Showing posts with label IT Governance. Show all posts
Showing posts with label IT Governance. Show all posts

Monday, February 10, 2014

And they lived happily ever after !

I had this interesting debate with an aspiring CIO on my earlier blog “The Perennially Dissatisfied User”; he talked about some organizations not really having this problem where the users kept on finding faults with everything that IT did. They are a satisfied lot if not delighted; at least they do not berate IT on everything and there is an equilibrium and harmony between the teams. The camaraderie lends itself to discussing what works and finding opportunities to solving business problems or creating new ideas to explore.

Though far and few there are such organizations who have found peace and a process design to make things work collaboratively rather than be at each other’s neck all the time. IT is seen not just as a service provider, but as an enabler and partner who can help them achieve success. Not that they do not have conflicts, they are healthy debates and resolve them to move ahead or agree to disagree. There is mutual respect for the profession and competency each brings to the table. How does this state of being come into existence ?

The foundation of any such partnership is laid over a period of time; it is about creating an engagement process which outlines the boundaries and acknowledges expertise where it exists. The governance is democratized in a way that everyone understands the implications and there is a platform to resolve open issues. Across organization layers exceptions are discouraged and do not have to become you versus us; there is no across the table creating two sides, there is only one side which benefits the function and company.

Business processes and customer expectations are open to discussion and so are technology choices; the final decision and accountability are clear in their design. Sign-offs is achieved in time or if there is a delay everyone is agreeable to the rationale. It is not about whose budget it is or who is funding the project or purchase; it is about what is the value the solution creates for the enterprise. It requires consistent maturity on part of everyone to ensure that this works. Thus success rates are higher than industry benchmarks.

There is clear communication of expectations, be it hardware standards for new devices or restrictions on access to applications or internet. Decisions on solutions are based on merit and agreement on the metrics used with everyone collectively aligned. Thus everyone works towards the common goal and thereby leaving no room for fault finding should things not work out. Whenever priorities are competing with each other for budgets or resources, the group is able to reason it out and come to an agreement on the way forward.

Escalations for exceptions are pushed back to the business and IT leaders to resolve. Policies are simple yet effective in their intent and well understood by everyone. They are living documents which are frequently reviewed against changing business environment as well as dynamic technology landscape which shifts expectations and the way of working. This keeps IT infrastructure and environment simple to govern and manage. Shadow solutions are rarely seen in such organizations with high levels of engagement being the norm.

Sounds too good to be true ? Organization culture plays an important role in facilitating this. I have seen some enterprises embrace this so well that they become the poster boys of how to use a specific technology or solution. Business CXOs talk about success stories and benefits accrued acknowledging the role IT played in their ability to win. The CIO persona and behaviour plays an important role and s/he shuns pure technical discussions and focuses on how to help the company stay a leader. IT vendors love doing business with such companies.

Is a transition to such a nirvana state possible ? Can sustainable change be made for good ? I would say “conditions apply”. To begin with the organization culture has to be collaborative and progressive; the company should be profitable with the appetite to spend, else the discussion will always be on cost. The CIO should be articulate, know the business and have skills to keep his team cohesive and motivated. When all these factors come together then you have a recipe for success that everyone talks about !

Monday, December 23, 2013

Enterprise projects versus Government projects

“Did you know that the government is the largest adopter of cloud computing ?” asked a cloud service provider trying to provoke the group into a discussion on why enterprises are not embracing his solution. One amongst the group of CIOs retorted back, “Do they know what they are doing ? And with no budget pressures or ROI to demonstrate, how do you equate their reality with ours ?”. Before it became a slugfest between the vendor and the CIOs, the convener intervened; but that had me thinking about context really being different ?

Over the years I had the fortune to meet many people from many countries who headed government projects. Some of them were qualified bureaucrats, some with backgrounds similar to current CIOs or project managers, and a few with no formal IT backgrounds. Their responsibilities were comparable to the enterprise equivalents and the only differentiator in most cases was the scale of operation. The projects they worked on were in many ways similar and quite different at the same time.

G projects especially that revolve around governance are humungous by nature as they impact a very large population (number of users); the complexity varies depending on the process or function. You could draw parallel with large enterprise CRM projects or for that matter self-service application deployed by Banks or telecom service providers. On the other hand there are also conventional automation projects akin to what every CIO and enterprise does as a routine with a view to create operational efficiency.

