CA Community






This Blog

IT Service Management the critical component in Cloud Computing

Published: June 03 2010, 09:50 AM
by Robert Stroud

IT is changing!  Businesses that once depended entirely on IT to deliver services are transitioning to a mix of internal IT and external service providers to meet the demands of their business. For instance, if a department manager wants to implement a cloud-based customer relationship management tool, she orders it with a credit card online and in minutes she can be up and running. There is little compulsion to ask permission, because she is not adding any machines or installing any software. She is just solving a business problem - one that needs solving right now with Cloud Computing!

This situation is becoming more familiar!  Flexibility to respond quickly is becoming a critical business requirement to stay competitive.  Unfortunately many in IT believe that this same flexibility results in a loss of control, although I might argue that this control has already been lost.  (Refer to my blog last week Are you still in a "fog" over cloud computing? for more insight to Cloud Computing).  IT is charged with maintaining the sanctity of corporate networks, data and applications, but no longer knows or controls all of the services that the business is using.  Controlling this environment is becoming more difficult, and it is getting worse as more and more services become available and IT needs to consider that it is now the manager or coordinator of suppliers to deliver the product called a Business Service.

I see a real parallel here with the maturity cycle of the industrial revolution when electricity first became the automation technology for mass manufacturing. Organisations initially focused on the provision of electricity themselves and over time as the supply improved manufacturers moved from the producer to consumer of electricity except where exceptional circumstances mandated otherwise and focused on the business service of manufacturing. Over the next few years this will become more prevalent with IT and IT will be required to consume multiple components to deliver the manufactured service. The fundamental question is should IT "control" the situation or rather be the enabler of the service provision from the appropriate source(s) and manage the delivery?   

To migrate to the aggregator of services, IT Service Management is a fundamental requirement to ensure Quality of Service.  Processes including incident, problem and change management are going to become exceptionally complex if IT doesn't understand both sides of the service value chain, the demand side and the supply side.  Further, IT is going to be required to have a good understanding of how the supplier network components will work with the internally delivered components to deliver the service. Additionally IT is going to have to ensure that the aggregation of components is at a price that the service can bear and be delivered at an acceptable cost whilst meeting the performance SLA. 

To measure the service, sound governance is critical in the form of establishing agreements with your business partners quality agreements (SLA's) and understanding how the supply chain is a part of this and the underpinning agreements and operational level agreements required to meet them. The secret sauce here is that you need to understand the business expectations in terms of performance, integrity, confidentiality, cost and priority and then you can determine how to measure the infrastructure components whether within your own IT organisation or the metrics you need from your service value network. Now, this can be complex and the temptation is to boil the ocean, my advice is to stay close to the business and identify the most critical metrics and focus on those first - over time you can extend what you monitor and measure. To do this you are going to need to be close to the business and consideration should be given to the Business Relationship Management role between IT and the business - if you don't have this role I would consider it.

My final words of wisdom from my experience are that you need to walk before you run - so start by walking a day in the shoes of your users, ask them for a "take your IT buddy to work" day and you can see what they do and more importantly experience what drives them crazy!

Share this post:  EmailEmail

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

8 people have left comments:

IT managers hoping to take advantate of cloud computing but worried about control or management should investigate the concept of IT service catalogs. Understanding the services available and being able to define the components of the service will make it easier to track when moving into the cloud.

Posted by: Denise Dubie | June 3, 2010 2:24 PM

Denise, I agree and add that there are additional area that until now many ITIL centric organizations have ignored, but with the adoption of cloud looming, they must make a priority consideration. Areas such as Financial Management and Vendor Management for example. Especially if they are looking outside of their own four walls (Internal/Private Cloud) etc to a Public Cloud provider.

Cloud is changing the game for IT and their Data Center of the Future, not only in offering tremendous agility and flexibility of resources (think elasticity), but also changing how they must manage IT for the Business and truly become an 'IT Broker' of resources, applications and delivery options.

Posted by: Meghan Stabler | June 3, 2010 3:20 PM

Meghan and Denise,

Good points both!

