CA Community






This Blog

November 2010 - Posts

What does Winnipeg Canada, snow, ISACA and Risk Management have in common?

Published: November 29 2010, 02:43 PM | no comments
by Robert Stroud

It was my honor and privilege to present last week at the ISACA Winnipeg chapter in Canada where winter has already arrived with a vengeance.  The topic for my session was "Establishing Effective ERM of IT: Implementation and Operational Issues of the New ‘Risk IT Framework", a session that is in great demand globally, now being delivered in India, Europe and North America.

Effective management of risk is receiving growing attention from executive management, risk managers and regulators to indentify and correctly manage risk in the operational environment.  This pressure requires the implementation of an effective risk management process that allow for the acceptance or mitigation of risk based on the business appetite.   IT risk can be defined as the business risk associated with the use, ownership, operation, involvement, influence and adoption of IT within an enterprise.  IT risk consists of IT-related events that could potentially impact the business.  Now the issue is not identification of risk, IT is typically very good at that, its how IT effectively handles the risk based of the business posture and appetite.

ISACA recently delivered the RISK IT Framework to assist IT in effectively identifying risk and how to develop processes to accept or mitigate risk. When leveraged in conjunction with the COBIT® Framework which provides the generally accepted control framework, the RISK IT Framework** delivers an effective enterprise risk management solution.  Based on practitioner feedback, ISACA recently released a new publication; the Risk IT Practitioner Guide** which details practical use of the framework for business value.  (Also available is a toolkit to assist with the implementation).

So the session which i delivered in Winnipeg detailed how to how to establish effective enterprise risk management IT including implementation and operational issues leveraging using ISACA's new ‘Risk IT Practitioner Guide'.

So back to my session at the ISACA Winnipeg Chapter and risk. For those who know me well you would recall that I love winter (may come from have a childhood deprived of seasons other than summer and more summer) and so I gladly accepted the risk of snow, cold weather and potential flight delays to deliver the speech in Winnipeg in the Thanksgiving period.  I made the decision based assessing the risks or weather, air travel congestion and my review of the weather forecast.  Based on the feedback of the session and the beautiful Winnipeg winters day I took the correct decision in accepting the risk.

Yes, risk is part of everyday life, embrace it and opportunity will be a frequent visitor.

** The ISACA RiskIT Framework and The ISACA RiskIT Practitioner Guide and toolkit are available to ISACA members as a complimentary PDF download.

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

What’s likely to happen in your office on Cyber Monday

Published: November 29 2010, 09:22 AM | no comments
by Robert Stroud

Happy Cyber-Monday to you!  Yes the holiday shopping period is now officially underway and for those of you that avoided the midnight or 5 AM start on black Friday you can shop today online!  In fact the generation of digital natives who are technology savvy and are exploding into the workforce today and they are the topic of my guest blogging appearance on CNBC!

So whether you are shopping today in your suit or your PJ's take a look at the blog on CNBC.com the article - as usual feedback very welcome!

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

Holiday Shopping – changing behaviors reinforce changing technology

Published: November 18 2010, 10:11 AM | no comments
by Robert Stroud

Image by Flickr user Dave416Last week ISACA launched their annual shopping survey.  This year the results identified that the average number of hours spent on work computers dramatically reduced with the productivity costs of those that used them dramatically increased, more on this in my recent ISACA blog which additionally links to a PowerPoint where I detail the survey results. In reality this is the abridged version of the survey that can get you rapidly across the results. Take a look and let me know if you agree with the findings!
Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

Follow the money - how to execute Service Portfolio Management.

Published: November 17 2010, 09:18 AM | no comments
by Jan Christiansson

In a previous life I was helping forwarding, transportation, wholesale and cash management businesses to move from traditional costing methods to activity based. I always had to build and implement these models in business warehouse systems outside of the ERP system.

The past years I've seen similar requirements for IT, the need to move from a traditional allocation cost model to a more agile and flexible one. According to Forrester (Market Overview: IT Service Management Support Tools) the business is now demanding cost visibility at the same time as internal IT is evolving from technical silos to being a service provider.

