monopolists and serve to control the flow of information in these inter-organizational networks.

 

Inter-organizational networking is useful at the personal level, too. The concept of social networks has moved online, such as in the example provided by LinkedIn. LinkedIn is a popular online service that facilitates business-oriented connections. Basically, LinkedIn makes it possible to track your own, personal social network. By keeping your contact information up-to-date, and inviting your trusted associates to join and keep their information current, LinkedIn enables you to easily manage your social network - and to take advantage of others'. Imagine the power of being able to quickly and easily interact with all of your historical business contacts and to ask them to put you in contact with the influential contacts in their social networks.

 

Taking it Further with Meta-networks

In today's complex business environment, to address practical problems, we need to move beyond social networks to consider the meta-network context. That is, we need to consider the relations of people to people, knowledge, tasks, and so on.

 

A business executive that can move beyond just information on the connections among personnel to consider knowledge and tasks as well opens up avenues for additional understanding. This additional information can help the executive identify hidden competencies and emergent leaders, as well as helping to put together new teams. Moreover, this information provides new guidance and help for the human resources department to do better personnel management and identify points where training could be beneficial. Essentially, it enables more adaptive behaviors to be implemented.

 

What About Personal Privacy?

Of course, the practice of social network analysis can open up issues of personal privacy and companies will have to balance the gain of such study against its potential pitfalls.

 

One such pitfall is perception. The informal nature of a social network can seem to become more formal if it is used by management to further its goals. If staff becomes aware that management is analyzing their "social" network to further business goals it may be perceived as an invasion of privacy.

 

And what about the gurus who, once identified, may become inundated with additional work? Care must be taken to balance the opportunities for leveraging a social network against a potential backlash of disgruntled employees believing they may have been taken advantage of.

 

A service such as LinkedIn is voluntary. Subscribers choose to use the service and each time an invitation is sent the receiver can choose to accept or decline the invitation. As such, this opt-in approach can help to alleviate concerns of intrusions on personal privacy.

 

Of course, sometimes privacy is less of an issue. When the data is publicly available privacy is not usually a big concern, although some may still have issues with the mining of large volumes of data. When privacy is an issue, names and attributes can be anonymized. As Dr. Carley points out, "sometimes, it is beneficial to look at relationships in terms of roles - doctor to nurse to pharmacist, rather then in terms of people's names. This role based approach also helps to alleviate potential privacy concerns."

 

At times, the results of social network analysis can be useful in terms of summary or aggregated statistics. For example, it may be helpful to know how strongly a group is connected or how complex of a task environment they face rather than the details on specific individuals. In general, such summary data is useful for comparing different divisions or branches in the same company.

 

For the field as a whole, as for many other scientific fields, data-privacy is a double-edged sword. On the one hand, discovering new ways of de-identifying data, yet preserving the statistical properties, is leading to important scientific advances. On the other hand, concerns about privacy can get so carried away that important data is not gathered and analyzed and policy makers are making important decisions in the dark or with the wrong data. "Overall, there are many key questions that need to be answered in this way," points out Dr. Carley, "and we need to develop new tools for de-identifying and re-identifying nodes and relations in networks so as to ensure appropriate and meaningful privacy levels that do not overly compromise the use of network science to inform policy and provide goods and services to the public."

 

The Bottom Line

It can be just as, if not more important to understand the informal social fabric of your company than the official organization. The study of social and organizational systems can open up important insight for businesses in terms of how things really get done -- and the implications this has on running the business. This field can offer busy executives additional insight into their business and how it functions.

 

--

 

Craig Mullins is an independent consultant and president of Mullins Consulting, Inc. Craig has extensive experience in the field of database management having worked as an application developer, a DBA, and an instructor with multiple database management systems including DB2, Sybase, and SQL Server. Craig is also the author of the DB2 Developer's Guide, the  industry-leading book on DB2 for z/OS, and Database Administration:  Practices and Procedures, the industry's only book on heterogeneous DBA  procedures. You can contact Craig via his web site at http://www.craigsmullins.com.

| More
875 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Elizabeth M. Ferrarini

 

How can one know whether a particular technology will change the way we live or work? What signs do you look for to tell if an emerging company is going to survive? These are just some of the questions that Enterpriseleadership.org put to Clayton M. Christensen, a technology management professor at the Harvard Business School.

 

In his groundbreaking bestseller, The Innovator's Dilemma, Christensen exposed the crushing paradox behind the failures of many key industry leaders -- (mis)judgments like pleasing the most profitable customers and ignoring disruptive technologies, such as Linux and network-attached storage devices. His book, The Innovator's Solution, makes the case that  innovation and profitability are more predictable than managers have come to  believe. Seeing What's Next, his latest book, provides a model for those of us without any proprietary information on how to forecast how innovations will affect companies and industries, and how to make the right decisions (while there's still time).

 

EL: How can a CEO monitor the pulse of his company's marketplace to  determine whether the company will succeed or fail?

 

CC: By looking at data in the present through a lens of good theories, a CEO can forecast whether the company is on track to become more prosperous or to fail. Data about the distant past always exists. If the CEO is using data to understand whether the company will be more successful or not, then the CEO will always be driving into the future, while glancing in the rear view mirror.

 

For example, if the innovations will help the company sell better products to existing customers, then these sustaining innovations will not necessarily result in future growth, even if it appears that you are innovating and that your profits are improving. If you look at it through the lens of my research, it would cause you to be worried. On the other hand, if your innovations are disruptive -- ones that create new growth markets -- even through they improve current financial results, you could say you are laying the foundation for an exciting future.

 

EL: What are the indicators that a business or an industry is ready for disruption? You talked about companies that produce products that no one buys and/or product improvements that no one will pay for. What are some of the other signs to look for?

 

CC: There are two types of disruptions: low-end and new  market. A low-end disruption might occur only if two conditions are met:

      • customers at the low-end of a market don't value, and won't pay for, further  product improvements.
      • someone has figured out a lower-cost business model that can be attractively profitable at the discount prices required to win the business of those customers at the low end.

 

The first condition identifies an entirely new market sector. If there is a specific population that doesn't have the skills to satisfactorily accomplish specific tasks, nor the money to buy the needed products, then they'll have to rely on the expensive and inconvenient help of experts. If that population exists, the second scenario occurs when someone else develops a technology that provides that specific population with an affordable and easy alternative for accomplishing their tasks.