Enterprise IT drivers and critical success factors comprise on-time, within budget, business functionality and/or benefit and nowadays usability across platforms; corporate project governance keeps everyone on their toes. I am sure that G projects too have somewhat similar drivers and accountability to internal stakeholders. Circumstantial evidence would however point to the fact that the percentage of G projects meeting the success criteria is far lower than corporate. To the taxpayer who funds these, there is limited visibility.

One project lead narrated an incident where the ministers kept changing through the project leading to significant change in scope and timelines. The said project finally went live with 100% time overrun; he did not divulge the budgetary impact. Many years later it is cited as one of the major success stories though it still remains challenged for the masses that use it. Change management is more complex with multiple stakeholders who are required to sign-off and by the time they do, a new set of stakeholders emerges.

Some may argue that an IT project is an IT project and requires the same level of discipline of execution irrespective of where it is done. It is public knowledge that almost all G projects undergo severe review and the bidding process favours the most economical; at least for the initial bid, change requests is another matter. The corporate world is unkind to this flexibility though price war is getting messy for everyone. With different contexts then is it then fair to compare an apple to a pineapple ?

Multi-year projects are passé now though most G projects are that way; maybe they now factor in their unique reality and thus allow for higher latitude than available to a CIO. Project governance, reporting and transparency is not common to all; not too long ago a high profile G CIO was shunted out as he was making many uncomfortable with his open to all reports. He took a leaf from acceptable good practices but the plans, ideas and governance were not acceptable to the well-entrenched way of working.

While we acknowledge the differences in context and realities, I believe that the comparisons are unfair to both. Corporate business entities will always be more aggressive in their approach to capture the first mover advantage or adapt technology for sustenance and survival. They seek market share, profitability, growth and much more. Most Government projects on the other hand do not have a timeline that is critical and therein lays the difference. I wonder if G projects were to be run like corporate projects what would happen !

Monday, January 07, 2013

The CEOs pet project or the Emperor’s New Clothes


It was evident that the project wasn't going anywhere in a hurry even though the CEO had endorsed and inaugurated it in a gathering of all key stakeholders. It was (had become) the CEOs project which no one believed in. The floundering state of affairs had the IT team and the CIO wondering on the steps they could take to come back on track. After all abandoning was not an option considering the large sunk capital investment and the CEOs belief. The CIO started asking around in the network to explore possibilities.

Almost a year had elapsed since the licenses were procured and the hardware installed; everyone had delivered to promise more or less within the timelines they had agreed to. The IT team had done their bit and ensured that everything worked the way it should. None of the business heads or the key users believed that the priority set by the CEO mattered; their level of thinking was far removed from the ideas perpetrated by the CEO. This disconnect resulted in sporadic half-hearted participation.

The IT team discovered bottlenecks in the master data, correlations between systems and disparate formula for the same KPI across functions. Getting everyone to the same platform was resisted actively or met with indifferent attitude and claimed conflicting priorities. The CEO in the infrequent status meetings pushed the CIO and the team with little change in outcome. The CIO explored all advice thrown at him and decided to take a few bold steps to recoup the situation.

The starting point was revisiting the outcomes expected from the project; what is the need ? Who benefits from it ? Do expected key users feel threatened with the new process ? Is there a problem with the technology ? Did we get the architecture right ? Are internal and external resources deployed the best ? Were timelines set realistic ? The answers were what he thought they would be. Everything was fine, it is just that people nit piking and splitting hairs, blaming the tools and the result.

So what were the real causes of the lack of traction and belief ? Evidence pointed to the fact that the CEOs thinking process was ahead of the curve which his team found it difficult to connect with. Sycophants in the team prevented others from raising the issue and everyone was on a merry-go-round. End result, the CIO was left with the orphan baby crying for attention and an adverse impact on his performance bonus. So he had to find a solution and that too quickly.

Working diligently through the layers with open communication flowing through the hierarchy, the IT team and the partner worked step by step resolving all direct and ambiguous queries. External Subject Matter Experts were brought over the next six months to educate the users on why the CEO defined path was the way to go in the future. Global benchmarking helped in reinforcing the way less trodden locally. Finally one business head saw the value and agreed to be the guinea pig and the proponent.

The BU head worked with the CIO for further six months reaping the benefits and promoting the cause to his peers who grudgingly began to acknowledge the benefit. The CIO pressed hard this time and found no push backs  The acceptance and traction was good. Three years since the start and two years from the time the problem was elevated, the solution was a big hit. Everyone quoted it in internal meetings and external seminars as the strategic differentiator. People raved about it as one of the best implementations.

