CA Community






This Blog

Cloud - The Death of ITIL? Or the Opportunity of a Lifetime?

Published: December 01 2009, 12:00 PM
by Robert Stroud

Cloud is hot right now, but is it hype? A fundamental transition? Or the next paradigm shift? What is clear is that the business understands that it is dependent upon IT, but unfortunately, rather than discuss detail, the business wants results.  The current business climate requires that IT must exhibit capacity flexibility which I express in terms of elasticity or scalability. From an operational perspective this is the ability to scale up and scale down based on the business fluctuations both expected and unexpected at an appropriate cost and service level based on the businesses appetite for risk. 

Further, the business requires that IT be more responsive to the business demands in the form of faster to achieve high business flexibility and take advantages of business opportunities. 

The requirement for flexibility, scalability, reduced reduction on the internal IT department has typically led several organizations investing in Cloud solutions to provide specific business functionality usually rapidly due to the perception that IT cannot deliver the solution in a timely manner.  

So the reality of today is that Cloud is a 1:1 relationship, typically between the Cloud provider and the business consumer. The business will be paying for the service out of an operational expenditure basis and the consumer typically feels that they are in control of the relationship and if the provider doesn't deliver, then a simple termination of relationship and moving to the next cloud vendor is all that is required. That's simple, correct?  

What happens with integration with other internal systems?  What happens when the Cloud provider subcontracts your account to a third party--where is your data? Is it secure?

All good questions and a recent CIO Research survey identified that the top 5 concerns for Cloud adoption included:

  • Security                        45%
  • Integration with existing systems            26%
  • Loss of control of data  26%
  • Availably concerns        25%
  • Performance issues       24%
  • Governance Issues        19%

These concerns, although relevant to IT, are not those of the business. Instead, the business is concerned about the organization's viability and thus the great divide between IT and the business continues--with IT and ITIL professionals failing to embrace the opportunities that Cloud Computing brings to your Service Management program.

The Wikipedia defines Cloud computing as:

"Cloud computing is a style of computing in which dynamically scalable and often virtualized resources are provided as a service over the Internet.  Users need not have knowledge of, expertise in, or control over the technology infrastructure in the "cloud" that supports them".

The primary misconception in the industry is that all IT will simply go to the Cloud - this is absolute nonsense, at least in the short term, as most IT organizations will deliver part of their service themselves and partially through third parties. The role of the CIO is fundamentally transitioning from one of simply managing operations to managing  IT as a service value chain-- a chain that may become more complex over time.  IT will weave together & optimize the Service Value Chain to best support various customers to enable business.  If anything, in the short term this may increase complexity, but it's hard enough to solve a problem today internally with multiple departments involved. How will we resolve this with multiple partners involved?  

We--meaning IT--have no choice!  We must change the way we operate, now is the time to transition from a reactive organization to a proactive, agile and business engaged organization.  The choice if we do not is that we will grow in irrelevance to the business and they will work around us and not with us.

In my opinion, the cloud provides IT with an unbelievable opportunity to rapidly transition by partnering with the business.  For instance if the business engages with a third party partner they will be paying "green dollars," i.e. real money from their budget and cash from the business to the partner. They will need to identify a relevant level of service for the money paid and they will quickly realize that changes to the requirements cost money.  This will, of course, be represented in a service level agreement that may take the form of a contract that is binding to both parties.  Now where the agreement is between the department and the third party that is quite simple, as you will agree. That said, the world is not simple and the reality is that integration with other systems, partners etc with will complicate the environment and the reality is that services are delivered through a complex combination of partners, both internal and external.  How do we deal with security, managing risk, compliance and governance? 

This is where Governance and Service Management are perfect partners to deliver value to the business and assist IT in transitioning and building their relationship with the business. To add value IT must transition their focus from operational processes (such as Event, incident, problem and request) to allow focus on processes that will add value and are top of mind for the business.  These will include; Service Level Management, Financial Management, Supplier Management, Capacity (using internal plus the cloud), and ensuring that the focus on the business drivers and priorities is top of mind.  In short, we present IT as the enabler of technology enabled business, not the inhibitor. 