 

EL: Given what you just said, where are the innovative opportunities for a major company, such as General Motors? How are they going to stay ahead of their competitors?

 

CC: If GM is trying to be innovative by making either better or larger sport utility vehicles, then I would really be worried. Seeing GM make innovations to its OnStar systems translates to a really exciting new growth business -- one that's disruptive. If GM tries to sell Buicks in Japan or China, then I would remark that it might yield profits -- but not create a lot of exciting new growth. On the other hand, if GM were to sell cars in China at a $4,000 price point, I would say the opposite.

 

By looking at innovations through the lens of good theory, you can tell whether today's innovations will produce tomorrow's results.

 

EL: How can a CIO encourage the company's use of innovative or  disruptive technologies?

 

CC: It's not the realm of a CIO to do this. The most exciting markets are the ones whose size can't be quantified. If the CIO finds himself or herself generating reports that innovating managers rely upon to assess the potential of the innovation, the CIO will be misleading people almost every time. To decide whether an innovation has potential, executives need to watch what people are doing, and then decide if the product they're proposing will help people do a better job of what they're already trying to do.

 

EL: In what industries is a lot of disruptive innovation going  on?

 

CC: Salesforce.com is a disruptive innovator to a sustaining technology company like Oracle. Linux has an operating system in Web-based computing that has become the OS of choice for handheld devices. It's really an exciting, disruptive innovation. Regional airlines are an exciting disruptive innovation that are just killing the major airlines, and SANdisk, which makes flash memory, is a disruptive innovation that is killing the disk drive industry. Wireless 802.11 and WiMax are pretty exciting innovations in telecom.

 

EL: Right now, another disruptive technology, the Blackberry wireless network, is embroiled in a patent lawsuit. Can a force like this hinder a disruption?

 

CC: It happens on occasion to sustaining innovations. Intellectual property protection impacts innovation in both positive and negative ways. A lot of times, patent issue thickets arise that make it difficult for anyone on the sustaining tier to create a meaningful innovation. For disruptive ones, the intellectual property issues almost never matter.

 

EL: About six years, StorageNetworks built an IT infrastructure from commercially available hardware, raised more than $200 million, and offered organizations a third-party source for immediate storage, likened to that of a public service utility. EMC validated the concept. But StorageNetworks couldn't make a go of that business and offered backup stores and eventually started licensing its software. Then, StorageNetworks went Chapter 11 and couldn't even find a buyer. What went wrong here?

 

CC: I haven't really studied this company in depth. With the caveat that I haven't crawled inside, I'll tell you some of the things I worry about as I watch emerging companies. First, when you start a business, you may think you know, but you don't really know if you have the right strategy. Likewise, you don't really know who are the right customers, and what job they are trying to get done. You start out with a deliberate strategy, and you think, this is the right thing, when in fact, you almost have to know for sure that, initially, you're going to be wrong. Therefore, you have to get in the market quick with a little of that conviction, then figure out what will work later.

 

One of my books cities a colleague's study of 400 Harvard Business School graduates who started new companies. Half have been successful; half haven't been. The graduates who founded about 90 percent of the companies that succeeded said they didn't entirely trust the strategy they used when they raised money. They ended up selecting another strategy that enabled them to succeed. The difference between the successes and the failures wasn't that the successful ones got it right the first time. They just had money left over after they got it wrong.

They learned from their mistakes in time to shift gears.

 

EL: What do you mean by "good investment money" and "bad investment  money"?

 

CC: Bad money flows into something with the willingness to accept big losses. You've got the expectation that the more you spend, the more you'll earn later. You spend the money expecting your strategy is right.

 

There probably was a good business opportunity somewhere for StorageNetworks. However, it's accurate to say that StorageNetworks didn't have the right initial strategy, and spent a lot of time pursuing it. Or you can say that StorageNetworks employed a deliberate strategy aggressively from the beginning, and spent to get big fast.

 

--

 

Elizabeth M.  Ferrarini is an IT consultant from Boston, Massachusetts.

| More
769 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

What is Best Practice?

Posted by Tom Parish Dec 5, 2007

What do Tiger Wood's swing and ITIL have in common? The question is no joke! Both Tiger Wood's swing and ITIL are best practices.

 

Here's the analogy:

 

When a beginner golfer picks up the clubs for the first time, the instructor doesn't say "keep hitting the ball till you figure out your swing?" Instead, they recommend one of two common grips, basic stance, and straight left arm. These are best practices. In other words, they provide a way to do something based on what is commonly viewed as the best way to do it. A best practice is simply a way of doing something, based on how others have successfully done it before, that helps you quickly achieve a level of competence.

 

Is the best practice the end goal? No. Best practice provides a baseline, or starting point. It's a way to quickly achieve results, that you can then build on and adapt to your unique needs. In golf, many players copy Tiger Wood's swing to improve their game. But there is only one Tiger Woods! If you are shorter, less flexible, weaker, or less practiced than Tiger (as most of us are), then you need to adapt Tiger's swing to your unique requirements.

 

 

 

GolfHandFeetDepiction.gif

 

The same goes with ITIL. ITIL is a set of best-practice guidelines that are based on how others have successfully managed IT. These guidelines help you quickly achieve an expected level of performance. Is ITIL the end goal? No. Based on your unique and changing requirements, you should identify key areas of requiring exceptional - performance, and adapt ITIL to meet your needs.

 

So you're not a beginner golfer? Your organization already has IT service and support process in place? Best practices can still help. Use best practices to g

o back and improve areas that are currently effective, but t still need to be enhanced. Look at how others have done it, and modify as needed to help achieve the goals of your unique circumstance.

 

Your take away - adapt ITIL best practices to improve IT service efficiency. Look for solutions that implement ITIL out-of-box, but are easily adapted to your unique requirements. Leverage the best, but don't get stuck with a golf swing or an IT process that doesn't quite fit your needs!


| More
730 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

ITIL and Six Sigma

Posted by Tom Parish Dec 5, 2007

by Kurt Milne

 

In this first column, I am going to try my hand as a matchmaker. No, I am not going into the romance business. What I am going to do is propose bringing together two seemingly independent approaches to improve the quality of IT service delivery — the IT Infrastructure Library (ITIL® and Six Sigma. These two approaches, each of which has attractive features, can certainly function without the other. So why bring them together? Let me explain.