So today my old headache is coming back, only this time it's even more complicated. In IT we're talking about Project Portfolios, Application Portfolios and Service Portfolios, Shared Services and Strategic Alignment, Business Service and IT Services, and Service Components. And to top it off we're trying to control all this with things like ITIL, Cobit and Six Sigma.

I only know one way of dealing with all this. Profit = Price - Cost. Follow the money.

I want to understand the cost of delivering a specific service to a specific customer, and therefore I need to map the underlying resources and assets in a business context.

My advice is to start with how IT operations is budgeted, like in the schematic model below:

This creates an IT Cost Model for how services are delivered and consumed internally and externally. And we can work from left to right; selling and buying (consuming) value/cost (bottom-up), or from right to left doing the Services budgets (top-down). This IT Cost Model is compatible with any activity based costing method, but also with more traditional cost accounting, and it will help you to prioritize projects and retire or restructure services, applications or whatever components needs attention. It will also enable fair recharging and internal pricing. All this simply because you will know what it costs to produce each individual component. And for those Lean Toyota fans out there, in a market economy who set the price? Profit = Price - Cost. Understanding cost is key.

To execute this IT Cost Model we usually need information from a number of different sources; PPM, ERP, HR, ITAM, Service Desks and all the excel spreadsheets used to do department, cost center and service budgets.

In addition to the systems mentioned, the key component is a robust and user friendly Service Catalog where we can manage requests, SLA's, contracts etc. but more importantly where the we can design, budget and recharge all these services back to the business, catering for both B2B services such as IT Consultancy and the Middleware Backbone, and B2C services such as Workplace, client applications and helpdesk.

I'm convinced that in order to execute Service Portfolio Management, you need to get the budgeting and recharging right. You need to follow the money.

Share this post:  

 

By: Jan Christiansson
Jan Christiansson is Director of Solution Sales at CA Technologies, tasked with developing Service Management strategies and propositions for Europe. Jan has over 20 years of IT experience in various industries and has been working with ITIL and Service Management since 1998 and at CA since Y2K in services...
Read More..

Is your IT department developing holes in their shoes?

Published: November 16 2010, 01:01 PM | 1 Comment(s)
by Robert Stroud

To follow up on yesterday's blog post, I met recently with the Operations management at large financial organization and he mentioned to me the requirement for IT to deliver innovation, maintain the expense line, yet rapidly grow capacity to deliver innovation with the business.  This is a story that many of us are familiar with. With the recession we have cut IT to the core, grinding out all excess with automation, virtualization and more those more advanced rationalizing services and systems.  The growing dependence on technology for almost every business system is being realized with the continued growth in demand on IT for innovation with no slowdown in demand in sight, if anything its going to grow!  All this capacity is being delivered within the constraints of the IT budget, headcount constraints. The IT organization is operating within the constraints afforded them and  are operating "Lean and mean" and something has to give and that has been the investment in internal systems. 

This was similar to the conversation that I had with the CIO of large manufacturing organization, who described a similar series of symptoms.  He mentioned to me that IT is rapidly becoming the "cobbler's children." We're so busy meeting external demand that we cannot deliver internal systems that deliver efficiencies and sooner or later this will come back and impact us.

That said, with the business now becoming totally dependent on IT, quality of service is a key component and with the continuing growing demand for innovation, CIOs are being faced with the decision to choose between projects selectively and it is getting harder to justify investments in internal management systems.  Recently at a major governance conference I was speaking with an analyst who mentioned to me that costs of projects need to include not just the project development costs, additionally projects should include the operational costs to run and manage the system for the period of its operation - this will provide a complete cost of the system being implemented allowing operations some breathing space whilst new technology and solutions are considered.  Another aspect of full lifecycle cost visibility is that some projects that are funded may not be if a full picture of the costs where known or alternatively some different sourcing decisions maybe made. 

The reality here is that if IT doesn't soon provide full lifecycle cost transparency it will happen though other means....

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

More Posts Next page »