CA Community






This Blog

December 2011 - Posts

Are you ready to transition the manner in which IT delivers business value? COBIT 5 explained at the itSMF USA Chicago January 5 meeting

Published: December 30 2011, 09:36 AM | no comments
by Robert Stroud

Change is hitting us from all directions - from Cloud computing, the virtualization of everything, iPads, iPods, Android devices, cyber attacks and cyber-security threats. Technology advances and challenges that often come with them are not the only changes on the horizon. The new "digital natives" generation is hitting the workforce and is joined by increasing compliance requirements and what about the exponentially growing demand for automation!

Life in our tech profession is becoming increasingly complex, as will the role of governance. Our businesses are demanding innovation, agility, and rapid delivery at reduced cost, and also chastise us if we dare talk in TLA's or FLA's (three and four letter acronyms). It's not enough to just align with the business, we must FUSE with it. A critical component of that fusion is governance.

The Control Objectives for Information and Related Technology (COBIT) is a set of best practices (framework) for IT management, created in 1996 by the Information Systems Audit and Control Association (now know as simply ISACA) and the IT Governance Institute (ITGI). ISACA is close to completion of the COBIT 5 framework to help ensure that IT effectively delivers IT-enabled business value.

COBIT 5 leverages proven ISACA IP including COBIT, Val IT and Risk IT for a detailed framework for the effective governance and management of IT enabled business. While COBIT ensures that IT is working as effectively as possible to maximize the benefits of technology investment, Val IT helps enterprises make better decisions about where to invest, ensuring that the investment is consistent with the business strategy. And while COBIT provides a set of controls to mitigate IT risk in IT processes, Risk IT provides a framework for enterprises to identify, govern and manage IT-related risks.

Next Thursday, January 5, between 2 and 4:30 p.m. CT, I will lead a discussion on the updates to COBIT and how using COBIT 5 can help ensure value is delivered from your IT initiatives.

The event is being held at the Motorola offices, 1301 E. Algonquin Road, Schaumburg, IL 60196 with registration starting at 1:30pm. Attendance is free, although pre-registration is required. Register via the itSMF-USA web site.

More information is available on the itSMF Chicago Local Interest Group site - http://chi.itsmfusa.org/.

This blog also appears on CA Technologies Project and Portfolio Management blog.

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

The invasion of consumer devices has begun – and it started with that gift under the tree

Published: December 28 2011, 03:18 PM | 6 Comment(s)
by Robert Stroud

I recall all those Christmas Day meals in Australia eating turkey with my family with temperatures approaching 100 and wondering what it would be like to eat my Christmas Day bird in an environment more appropriate (i.e. cold and white). Sadly, this year the temperature in my Northern Hemisphere home was closer to the temps in Australia than temps appropriate for snow. But as the tryptophan took effect - and no football or cricket to watch - the result was the same: my hyperactive mind slid into what I only hope was sleep, but possibly, it was a trance and the outcome was five predictions for 2012 and beyond.

The dream began with an overwhelming unstoppable invasion, not of army of soldiers, but of consumer devices. These interconnected, communicating, networked, untethered devices were everywhere. There were tablets, smartphones, netbooks, laptops, gaming machines and more. Each person brought with them multiple devices and greeted me with a request for an IP address and the password to my wireless network. As they connected they drove my home network to a crawl, but the clever ones who also had 3G or 4G access abandoned my slow "old fashioned" (or so they said) network for theirs. As we ate our turkey people communicated over these devices. And instead of speaking to me, my Grandson "Facetimed" me from the basement, when he could have simply screamed and I would have been down there in an instant. As plans were made for the New Year, calendars were updated in real time and changes were made to various devices used to record programs on their cable or satellite systems. Even my coffee maker had adjusted the morning brew time to sync with my schedule. 

As a result, prediction 1 for 2012 is the unstoppable bring-your-own-device train will leave the station and become business as usual in 2013.

Back in the office this week, my prediction gained further proof as the invasion of the consumer devices continued.