 

ITIL defines a framework for IT Service Management. It consists of a set of guidelines, based on industry best practices, that specify what an IT organization should do. ITIL does not, however, define how to do it. For example, ITIL specifies that IT should allocate a priority for each incident that comes into the service desk. But, it does not specify how to allocate those priorities.

 

With ITIL, it's up to the IT staff to flesh out the details of process flow, and create detailed work instructions, all in a way that makes sense for their organization.

Six Sigma, on the other hand, defines a specific process, based on statistical measurement, that drives quality improvement and reduces operational costs. It helps in developing detailed work instructions, and it defines a methodology for continually mapping, measuring, and improving the quality process. Six Sigma tells you how, but doesn't tell you what. This approach does not specify any best practices specifically for IT Service Management.

 

In summary then, ITIL defines the "what" of service management, and Six Sigma defines the "how" of quality improvement. Together, they are a perfect fit for improving the quality of IT service delivery and support.

 

As in any match, however, there is a challenge. That challenge comes in reconciling the egos and expectations of the parties involved. In the case of ITIL and Six Sigma, this involves reconciling two separate camps of purists, each of which is convinced that their approach is best. To make things harder, both camps have impressive credentials to support their claims. ITIL has master's level certification. Six Sigma has its "black belts." So, your challenge is to bring these two approaches (and their advocates) together to implement the optimum combination for your organization.

 

The good news is that as a Remedy customer, you already have a great solution that helps bring them together. Remedy IT Service Management applications for the Enterprise help implement ITIL best practices straight out of the box. Remedy supports the ITIL best practices described in incident and problem management, change management, configuration management, service level management, and availability management. At the same time, the applications provide a great source of data for Six Sigma quality improvements. Outside the manufacturing area where Six Sigma was invented, there is no better place than the service desk to find operational data that drives customer relevant quality improvement.

 

By using Remedy applications to help implement the processes that bring ITIL and Six Sigma together, you have a great opportunity to use them both to improve the quality of IT services that are critical to your business.

 

--

 

Kurt Milne is Senior Manager of Strategic Marketing at  Remedy, a BMC Software company.

 

This article was originally published in the inaugural edition of Remedy Online Newsletter, a quarterly publication for Remedy customers worldwide. The article, which ran in Fall 2003, is the first of a recurring series on "Emerging Trends" in Service Management.

| More
733 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

CobiT and IT Governance

Posted by Tom Parish Dec 5, 2007

by Rod Amis

 

The issue of IT governance has become a concern for many CIOs/CTOs these days as emphasis has switched from the technologies themselves to how they bring greater value to the overall business. As one professional commented, you don't show value by talking about how many transactions you processed per hour; you talk about how much money you made the business last night. Business leaders in IT are less concerned about showing what's "under the hood" than they are about demonstrating the benefit of getting to the destination. One tool that is being explored to bring value is CobiT.

 

CobiT (Control Objectives for Information and related Technology), the international open standard of good practice for IT governance, security, and control, is now available for download at the Information Systems Audit and Control  Association (ISACA) Web site. This interactive and customizable release of CobiT is made available by the IT Governance Institute (ITGI). In this article, we'll explore the questions:

      • What is CobiT?
      • Is CobiT better than other governance frameworks?
      • What benefits does CobiT bring to the enterprise?

 

What IS CobiT?

Let's begin with a bit of history. "ISACA got its start in 1967, when a small group of individuals with similar jobs -- auditing controls in the computer systems that were becoming increasingly critical to the operations of their organizations - sat down to discuss the need for a centralized source of information and guidance in the field. In 1969, the group formalized, incorporating as the EDP Auditors Association. In 1976 the association formed an education foundation to undertake large-scale research efforts to expand the knowledge and value of the IT governance and control field," we learn at the ISACA Web site.

 

In pursuit of this mission and parallel to the IT Infrastructure Library (ITIL) project begun by the British Government, the auditors at ISACA -- as the organization expanded internationally -- were looking for control mechanisms that could bring to the business the value of controls that provided verifiable compliance and governance data.

 

In essence, CobiT incorporates the control objectives observed by enterprises in compliance with Sarbanes-Oxley and other international standards, and allows for coordination between control requirements, technical issues, and business risks. CobiT's tool sets allow for practices that the ITGI believes incorporate or deepen the international IT Guidance supplied by ITIL, ISO/IEC 17799, ISO/IEC 13335, ISO/IEC 15408, TickIT, NIST and COSO.

 

In structure, CobiT features 34 high-level control objectives and 318 detailed control objectives that keep IT's operations in line with the business goals of maximizing security and profitability and minimizing risks.

 

In a February, 2005  interview with IT Business Edge, Malcolm Fry, an ITIL expert, provides this overview: "I'm going to ask you to draw yourself a graphic to explain how they all link together as a cohesive unit. If you draw two boxes next to each other and in the left hand one you write the ITIL, for the IT Infrastructure Library, and in the other, write TQM --Total Quality Management -- in other words, that's the business. The ITIL is basically running the day-to-day operations of IT. Draw a slighter bigger box around those two boxes and across the top of it write CobiT. What CobiT does is it brings in check points, security points, so in other words, in a certain point in the procedure you can't go past here unless you've got authority or proof or you meet some kind of criteria. So when you're implementing ITIL to support the corporate TQM, then CobiT you will implement at the same time to put the control points in. So ITIL is about processes, CobiT is about control points …"

 

Is CobiT Better than Other IT Governance Frameworks?

First a word of caution: No single framework of IT governance will fit the needs or the business objectives of every organization. Each business must look at its own challenges, goals, and objectives, and then evaluate the available governance frameworks to see which features of each best helps to meet those goals. Each of the three most recommended frameworks brings its own strengths to the business circumstances.

 

As Mr. Fry suggests in his response, oftentimes an array of frameworks, tailored to the particular needs of your enterprise is the best approach. While CobiT's strength is most pronounced in the area of controls and metrics, ITIL is strong on best practices and processes, and ISO is strong on security.

 

It is important to remember that each of these frameworks is the result of the work of literally hundreds of businesses and IT professional organizations internationally, over a period of decades. Each complies with international standards, so an array of the features of all three may be best for your enterprise.