The lesson here is don't fight the momentum - leverage it!

Share this post:  EmailEmail

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

13 people have left comments:

Hybrid Cloud Computing models are becoming more acceptable to IT departments. Moving less important applications to cloud services frees up computing resources for peak loads and poses less of a security risk than moving the entire infrastructure outside a company’s walls. A public private cloud mix of sorts is becoming the model of choice at least for some IT organizations. In retail and service sectors that have seasonally variable work loads it makes sense to move some applications to the cloud.

http://www.cloud.in/

Posted by: Rich Alessandro | December 1, 2009 7:35 PM

Rich,

Thank you for the comments and i like your analogy in relation to the retail sector.  I suspect IT is finally learning from other industries such as manufacturing which has mastered the ability to provide capacility and elasticity to meet demand "just in time" and the appropriate cost.

Now if we could just solve the security concerns.....

Robert

Posted by: Robert Stroud | December 2, 2009 10:11 AM

Great comment on Twitter (@robertestroud if you want to follow me) in reply to the blog - here is the text of one from @mxiqbal "Cloud: Death or opportunity for #ITIL? Definitely latter if consider concepts such as utility, warranty & TCU?".  Majid makes a good point that effective Cloud will be dependant upon and the understanding of the concepts of Utility, Warranty, TCU and Financial Management at  a minimum.

Robert Stroud

Posted by: Robert Stroud | December 3, 2009 12:40 AM

Th cloud computing is coming. We can all say nope i dont want, we dont need, it will come. I dont think it will break the ITIL concept and art of the IT governance. I just think we need to think about it and enable a strategy to merge the both good sides of the moon to create new practices and then produce better and more.

Stephane Lauga

http://www.ThinkingTogether.fr

Posted by: stephane Lauga | December 3, 2009 10:39 AM

First, let's not rely on Wikipedia for the definition of Cloud Computing, please. The current definitive source is NIST, and they have a first rate presentation on their site about what Cloud Computing is csrc.nist.gov/.../cloud-computing). Of course, there are as many definitions for CC as there are vendors selling solutions they want to brand with CC and IT Directors/CIOs wishing to impress their executives with the coolest new buzzword.

To the point about ITIL and CC: what really sets CC apart from SaaS or any other hosted environment is autonomous and dynamic repurposing of IT assets according to customer requests, and automated billing for services used. Without that middle layer, it is not CC. Any good ITIL consultant knows that those middle layer elements are NOT going to happen without excellent Demand Management, Security Management, Capacity Management, Access Management, an R&DMgt framework, and all of the Svc Mgt elements.

I submit that without solid best practices in place, and ingrained, an organization cannot pull off CC. The best they can hope for is virtualization and some remote hosting/SaaS capability.

Posted by: Dave Walters, PMP | December 3, 2009 12:24 PM

CC could change the the computing pardigma if the service evolves in a more robust offering.

Many comments address the present shortcomings. But with many of the top computer companies getting involved in CC it will be a matter of time  when they will provide the client a solid offering.

Their clients will sign up because CC can  positively affect their bottom line of a client.

Posted by: Ron den Hoed | December 3, 2009 6:41 PM

As we consider which value-added processes IT will need to focus on, consider Service Portfolio Management.  By helping both the business and IT see IT's contribution in terms of the cost, quality, function and benefit of a portfolio of services, SPM can help IT execs communicate their value, and collaborate with the business on what services, or portions thereof, are best sourced to the cloud.  On the flip side, IT organizations that cannot measure, communicate and manage to their value in a business context are more likely to be "worked around" by business customers who can more easily understand the cost, quality, function and benefit of services from external providers.  External cloud service providers already understand they must communicate their value to survive and thrive.  It's just a matter of time before more internal IT organizations realize that they must "compete" in this increasingly open market by focusing on their core competencies for adding unique business value, vs. the presumed protected and captive utility of the business.