Colleague after colleague had a new tablet, netbook, smartphone or other device and they already were leveraging them for productivity improvements.

And I called a colleague of mine who is now working in the financial industry and he told me that effective January 1, his firm is no longer supplying new computing devices. The staff will be given an allowance to purchase the computing tool that they need to do their job and IT will be focusing on ensuring appropriate access to the appropriate information based on their location, roles and the role requirement. And all data will be stored centrally with connectivity assumed.

For those of you who think my dream and first prediction is fantasy, my experience at work and the message from my colleague indicate differently. The BYOD train is boarding now. It is a fast-moving train and unless IT departments jump onto it now they will be left at the station. I know that Risk Managers and Security Officers may see this is a risk to our most valuable asset - our information - and it could be if not handled correctly. BYOD is an opportunity for organizations to focus on securing the information and who accesses it from where and when and so on. In 2012 BYOD may start off as a trend, but it will end the year as business as usual. For many of you it started with that gift under the tree.

More predictions to come!

Magic 8 Ball image used under Creative Commons License courtesy of QnD2011. This blog also appears on CA Technologies Project and Portfolio Management blog.

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

Top 5 excuses for not aligning IT to the business

Published: December 21 2011, 09:43 AM | no comments
by Rich Graves

Although "align IT to the business" is one of my most un-favorite buzz phrases, it is critical for IT organizations to do. I've been a part of more and more discussions with organizations that are focused on driving business goals rather than technology ones. As IT organizations focus on agility and cost I often think about the reasons why some organizations are slow or outright unwilling to move toward business alignment. Here are five hopefully humorous excuses for not aligning to the business. After all it's now late December and digging deep into a heavy IT blog is not on the top of your holiday wish list. So enjoy what I hope is some minor comic relief during the end of year craziness. And hopefully no one relates to any of these excuses!

In David Letterman-esque style.

5. Priorities -- it's up next after our Windows 7 migration and our Exchange 2010 upgrade.

4. Our executives have iPads now. Doesn't that mean we are aligned?

3. I'm waiting for the cloud to do it.

2. ITIL doesn't have a book titled "Align IT to the business". But when it does I'll be sure to send my team to a certification class.

1. My successor will do it.

The #1 response is actually not funny at all. It's a concern for CIOs. Bottom line is if IT doesn't provide financial transparency and proof that they are helping drive the business, then the organization may find someone who will!

Share this post:  

 

By: Rich Graves
Rich Graves is a Senior Principal Product Manager at CA Technologies. Rich works on a team focused on strategy and innovation for the Service & Portfolio Management Customer Solutions Unit. During his eleven-plus years at CA, he has focused entirely on the Service Management and support market segments...
Read More..

Is your IT organization on its way to extinction?

Published: December 20 2011, 09:02 AM | 1 Comment(s)
by Robert Stroud

We've all seen headlines like this before, but it is time for IT to finally take notice. IT must become a value-driven organization, demonstrating its contribution to the business whether you are publicly traded organization or a government entity. The IT organization has to communicate to the business in business terms NOT IT metrics. This requires that the IT organization become fused with the enterprise, no longer running IT like a separate and untouchable line of the business. In this new IT organization, the CIO could even become the COO or owner of core business processes like Supply Chain Management (SCM). They will have ownership of technology, processes, and most importantly process outcomes -- that will be measured in business, not IT Key Performance Indicators (KPIs).

This is certainly not a new line of thinking - we've been headed down this path for quite some time - but never has it been more imperative for IT to actually heed this advice, or risk becoming completely irrelevant.

Recently I visited a financial organization that has an extensive set of KPIs. Unfortunately, they are all technical metrics and the business didn't see any value in them. Their challenge is to migrate from the traditional IT organization to one that is a value-driven organization. Now that sounds simple on paper but it a little more difficult to do in practice. 

So how do organizations transition? First, they need to understand where they are and what their current delivery model looks like. This uncovers insights into where a company is in the innovation cycle and the types of changes that may be required.