 

"For the last five years, I have worked with IT organizations across the U.S. as a principal consultant, helping them identify key opportunities for best practice improvements in their change, and migration, processes. In those areas, CobiT provides some clear control guidelines that can be applied appropriately to meet a given organization's needs, based on their business model," says Mary McMichael, Principal Consultant for Diversified Software  Systems.

 

"When sitting down with IT leaders from various disciplines in an organization, CobiT provides an objective set of guidelines with which to guide a discussion about the specific risks and opportunities in that enterprise, while avoiding some of the potential political potholes that can befall us in this type of discussion," she continues. "It can become a true business needs definition discussion rather than a criticism of any one organizational group, and provide a roadmap to prioritize improvement options."

 

What Benefits does CobiT Bring to the Enterprise?

The most apparent benefits that the CobiT framework can bring to the table are time and money. Because the documentation -- the accumulated experience of hundreds of IT professionals, auditors and business managers -- is made immediately available to your enterprise at no cost at the ISACA.org Web site, you immediately avoided having to invest in developing these practices independently. And, instead of addressing your control and auditing concerns on an ad hoc basis, you can bring this knowledge and complete framework to the fingertips of your management team immediately. With all this information and milestones set out for you and your staff, the possibilities of confusion or miscommunication about goals you're trying to achieve with CobiT are minimized, which also brings greater efficiency.

 

The third important benefit offered by CobiT is that it already complies with international standards and Sarbanes-Oxley. That means that it is not only a valuable tool for your internal management team, but can also be used by auditors and others outside your enterprise to evaluate your success in implementing control structures.

 

Finally, the CobiT framework allows you to share the knowledge you gain with other organizations, in users' groups, in professional journals or books, and via the Web. Sharing solutions and challenges with others can be a powerful engine, driving even more new ideas and solutions from your team.

 

Emphasis on Compliance

As an internationally developed and accepted framework of IT governance, CobiT shines in the areas of controls and auditing. It was developed by the IT Governance Institute and is freely available in an interactive, Web-based format from ISACA.org. It comprises years of experience in controls and security issues devised by hundreds of IT professionals, all to ensure that your organization is compliant with internationally accepted standards.

 

Since the shadow of the Enron scandal (which lead directly to Sarbanes-Oxley) fell over the vast arena of business reporting, and what IT can bring to risk management, control, and the audit trail, professionals have taken a closer look at tools that allow for verifiable, reliable reporting as well as controls for the enterprise. CobiT is increasingly coming on many CIOs' radar as a powerful compliance, and best practices tool, and another means by which IT brings value to the business (and can show it).

 

For more information about CobiT, check out the following resources:

 

--

 

Rod Amis is a freelance technology writer based in North Carolina.  He has written for various publications on- and offline, including IT Manager's Journal, NewsForge, Silicon.com and Access Internet Magazine.  He is also the author of two books and was a newspaper journalist before going completely digital.

| More
831 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Debby Young

 

Changing the game plan from cutting costs to increasing service.

 

With server virtualization, IT can dynamically provision resources for the corporate computing environment based on anticipated workload cycles, such as normal end-of-the-month spikes caused by payroll processing or increased demand on online ordering resources triggered by a planned promotion. Because virtualization can emulate multiple computer environments on any given server, IT can pool server resources across the enterprise, thus driving down the cost of operation. This just-in-time resource allocation is part of a predictive resource scheduling strategy that optimizes utilization and assures service levels despite fluctuating workloads.

 

"Ultimately, you want to be able to allocate resources based on business priorities," says David Cohen, vice president, research and development for Merrill Lynch. He likens it to the way the electric company distinguishes between hospitals and residences -- during a power outage, hospitals get priority service over the general public. "In a virtualized environment, IT can configure resources to enable mission-critical applications to take precedence over less vital applications when extra processing power is needed," he says.

 

Virtualizing such tasks as data storage and network support can reap similar efficiencies. Depending on its failover configuration, for instance, pooling standby servers alone could save a company upwards of 40 percent on idle infrastructure expenses, floor space, power consumption, and support personnel.

 

THE BOTTOM LINE ON VIRTUALIZATION

For CIOs charged with streamlining underutilized IT environments, virtualization holds the key to significantly driving down infrastructure costs without sacrificing high availability. But more than just a cost-saver, virtualization helps effect business change by enabling IT organizations to:

 

  • Pool server resources
  • Increase server utilization
  • Provision capacity on demand
  • Shorten disaster recovery time

 

In the multitiered application environments endemic to large enterprises, IT tends to overprovision application clusters because need is calculated on the peak requirements of every application. By virtualizing servers, resources within the server cluster can be continually repurposed to meet changing capacity needs. When demand subsides from one application, the resources can be redirected to another application experiencing peak load. Therefore, the cluster can be provisioned closer to average requirements rather than to peak loads, optimizing resource usage and lowering the cost of ownership without compromising service-level agreements. In baseball terms, it's like having a utility player available instead of a specialized backup player for every position.

 

Because virtualization separates applications from the platforms they run on, disaster recovery -- one of today's key business priorities -- is quicker than in traditional IT environments. For instance, with a physical server, if hardware is modified after software is installed, the data restoration might fail because the licensing key no longer recognizes the configuration. "In a virtualized environment, from the operating system's perspective, it's all the same hardware," explains David Boyes, president and chief technologist for the Ashburn, Va.-based R&D company Sine Nomine Associates. "This can take literally hours and days off your disaster recovery time."

 

The Latest Advances

Advances in virtualization technology are occurring on a number of fronts. Foremost is dynamic, orchestrated provisioning -- that is, quickly reallocating servers from one pool of applications to another. This sophisticated process involves reconfiguring server parameters, allocating storage and other resources on the fly to meet the increased work-load demands of another application. VMotion technology from VMware, for example, allows IT architects and administrators to view the server farm as one aggregate computing pool and carve off logical servers to meet peak loads or to test new applications with no perceptible delay in service.

 

VMware is also innovating how memory is managed in virtualized, consolidated environments. With advanced memory management (AMM), IT no longer needs to calculate memory requirements based on the total amount of memory in each of the systems being consolidated. "Because AMM optimizes how the overall system is used, IT can often reduce actual memory requirements by 50 percent or more," explains Brian Byun, VP of software alliances for VMware.