Incidentally the CEO had moved on just when the project started turning around. His last words of advice to the CIO that he believed in the solution, he should continue to pursue it. We all see such favorite projects of CEOs and other CXOs faltering after a great pomp and show. They take away a lot of energy, budgets and resources to see through to fruition though rarely anyone wants to challenge the need or the relevance at that time. The emperor’s new clothes will always be a parable with learning for everyone.

Monday, April 16, 2012

OMG = Outsource, Manage, Groan


My CIO friend was looking glum, really glum if you know what I mean; and he is not the type who normally gets harried by issues, always cheerful, and willing to help others. He goes around telling people about thinking positive and choosing your attitude. It was surprising to see this side of his demeanour. So I asked him about the root cause of his worries.

He has always been a proponent of outsourcing over his illustrious career spanning more than two decades, more like a trendsetter than a follower. In that he had worked with outsourcing companies large and small, local and global, structuring large deals that were acknowledged and appreciated by the companies he worked for as well as the vendors. When someone needed advice on managing tricky situations or contracts, he was the person they approached.

Building on an existing contract that did well he had extended the scope of services and support for a longer tenure. Considering that the outsourcing vendor had been working with him for a long time it was seen as a natural and logical extension. There was merit and value in the deal for both sides.  It was like a no brainer deal. Going into execution he did not foresee any challenges barring the initial teething troubles when any new service is commissioned.

The slip between the lip and the proverbial cup or intent to execution started going awry very quickly. Process review and tool deployment planned, the timelines slid with consistency that was expected of improvements. Existing services that had been working well for many years also started deteriorating. Monthly review meetings attended by increasing levels of management made the right noises but delivery failed to align to commitments. Whatever happened to ITIL led SLA and global best practice ?

I was surprised to hear of his misery considering that the relationship with the vendor preceded his arrival into the company and that successful outsourcing was child play for my CIO friend. Large deals have a way of coming to life on their own; they do not always follow a predictable pattern, instead they find their own lowest common denominator in which they settle down before improvements begin. He acknowledged this hypothesis and queried how should he respond to adverse business impact or disruptions to critical business processes ?

This was discussed in the review meetings and the team said they were committed to making amends. Reality being different, he was exasperated with selective and partial information sharing. It is not the way relationships are built and sustained. What causes this gap ? I do not believe for a moment that there is mal intent present; but how to bring the train back on track ? Was it about transition from courtship to marriage predicament where partners take the relationship for granted ? The nuptial agreement spelt out everything, but … Not wanting to proffer advice to the wise, I sought his game plan.

Forget the SLA, the contract, that can come back later; it is people who make things happen. For the situation to change, the people have to be brought back to the table with a rigour to the review that sticks accountability to senior leaders and individuals. Review and monitoring by the day on the plan by everyone and change people if they are unable to run with the required speed. Keep the pressure up until they deliver or want out of the relationship. It is critical and important to keep the end objective in mind, and that is linked to business expectations and improvements.

I wished him luck and promised to connect back in a few weeks again.

Monday, January 02, 2012

Proactively Resistive


Uncertainty is certain, that is the maxim of today and reality for all of us individually as well as for enterprises. A repeat of the economic downturn of a few years back or worse, that is the question everyone is pondering over. When the sentiment is down, the first casualty is perceived risky innovative propositions. People withdraw into their anxieties and work to keep status quo. Any remotely disruptive thought is beaten black and blue unless inaction threatens existence.

So what does it do to the IT budget and the CIO who is being challenged to do more with less and find resources to create efficiency ? How can operating expense be lowered when a large chunk of the allocation is to paying license fees and annual charges for the large systems ? Cloud may shift some capital expense but does not take away the payout for license and support. Can the business critical solutions be shifted to open source ?

Even if the shift to open source was possible for some processes, the core ERP systems are the ones that will be resisted by the users; be it HR or Finance, they do not want to shift away from already stable (take that with loads of salt considering the patches that continue to make the system unstable) and comfortable systems. The big vendors know that such a shift is almost impossible and continue to hammer the proverbial nails into corporates with increases year on year. So what is the way out for the CIO ?