Typical characteristics of the different types of IT organizations include:

Traditional IT Organization:

This organization is typically based on ownership of assets and focused on process optimization. IT is typically a cost center and operates as a back office utility that focuses on efficiency with the delivery of predictable and repeatable results. Process reigns supreme. Innovation is supported, but often the business will perceive IT as difficult and adding little value given the pain to innovate.

Running IT Like a Business:

This IT organization uses a service portfolio approach with a focus on meeting Service Level Agreements and captures implicit cost/benefit relationship data that the business expects. It runs like an external service provider with the main objective to comply with performance goals. This organization will measure and report on performance metrics and not business performance indicators.

Value Model IT Organization:

The value model is the most mature.  IT is no longer running IT like a business; instead IT is fused with the enterprise. In this model you may often see the CIO becoming COO or owner of core business processes like supply chain, CRM, etc. Ownership of technology, process and process outcomes is handled within one stack,  and all reporting is done in terms of business performance KPIs such as profitability of a service in business terms, costs per customer and so on.

Experience tells me that approximately 10% of enterprises are currently in the value-driven state, and perhaps surprisingly, many happen to be in financial services or pharmaceutical industries. Fundamentally these organizations are subject to compliance requirements in financial services and pharmaceutical regulations and commoditization of many of the services offered.

The majority of IT organizations are process based attempting to become service based. The challenge for those that are beyond the Traditional IT model is getting a clear view of the business service and implementing service models that visualize business services. The secret of success with this effort is to accelerate the move to a true service portfolio at the business level first, with clear metrics (including cost) before pursuing extensive process optimization.

In short you need to consider starting over with the portfolio, as you cannot optimize services if you don't know what they are.  The secret here is to not attempt to boil the ocean, start small and then add additional services over time, so you have to be selective and prioritize.

What is your experience transitioning from one state to the next? What tips would you share with other IT professionals to help them reach the desired value-driven state?

Share this post:  

 

By: Robert Stroud
Robert Stroud serves as VP and as Service Management, Cloud Computing and Governance Evangelist at CA Technologies. Robert also serves as an International vice president of ISACA, is part of the Framework committee and was the former chair of the COBIT Steering Committee. Robert also serves on the itSMF...
Read More..

Problem Management sits alone in the corner and cries

Published: December 19 2011, 07:56 AM | no comments
by Rich Graves

Problem Management sits alone in the corner and cries and cries. It's the loneliest ITIL process as it's always the last one picked to play on the Service Operations team. Poor little Problem Management sits and watches while Incident and Change Management get to play. And Configuration Management gets to play too, even though it is a complete mess and isn't even wearing shoes.

If you are a Problem Manager or have a friend or family member who is one, then you know how it's a painful and thankless existence. One probably filled with therapy sessions and weekly rants about how no one wants to fund their process. Yes, Problem Management is the long forgotten ITIL process that everyone says "we'll get to that after we do Incident, Change and Configuration management perfectly." And if you wait for perfection of those processes you will be waiting a very long time.

And let's be honest: root cause analysis is boring. Who wants to deal with that all the time? I'd rather just restore service and move on. What's that you say? Eliminating the root cause could prevent further outages and free IT from dealing with critical incidents? OK then. We need to do Problem Management.

So why aren't organizations focused on Problem Management? I think most IT departments continue to fix the challenges they have with Incident and Change Management (and yes Config too) thus hoping that they will eliminate or reduce the need for Problem Management. Why start a new process/initiative when there are so many open issues with the already implemented ones?

I also don't think many organizations have the ability to put into place a process that has major long term benefits but short term costs.

So why is your organization not doing Problem Management? Can this be part of your New Year's resolution?

If you are doing Problem Management today, how did you get the project started? Please share.

*Image courtesy of Powerhouse Museum.

Share this post:  

 

By: Rich Graves
Rich Graves is a Senior Principal Product Manager at CA Technologies. Rich works on a team focused on strategy and innovation for the Service & Portfolio Management Customer Solutions Unit. During his eleven-plus years at CA, he has focused entirely on the Service Management and support market segments...
Read More..

More Posts Next page »