 

In addition, progress is being made in balancing workloads across clusters in the enterprise to meet the service-level agreements for business applications. The goal is to prevent the reallocation of resources without first determining the underlying relevance to the business. For instance, is the spike in transactions in the Web store caused by an increase in purchases, or is it a denial-of-service attack? If it is the former, IT would need to reallocate resources to keep up response times in order to avoid losing sales. If it is the latter, IT would have to throttle back resources and address the attack.

 

Virtualization technology is rapidly gaining adoption. Innovators such as Merrill Lynch are using it to ease the transition to new computing platforms and manage application updates. For instance, when Merrill Lynch rolled out Windows XP across its user base, VMware allowed the company's financial advisors to toggle between Windows NT and Windows 2000 on the same desktop so that there was no disruption in service.

 

Industry experts observe that virtualization will enhance IT's ability to seamlessly integrate with partners that can provide additional resource capacity to handle workload spikes. There may be a slight premium on those resources, but it will cost a company far less than it would to retool the enterprise infrastructure to support peak requirements.

 

--

 

Additional Reading - Sponsor Link:
Seven Requirements for Balancing Control and Agility in the Virtual Environment

| More
581 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Kevin B. Roden

 

According to a number of recent surveys, data protection is a top priority in 2006. As the CIO of a company that's trusted for protecting and storing the world's data, I suggest 10 data protection resolutions for 2006. Many CIOs have taken several, if not all, of the first five resolutions. I encourage you to review all of these, and if any of them is missing from your checklist, to make it a top priority.

 

      1. Define the Recovery Time Objective (RTO) for all of your  applications. The RTO for an application is simply the objective for how quickly you need to have that application's information restored and available after downtime has occurred. For example, for your e-mail system, is the RTO four hours, eight hours, or the next business day?
      2. Define the Recovery Point Objective (RPO) for each  application. The RPO for an application is the objective for how much data you can afford to lose since the last backup. Is it two minutes worth of data, 20 minutes, or hours hours? You then need to estimate the costs to achieve your RTO and RPO for each application.
      3. Classify your data based on its mission criticality. Your business's data should be categorized into groupings of critical, vital, sensitive, and non-critical. The critical grouping would include data that is used in key business processes or must be retained for compliance or legal reasons. Vital data includes information that would cripple the company if lost. Sensitive data is simply data that can be rebuilt easily and is not a unique source of information. Non-critical is just that - data with low security requirements. Determine criticality by meeting with company executives and decide clearly what the priorities are for the business. Then pick the appropriate backup strategy to meet that criticality. Also, be sure to assess where all the data is - both centralized and distributed data residing on remote servers, laptops, and PCs. Ensure the strategy addresses all the information.
      4. Develop a detailed plan on how to restore your applications  depending on the crisis that drives the need for recovery. Think about how to best respond to different kinds of scenarios, from simple scenarios, to the most complex. Of course, you have to test your backup and recovery plans to make sure they actually work; refine your plans based on your tests. Expect to do multiple tests before you get it right, and remember, this is a continuous process. Strive to constantly learn what works best -- and then amend your plans accordingly.
      5. **Make sure you have adequate resources assigned to data protection  at all levels of your organization. If you don't have the right resources and processes in place, than data at the edge of your network is probably at risk. If you are an Iron Mountain customer, you probably have already done the steps above. So where do you go from here? What should you focus on in 2006? Here are 5 resolutions we recommend.
      6. Take an inventory of all your backup data - both onsite and  offsite. Do you have everything you expected to have? Do you have more backed up data than you should? Is all of the data in the right location? Do you have tapes that should be onsite that are offsite, or vice versa? Taking a full inventory can be invaluable; you wouldn't want to discover inventory mishaps during a disruption.
      7. Differentiate between backup data and archived data retention rules,  and make sure they don't conflict with each other. For example, if your email retention policy is to delete all unclassified email after 90 days, but your hold policy for e-mail backup tapes is six months, then you could have a major e-discovery problem. Backup solutions cannot provide easy retrieval or an audit trail. The use of backed-up electronic records as official legal documents for compliance and litigation will lead to considerable time and money spent to restore backup tapes and search for legally relevant material. True digital archiving solutions today offer secure, compliant, and cost-effective, long-term archiving of electronic records. These records are stored in an indexed, searchable format so the organization can access those records whenever they need.
      8. Put the processes in place to encrypt all data that you determine  needs an extra degree of protection. For example, given the risks of theft or loss of confidential data stored on transportable data sources such as backup tapes, it is highly recommended that you encrypt transportable data such as backup tapes or optical platters.
      9. Investigate new technologies to determine whether they may better  address your data protection needs in certain areas. For example, electronic vaulting may be a better solution for your critical applications that demand short RTOs. And advances in tape virtualization technologies are now making the concept of online remote data replication much more affordable than it was the past.
      10. Expand your disaster recovery planning to encompass business  continuity. IT executives tend to focus on just disaster recovery. But disaster recovery planning that relies on another department for how the business processes recover may put your operations at risk. For example, if you had to execute your disaster recovery plan for your call center, you could have all the systems up in running in an alternative location and then discover that the alternative location is not outfitted for employees to go back to work. It makes sense for IT executives to take the lead. Always ensure enough desks and chairs.

        You may already have all of these resolutions covered, but if you don't, I recommend that you address them this year to reduce your company's data protection risks.

 

--

 

Kevin B. Roden joined Iron Mountain as executive vice president and chief information officer in 1999. Previously, Roden was CIO with Fleet Boston Financial, for the banking subsidiary. He has held numerous technology and management positions in a 20-year career at BankBoston, including executive director of U.S. technology

| More
585 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

ScottDillon.jpg

 

Scott Dillon has earned an impressive track record, leveraging an understanding of both technology, and banking and financial operations at Wells Fargo & Company, a diversified financial services company with $540 billion in assets, 23 million customers, 6,000 stores, and a strong Web presence. Early in his Wells Fargo career, Dillon was vice president of performance reporting in cost accounting. He moved up to executive vice president and head of payment strategies.