At the ISACA COBIT 5 Development Workshop last week one of the topics of discussion was the requirement for IT to move beyond  their traditional domains of Incident, Problem and Change Management to managing supply chains.  In the past it has been a manageable number or the problem was such that it could be managed in a reactive manner.  Moving forward this will be a necessity.

Comments?

Posted by: Robert Stroud | June 3, 2010 6:01 PM

Totally agree with the expansion of CobiT to do that...The entire IT chain should be included.

Posted by: Meghan Stabler | June 3, 2010 6:13 PM

Organisations should go beyond establishing a Business Relationship Management to establishing a platform where business and IT periodically meet to develop a business based service catalogue. In these meetings business scorecards will be turned into IT score cards (service levels) through operating level agreements (OLAs). These service levels will form the bases of services to be outsourced. From my experience I have seen that organisation do no clearly specify their requirements and do not have clearly established ways of measuring these services. This is an issue that will that will also arise in cloud computing.

In addition to not clearly understanding service requirements and metrics thereof very few organisations if any include 'The right to audit' clause in their service level agreements.

Posted by: Tichaona Zororo CISA, CISM | June 4, 2010 4:05 PM

Robert:  very interesting and timely discussion. I believe there is a more recent analogy than the industrial revolution and electricity, and hits much closer to home for the IT community.  In the 60's and early 70's, IT was the mainframe and the "glass house". Many people don't know or remember that the lead time for a mainframe computer or even an upgrade to an existing mainframe grew to as much as TWO YEARS. Development cycles for delivering new mainframe applications grew to that 2 years or even more. The business managers could not wait. Well, there was a new hire straight out of college who said they had used this thing called a DEC in school. One thing led to another and the business manager bought one, put it in the copier or coffee room, and the college kid wrote some quick programs that addressed the business manager's requirements. Of course, this was the birth of distributed computing. It absolutely exploded, and without the knowledge (or control) of the glass house In the 80's companies slowly awoke to how out-of-control distributed computing had become, and the pendulum swung back to centralization, at least of the management and control of the distributed systems.

I see many similarities with this birth of Cloud Computing. IT has simply not stepped up to the plate when it comes to agility and responsiveness to business requirements. However, I do believe this battle will be recognized much sooner than it was with the mainframe and distributed computing or the industrial revolution and electricity. Compliance and regulation will raise the yellow flags much quicker.

All that said, your theme and the comments by Meghan and Denise really hit the nail on the head, and I hope the IT industry takes note. The IT groups have to take on an IT Service Management mindset, and go where ITIL v3 has ventured:  Service Catalogs, Financial and Vendor Management, etc. Any IT department today that is NOT thinking about private/internal clouds as a starting point) will fall way behind in our industry. The attitude must be to offer their users the same kinds of services that they can get from a public cloud. This includes standardization, virtualization, automation, plus the robust set of IT Service Management processes that support such an infrastructure.

As a side note, I personally do NOT believe the current set of public cloud providers (Amazon, Google, MS Azure, Rackspace, etc.) have the experience, maturity, or even the current infrastructure to offer true enterprise class services (despite their advertising hype). In early December, MS had a lengthy mid-day, mid-week outage.  The cause was a mid-day, mid-week change that did not have an adequate back-out plan. I don't know many enterprises that would allow that kind of behavior.

Posted by: Ken Cameron | June 4, 2010 9:54 PM

Tichanona,

Your comment is very timely as today at the ISACA International Conference in Cancun (www.isaca.com) we were discussing the topic of the "right to audit" that was initially missing from outsourcing agreements and was added following the experience of some poor experiences.  Maybe this will occur with cloud computing or are we mature enough to simply add them now?

Robert

Posted by: Robert Stroud | June 5, 2010 7:45 PM

Ken,

Great comments!  

I am indeed seeing a significant uptake in enterprises globally delivering what virtual private clouds often with internal virtualization of servers, applications, storage and so on.  The objective, besides reduced costs, include the advantage of allowing IT to transition the discussion with the business to a service based instead of an infrastructure based discussion.  

I certainly believe this is the beginning of a significant transformation!

Robert

Posted by: Robert Stroud | June 5, 2010 7:52 PM

Leave a Comment

* An asterisk indicates a required field

* :  

:

* :  

 Submit