In a CIO forum I met one of the thought leaders who has and would make it to every list globally. He ran a discourse on change that IT brings about in an enterprise. He talked about some of the change projects being executed by many global enterprises pertained to reducing expenses across the board led by IT. Mandated or democratically agreed to, these were being resisted by layers across the enterprise. He preached top-down and bottom-up collaboration to “sell” the ideas along with existentialist discussions. If we did not do this, then the sky would fall upon us.

It was nothing new as CIOs use this strategy quite well to garner buy-in for most projects. It is another matter that measurement of the impact is rarely done a few years later as the business context has changed, or we have moved to another crisis, or the people who made the case no longer exist in the company. Push ahead and ye shall be rewarded he expounded. Maybe I have become a cynic after trying this so many times to believe that it would still work in the current business environment.

I believe that irrespective of support levels across the enterprise, the CIO should continue to engage with the stakeholders to have them share the pain before embarking on the journey to create colossal change or transformation of the IT landscape. Finding business allies will be difficult, but the journey in solitude is a sure way to achieve martyrdom. After all we all live under the same sun but have different horizons. So lead the way, but make sure that there are others along with you, not following you.

The words that stayed with me a long time were “the cultural response was resistive, sometimes proactively resistive”. Hasn’t the world always been the same for the CIO ?

Monday, December 26, 2011

The Power-centric CIO

My marketing team is wresting part of my budget of customer facing applications and social media; at the same time funding for the new budgeting application is with my finance team. The IT budget is now almost 50% of what it was last year. How do I recover back control of my budget ? Wailed a CIO in a panel discussion, which was discussing amongst other things trends that are likely to be reality in the upcoming year.

The panel sympathized with the protagonist CIO and a few from the audience attempted to offer solutions. The debate threw up a interesting thoughts on how the budgetary control could be retained with IT. Ranging from bureaucratic rigmaroles to bullying and many other similarly trending behaviors, the suggestions were analyzed and discarded as untenable for either being against core values or not implementable without inflicting self-damage.

The IT budget has been a discussion point for some time now. It predicted the investments made by companies on technology enabled solutions. The industry created benchmarks around the investments linking it to the topline graded by industry. The maturity of IT usage was linked to this figure and anyone spending below the benchmark was seen as a laggard or highly efficient.

Then came research reports on innovation versus business as usual; ranging from 70% - 90% of the IT budget being consumed on keeping the lights on, while the remaining pittance being allotted to new projects or innovation. Anyone with BAU numbers under 60% was envied and deemed better aligned to the business. Models were created to turn the ratio upside down and reduce the operational budgets to strategic initiatives.

Economic cycles threatened available monies and CIOs were put under the scanner on every penny (or cent or whatever currency you like) they spent. Do more with less was the mantra and that is now the new normal. Every disruptive technology was seen as the next silver bullet to help the CIO in improving the dialogue on keeping the IT budget to a respectable ratio to the revenue. Cloud will save money, move everything to Operating Expense; virtualization will save the enterprise IT …

In one of the companies I worked the IT organization was empowered with the operating expense budget and incremental innovation on existing technology stacks. There was a discretionary budget for exploration of new trends and technology. New projects and initiative budgets were discussed with the business and IT advised the funding requirements which rested in the business P&L. This ensured that the accountability for the projects was an equal responsibility shared between IT and the function. The success rate was high and everyone loved IT. Since then I have followed this practice successfully in every company.

I believe that keeping the number in the CIO spreadsheet or the business spreadsheet does not take away the control from either. Mature enterprises and CXOs work together to solve real business problems and not bicker over where the budget lies. When was it about control or the power of the budget, large or small ? If the CIO is partnering with other CXOs and is focused on the corporate agenda, then it is about getting things done irrespective of where the number lies.

Does this insecurity befit the CIO ?

Monday, December 19, 2011

Unraveling BYOD/T

The one trend that everyone is talking about and which figures on every list (priorities, trends, technology, whatever) is Bring Your Own Device/Technology. It has had proponents and opponents from various quarters within and outside the enterprise. Opinions and views, recommendations and pitfalls, management tools and security concerns, the list is endless and continues to keep the CIO bewildered irrespective of whether s/he embraces BYOT or not.

From what I recollect, it all started with the iPhone and then extended to tablets, laptops, and what have you. Not that earlier personal devices did not connect to the corporate network; they did on the wire and then over the air, if you will remember devices with a technology called “activesync”. The early phones offered limited connectivity and as the network improved and so did the technology, browser based apps started appearing. The resident app followed soon enough.