 

From 2004 to 2006, Dillon made a number of key business process improvements  as a divisional chief information officer for the Wholesale, Investment, and Trust Technology group within the Technology Information group. In September 2006, he made one of the most challenging moves of his career to become the executive vice president and chief technology officer for Wells Fargo's Enterprise Hosting Services (EHS).

 

Often called the heartbeat of Well Fargo, EHS provides reliable and cost-effective, 24x7 data center operational support for Wells Fargo's mission-critical applications and for the vital delivery channel for Well Fargo's business partners.

 

Recently, enterpriseleadership.org sat down with Scott Dillon to discuss how he is transforming a monolithic data center operation into services designed to provide business partners with a higher level of value. Here's what Dillon had to say:

 

EL: Can you give me a quick overview of your organization's  structure?

 

SD: The EHS includes the entire data center infrastructure in our 40,000-square-foot structure, minus the network. We have about 1,000 professionals who collectively comprise both the data center team and the facilities team, along with as many as 300 contractors, depending on what we're doing.

 

We've been working hard to balance our decentralized enterprise organization, as well as our systems, with the needs of our business partners. For example, we've tried to make the distributed systems more business facing. We also have some shared functions, such as mainframe and storage groups, which are used by everyone.

 

EL: Why did you make the change from a business unit CIO to CTO of  Enterprise Hosting Services?

SD: It was a good personal move for me. I wanted to do it because I had a good understanding of the applications, the customers, and the infrastructure. This position has enabled me to bring a customer-centric focus to our hosting services. I have the challenge of balancing all the needs of the CIOs I used to work with, maintaining an infrastructure that makes sense to the business partners, and protecting all of the data on the floor.

 

EL: What process improvements did you make as a CIO that better  prepared you for your current position?

 

SD: As a CIO on the wholesale side of banking, I had to deliver the technology and the necessary resources to help our customers compete in the marketplace. Because we needed to have the right products coming to market faster, I worked in conjunction with the wholesale business group, which steered our innovation course. We developed pods, small groups free of the profit-and-loss corporate roadblocks. We were still very disciplined. My job was to make sure we had the right technical people; the business partners selected their team members to work with us. We could get very close to the business problems of how to deliver a treasury workstation or how to deliver a new file transport system within six, to 12 months. We were able to have many pillars-of-truth sessions with team members from the business. By breaking down all processes, we could take the product from pod concept to production very quickly.

 

EL: What technologies have you brought in to make better use of your  data center resources?

 

SD: We've started to look strategically at our data centers. Specifically, we've applied the concept of supply management and demand management as a best practice for how we want to manage our data centers. On the supply side, data center managers have to work hard to control the supply of resources as our consumption of those resources grows and their related costs go up. For example, we've done a very good job of buying things for less money. We've also done a great job of bringing in new technologies for doing end-to-end monitoring, not just component monitoring.

 

A lot of our energy goes into looking at pre-emptive ways to find out if we're having failures. On the open systems side, if a customer experiences a longer-than-normal response time logging on to our portal, our monitoring helps us to understand that we might have an emerging problem. We have the capability to move a tier-one application from one location to another very quickly.

 

On the demand side, we've started to use tools that provide information about how resources are being used. This information, in turn, has helped us to partner more with how the business partners can make better use of its resources. For example, when it comes to storage, we're using optimization tools (storage resource management tools) to get a better understanding of how our storage devices have been deployed and how much excess storage capacity we have. If a storage device was over-allocated, we can find out specifically which applications or which business partners are consuming the storage. If a group only needs 10 terabytes of its 50 assigned terabytes, then we can re-deploy the remaining capacity to other organizations that need it.

 

EL: Can you go into a little more detail about how you'll use your storage management tools to conserve storage more proactively?

 

SD: When it comes to lifecycle management, we're interested in the retention and archiving of our data and the procurement to disposal of our servers. It's our priority for 2008. The SRM agents we have on our servers will provide some metrics, which will go into our storage dashboard. We've been able to tell a business partner how much it's spending on storage and what we can do to reduce that cost. We're also able to ask ourselves whether or not we need to go with high-priced near-line storage or low-cost offline storage. The SRM tools will also help provide us with metrics to make decisions about the retention and the final destruction of data. The bottom line is that SRM will provide us with the technical metrics we need and the transparency that will enable our business partners to make decisions about their storage resources.

 

EL: How are you making your data centers greener?

 

SD: It all gets back to our demand-side partnership with the business. By creating incentives for not adding new resources, we've seen groups consolidate servers or redeploy some of them. As a result, we've been able to slow down the growth rate of the devices on the floor, as well as to cut our power usage. We're still trying to do more things on the demand size side to add functionally to the business without adding resources. For example, we're piloting configuration management so we can look holistically at our resources from data center to data center. We'll be able to do a better job of managing everything -- from the operating system to the application configurations -- on a server.

 

EL: What's your feeling about the IT Infrastructure Library as a  management framework for your data centers?

 

SD: ITIL provides a very powerful framework for how an IT organization can manage it infrastructure. However, if you don't mesh the ITIL processes into the services you want to provide the business, then you can become enslaved by the ITIL processes and drift father away from your business partners.

 

We're moving to a just-in-time concept for creating a service of standards on the supply side. For example, a business partner would be able to request, via a few clicks, that it needed a Weblogic blade server to be on the floor to run a Web application. Again, provisioning tools, along with configuration management, will enable to us to be more service-centric or customer-centric. That's a cultural shift for us.

 

EL: Are you changing the way you manage service level  agreements?

 

SD: We're moving away from the traditional, “five 9's” component SLA monitoring. We've put a discipline in place that we call CAPS and TOPS – Customer Acceptable Performance Standards and Technology and Operations Performance Standards. It's a balancing act between what are meaningful service levels to the business partners and what are acceptable service levels to us. If a customer clicks on our URL and can't get to our site, that's the metric we're concerned about. Behind the scenes, we're always doing component monitoring to safeguard our customer availability metrics. So, component SLAs become the underpinning to our customer-centric SLAs.

 

EL: Can you provide an overview of the Wells Fargo management  training program for IT leaders?

 

SD: Wells Fargo is a very big place. We started the program so we could grow some leaders who understood our business. The program has both internal and external candidates rotate through assignments in the key areas of IT, ranging from security to infrastructure. Towards the end of the training, the candidates focus on a set of disciplines and competencies. We're committed to tracking their progress after they complete the program. I've hired several managers who've completed the program.