Posted by: Dave Wilt | December 3, 2009 7:08 PM

Dave

You make an excellent point - if organisatons correctly understand the Portfolio of services they offer, understand or at a minimum can measure demand and more importantly understand costs then CIOs will be empowered to make correct decisions about where to source.  My experience to date is many have little visibility and the initial rush to Cloud Computing may be to cover their demand shortcommings.

Robert E Stroud

Posted by: Robert Stroud | December 3, 2009 9:24 PM

Cloud is a return to earlier options we used when configuring a service solution when technology was more lumpy.

We still face the same challenges, only compounded by the Cloud options, which are increasingly available to end users in

the non-IT managed realm.  Frankly I don't see the tight bond between ITIL and any emerging technological wave, today its Cloud tomorrow something else.  ITIL is a valid contribution to the service management discussion, as are many other sources of references.  

Its the job of a service or IT professional to 'adapt and apply' various contributing concepts and theories to a rolling solution set....

Service is distinctly simple in the mind of the consumer - results/outcome focused.  Service Management is also strikingly simple

as a conceptual approach to provisioning and providing service.  Cloud is just another arrow in our quiver.

Posted by: Ian Clayton | December 4, 2009 9:45 AM

I believe the real advantage of utilizing Cloud, isn't in companies that have large IT departments anyway, but in the small and mid-level companies that can't afford the investment in the top of the line software.  This allows them to be more competitive operationally and functionally with bigger competitors.

Posted by: Mike Tiffany | December 8, 2009 10:14 AM

Whether private (where most are dabbling today) or public (the potential value of "on-demand infrastructure" is still quite the vision rather than reality), ITSM plays the same role. It ALWAYS starts with the recognition of the need to allocate scarce resources and therefore the need to align IT delivery with the businesses' true needs. The ability to change resources more quickly and often still comes with risk/reward that must be evaluated to decide how firm the discipline needs to be. The value of technological solutions that don't address a business need or add business value is still low. There is still need to identify the source of performance loss or degradation, whether the VM, a server or app. when it occurs, either as an event, incident or underpinning problem. There is still the need to plan (availability, capacity, continuity) based on the business demand. Cloud computing is no more a threat to the need for ITSM than the PC, the storage array or the internet. Indeed, the more potential possible with complex technology the more ITSM is needed. What will be very interesting to see is how the CMS/CMDB software offerings that were never really even sufficient to track a reletivaly simple infrastructure in comparison will manage the dynamic pace of change portended by cloud.

Posted by: *** Szymanski | December 8, 2009 2:33 PM

Cloud Computing is a "services environment" and a "provisioning infrastructure", and while utilization of "the cloud" resembles earlier sets of choices and challenges for the service stakeholder, the cloud is no more like what we've had before than the internet is like radio. UNLESS, that is, you are the provider. The organizations that maintain the cloud will need ITIL even more than current organizations that don't have the harsh terms of demand and capacity met by the cloud. Meanwhile the business-oriented ITIL management processes that provide the bases for business strategy in relationship management, IT value management, and IT architecture are the processes most likely to be shared by the customer and provider of services in the cloud. Since ITIL is a management practices library, not an operations runbook nor a service production manual, it's a pretty safe assumption that ITIL will simply evolve -- to continue to reflect what is found to be most effective at managing quality of services on recognized levels of economic viability.

Posted by: Malcolm Ryder | December 8, 2009 3:56 PM

Cloud is just another method to deliver service or for service to be consumed and as such ITSM is an important aspect of the service delivery.  Now, the issue I am seeing is that the buyer of service consumed from the cloud is often not IT and the first IT are aware of the purchase is when they see their organization on a website as a reference site.  The protection of the organizations “information assets” is an acknowledged issue and more organizations acknowledge this and accept the risk and continue to consume and purchase the service and simply ask IT to integrate, a conundrum for the ITSM professional and the organization.  Yes ITSM is critical we need to weave our sound ITSM practices into the business.

Posted by: Robert Stroud | December 9, 2009 6:14 PM

Leave a Comment

* An asterisk indicates a required field

* :  

:

* :  

 Submit