 

--

 

Elizabeth M. Ferrarini is a writer from Boston,  Massachusetts. Reach her at elizabethferrarini@yahoo.com.

| More
331 Views 0 Comments 0 References Permalink Tags: article, governance, innovation, it_management, itil

by Elizabeth Ferrarini

 

Most organizations have some sort of an IT help desk staffed by individuals who field calls from users, and then go into firefighting mode to solve users' problems. However, some IT organizations have transformed their inefficient help desk into a proactive, service desk that offers high productivity and efficiency, but at a lower cost than before. Major companies, such as Procter & Gamble and Caterpillar, have accomplished this goal by adopting ITIL initiatives, a standard set of best practices for lowering and improving the quality of IT service delivery.

 

The Role of Service Desk Based on ITIL

A service desk designed according to ITIL initiatives functions as the day-to-day operational interface between the IT organization and its users for achieving the organization's goals. The service desk also becomes the focal point for integrating the five disciplines in ITIL's service support management processes -- incident, problem, configuration, change, and release management. To this end, service desk staff must be able to communicate effectively with users, via a number of different channels, as well as use technology, in order to close the loop on tasks in each of the five ITIL disciplines.

 

How to Get Started

The first step in developing a service desk calls for identifying where you are starting from. Assessment should include a formal review of processes and procedures based on the guidelines in the ITIL Best Practice for Service Support volume. These guidelines will include measuring service performance against targets, identifying strengths and weaknesses, and aligning services with customers' requirements. You need to compare similar operations and benchmarks to gauge improvements.

 

ITIL guidelines call for you to define the key service desk processes, not just what they are, but how they operate, and what affect and significance each process has to your organization. These definitions will encompass the following:

  • Staffing -- quality and number of people
  • Daily operational procedures
  • Incident processes
  • Request handling and workflows
  • Incident monitoring and tracking
  • Escalation and closure
  • Management information
  • Call volumes, workload, performance, and trends

 

The outcome of all this should provide you with a better understanding of user requirements, service level agreements, and the operational level agreements that underpin them.

 

Select the Right Staff

ITIL guidelines place a lot of emphasis on getting the right people from the start or training the staff you already have. A proactive service desk must have a motivated and positive staff. A good staff becomes a service desk most precious asset. So invest in your staff. This effort might mean recruiting new staff and supporting them with training, tools, and resources to be effective. Soft skills, such as good verbal and written communications, hold as much weight as technical or business knowledge. Don't forget to involve the staff with decisions about the service desk.

 

Think Service Always

ITIL guidelines call for thinking service desk. To this end, make sure your organization includes the service desk when it considers new business or new direction. Prepare the service desk to handle a new product, or service, or new users. The service desk needs to be involved from the start and have plenty of time to plan for any changes in priorities and workloads. Staff should help define service processes and priorities. The staff should get involved with transition teams to help ensure smooth running of a new business or a merged organization.

 

User perception of the service ranks alone side of how the was improvement. In some cases, the service desk staff might find it appropriate to work with users to integrate some of their processes with those of the service desk. Such an effort could provide a seamless support environment. For example, an organization might want to incorporate second line support, problem management, and change management facilities into its own service desk operations.

 

Insist on the Appropriate Technology

The ITIL guidelines stress using technology appropriate to meet the organization's required service levels. The service desk needs to maintain or have access to a wide range of information and facilities that can be provided to users. Some of this might include reference material, such as the corporate file storage structure, contract documentation, process definitions and scripts, and frequently asked questions. Some material might have been interactive, such as links to message boards, intranet services, and external Web sites. Some material might be designed to coordinate service and change management capabilities. For example, this material might enable the service desk staff to manage problem resolution or enabling to assess, coordinate, and deliver service more effectively to users.

 

Recent advances in service desk tools have included remote (virtual) desktop, and network and application support. (See Tips for Evaluating Service Desk Tools) Service desk tools now incorporate facilities to identify and to resolve incidents before they affect users. In many cases, the tools can resolve problems without intervention from the service desk staff. When a user needs to contact the service desk, he or she has a range of self-help facilities, such as Web and intranet access, incident logging, incident status reports, and other information can help the individual to resolve the problem. These tools can reduce the need for users to contract the service desk for mundane reasons, and thus free the service desk staff to focus on more pressing tasks.

 

Links between system management and service management tools can provide invaluable insight into the performance of the complete technical infrastructure and can even highlight where attention is required to fix emerging problems. With early warning of failure, missed thresholds, and poor performance, a department manager can decide on the most appropriate actions to eliminate the causes.

 

The most advanced service desks, as described in the ITIL guidelines, also support functions such as inventory management and software distribution. Integration with each vendor's Web site can provide an additional layer of service that be provided seamlessly to users. For example, one such service might include allowing users to order and download upgrades and new software. Vendors might even be prepared to fund part of the project in return for the benefits they receive.

 

Seek Support from Other ITIL Adopters

Never feel that you are alone in carrying out a proactive service desk based on ITIL guidelines. You're not. Seek out IT professionals at other organizations who might have faced similar challenges to you and might be happy to share them with you. Visit these individuals and see how they work. Look at the processes you can adopt and check out businesses in other sectors. Most of all, joint the not-for-profit IT Service Management Forum or itSMF (www.itsmf.com) promotes ITIL through its 8,000 members worldwide. Be prepared to share ideas by attending itSMF seminars and itSMF regional groups.

 

Transforming your help desk into a proactive service might sound like a daunting task. You can lessen the task with careful planning and sensible implementation using ITIL initiatives.

 

Guidelines for Evaluating Service Desk Tools

When it comes to selecting service desk tools, you might want to narrow your search to those process integrated tools that completely support the five disciplines in the ITIL Best Practice for Service Support volume. For example, a service desk tool integrated with change management can reduce disruptions in the IT infrastructure. This type of tool can locate critical components with performance problems, which can help service desk staff solve user problems more quickly.

 

If the service desk tool can expand the concept of service management to include other increasingly important processes, such as capacity planning, then IT department can reuse and integrate the knowledge that is captured in this tool. For example, ITIL guidelines provide a problem-management process where an IT professional spend time investigating the root cause of a problem to prevent the problem from reoccurring. A service desk tool should have the capability to relate incidents to problems so that a service desk staff member can make use of the knowledge that is captured with the problem record for faster resolution. Integration between the service desk tool and the systems management environment can enable planned-outage planning support based on specific service levels.

 

When evaluating service desk tools, consider if the service desk tool dictates how to organize the service goal, or if the service desk can tailor the tool to suit its own way of working. Look for a tool that is based on ITIL's recommendations for the basic organizational structure of the service desk. At the same time, you should be able to tailor the tool so that it can integrate seamlessly with the existing organization infrastructure. Each organization will have unique escalation procedures, notification rules, and approval processes to which the service desk should conform.

 

So, when evaluating service tools, ask yourself these five questions.

  1. Is the tool completely based on ITIL?
  2. Does it have the capability to define and to map IT service and their components?
  3. Out of the box, does it integrate with the following:
    • A confirmation or asset management module?
    • A change management module
    • A workflow management module
    • A service level management module
  4. Does the tool allow you to forward of events being generated by a network or systems monitoring tool and communicating back any status change of the incident recorded in the service desk application.
  5. Can you easily learn to use the tool, navigate with it, and tailor it to your needs?

 

--

 

Additional Reading - Sponsor Links:
Why You Should Take a Holistic Approach to ITIL and Service Support
Streamlining Service Request Processes: A Key to Business Success
Taking the Service Desk to the Next Level


Elizabeth Ferrarini is an IT consultant and freelance writer from Boston, Massachusetts. Elizabeth can be reached at elizabethferrarini@yahoo.com.

| More
824 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy
| More
700 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy

by Malcolm Fry

 

Over the last few years ITIL has become the flavour du jour in the US whereas in Europe it has been part of the main course for quite some time. As someone who spends his time split between Europe and the US I am intrigued by the difference between the two continents I regard to Service Management. Same ingredients but a different recipe. By the way I agree with you that I have now over-cooked the food metaphor.

 

I have often wondered whether the difference lies in the culture of the two continents or is it because ITIL was developed in the UK and has had longer to establish in Europe. Everybody knows that the US and European cultures are different and I am sure that we all have examples so I will let you supply your own example. However the main cultural difference that intrigues me is the attitude towards service.

 

In the US the eagerness to give and receive good service is ingrained in the way of life, although 'Have a nice day, sir' can sometimes grate on the nerves. In general Americans are more outgoing and speak their minds freely whereas Europeans are often more private and keep their opinions and thoughts closely guarded. So when it comes to IT Service it is not surprising the Europeans like etiquette and rules whereas Americans just want to get down to the basics as soon as possible.

 

Europe is also a continent of many cultures as anyone who has travelled around Europe can testify. Imagine a call to a Service Desk in the UK from a customer in Greece about a piece of software developed in Germany that is maintained in France. There are enough cultures here to start an epidemic. It is no surprise therefore to see why defining best practices, complete with a common vocabulary, is important in Europe.

 

Originally ITIL was developed in early 1980's to standardize the UK government data centres, as they were called then. At that time the various data centres in the government agencies had processes that were similar but not the same, for example they all had change control but different ways of managing change, they had a vocabulary with different words, and phrases, meaning the same thing. Ironically this also describes IT around the world.

 

Once the UK government had developed the ITIL best practices they quickly became popular because many of the cultural barriers were immediately removed and a common It language was desperately needed. Very soon Government agencies around Europe started to adopt ITIL and ask for ITIL compliance from suppliers, including IT Service Management software suppliers. Very quickly large software suppliers found themselves losing government contracts because they were not ITIL compliant.

 

This is a key turning point in the story of ITIL because very quickly the large software suppliers needed to get their software ITIL compliant because ITIL was beginning to spread outside of governments. As if not being able to win large government deals was not enough. So the software companies began to make their products ITIL compliant.

 

Meanwhile in the US a different phenomenon was occurring - certification. Not just academic qualifications but certifications from hardware and software vendors to show competency in managing and supporting their products. Suddenly if you weren't certified you were an outsider.

 

So now these two mighty tsunamis began to meet Europeans were being told by vendors that they needed certification and Americans told by the same vendors that they needed to adopt best practices. Common denominator? The vendors. As a result we have a Bridge beginning to appear across the cultural divide. The beauty of ITIL is that for the Europeans it is a best practice that has certification whereas for Americans it is certification that has a best practice.

 

For Europeans ITIL has grown organically and been adopted and pruned accordingly by most organizations. Whereas for Americans ITIL is an introduced species and like all introduced species has caused some problems with the existing IT ecosystem. This has been, to some degree, overcome by the latest refreshed versions of the ITIL books and the involvement of largest American vendors, such as Microsoft, getting involved in some of the newer publications.

 

When I first started visiting the US I was surprised by the number of focused conferences and organizations with numerous chapters, for example the Help Desk Institute has very focused conferences and about 50 chapters. In Europe there are much fewer conferences, possibly because Europeans on average have 4-6 weeks vacation per year, and Europeans do not like attending after work events. Here ITIL has an ace up it's sleeve because the ITSMF, which provides chapters and conferences, perfectly fits the American model so if ITSMF really gets going the we can expect to see ITIL grow very quickly.

 

My experience shows that ITIL fits both cultures perfectly and because it is the public domain is neither expensive or is it restrictive. As a last point be aware of restricted practices, these are developed and owned by a vendor, that are based around ITIL, some are excellent but be careful what you commit to because as I said one of the biggest strengths of ITIL is that it is the public domain.

 

So y'all should adopt ITIL old chap.

 

--

Malcom Fry, a recognized IT industry luminary with over 35 years experience in Information Technology, serves as an independent executive advisor to BMC Software, and Remedy, a BMC Software Company. Malcolm offers an unparalleled breadth of knowledge and experience in IT business and technical issues. Malcolm is the author of four bestselling books on IT service and support, and he has had many other articles and papers published. Technology journalists regularly use Malcolm as a valuable source of information, and he is also the solo performer in a highly successful, bestselling video series made for the Help Desk Institute. He has Masters-level ITIL certification.

| More
225 Views 0 Comments 0 References Permalink Tags: article, best_practices, compliance, governance, innovation, it_management, itil, open_source, security, strategy
1 2 3 4 5 ... 9 Previous Next

Actions