I don’t remember all the devices that I used over the last decade and longer being provided by the company; which would imply that we did have a lenient policy even before the BYOT buzz appeared and started haunting every technology professional. The early PDA which eventually integrated the phone had limited use and was not widely prevalent due to unwieldy size and interface. Except for the early large form factor devices, it was not a statement to make.

Evolution of the device and the network created new possibilities and the scattered raindrops became a flood; apps for everything and power in the hands of the executive with no constraint on time. Business impatience became the hallmark of new technology deployment to swamp all available and unavailable time. The CIO built layers of infrastructure, applications and security to manage the demand. It did not matter who or how many used it; if it was possible, then it had to be available.

The democratization of information worried only the CIO until stories of compromise started spreading. Compromise not always by the external world, but bits of information scattered across slowly fading away with exits, ignorant employees losing devices or passing hands within the family. Enterprise liability driven by law and governance suddenly finds itself at loggerheads with BYOT.

Depending on the country of incorporation and most probably operation, the laws require stringent compliance. BYOT contravenes some with liability creation for not just the CIO but the CEO and even the global HQ. A cyber law expert thrust the fear of the law of the land to listening CIOs who cringed with every clause and interpretation of impact to the executives and the enterprise.

So what are the choices available ? Will the CEO not want the next new device on the block to be connected to the corporate infrastructure ? Does s/he not evaluate the ramifications to the enterprise ? Is ignorance a good excuse ? I believe that the CIO needs to raise the bar with heightened awareness starting with the Board and then cascading downwards. It takes only once incidence to create collective pain. CIOs can address the contingent liability with reasonable due diligence, control and documentation to dampen down the impact.

It is not going away, but what it means to you is up to you. BYOT = Bring Your Own Trouble, or BYOD = Bring Your Own Demise, or BYOD = Bring Your Own Destiny, or BYOT = Bring Your Own Tension, or BYOT = Bring Your Own Threat, or BYOD/T = ? You decide !

Monday, August 01, 2011

Surviving Audits

Once upon a time (actually not too long ago) a company and its audit firm lost their marbles indulging in innovative accounting and logic belying practices. The event resulted in the first shutting down and the other being dismantled. Hapless citizens and investors who put their faith in these lost their financial safety nets and were left poorer. The aftershocks felt by the rest of the companies created an industry around consulting services. SOX became a bad word for all CXOs and everyone dreaded facing audits. Compliance gained prominence and everything else was subservient to it.

IT being the foundation of processes and information enabling the enterprise came under the scanner; it was not enough to demonstrate that data integrity and consistency is maintained, it was also important to provide evidence that others in the organization did not violate process that could result in potential loss of control. Thus as the custodian of the physical information assets and the administrator of the logical processes, the IT organization had to fend off auditors of all types at unnerving frequencies.

Consultants thrived on FUD (Fear, Uncertainty, and Doubt) factor as non-compliance had severe ramifications for the CIO, CFO, COO and the CEO. Perceptions of risk heightened the tension with any risk classified as high needed immediate attention. Tolerance levels of Boards tended to zero and Risk Committees hounded the functional heads to comply by the written word, who turned to the CIO to address the sane and inane collectively.

Whether it is Internal, Statutory or Third Party Audit, the basic intent is to review process execution consistently against good practice and compliance to stated policy. Additional frameworks on quality, process maturity, security and others provide the enterprise incremental value over competitors. Policy once stated requires alignment with the real world to ensure relevance; thus periodic review is critical. When regulatory restrictions impose process change like SOX or PCI-DSS, HIPAA, the enterprise has limited choice but to comply. Some industries are more regulated than others; some companies pride themselves on their GRC frameworks, the rest follow the path of least resistance.

So what are the strategies the CIO can adopt to ensure that s/he does not get beaten up at every audit ? CIOs should partner with their Internal Audit functions to work with each functional head and process owner to review and validate not just the process, but also the management of exceptions. If Internal Audit is unable to provide the necessary attention, seek external help; but do not ignore it. S/he should create clear accountability and transparency of every task across the cross-functional teams involved in the execution. It is important to note that people are the weakest link of any process discipline. Internal process champions or BPM experts are invaluable in the quest towards excellence.

Compliance is non-negotiable; our shareholders and regulators expect every part of the enterprise to conform to the laid down policies and principles. Good corporate governance expects no exceptions; despite all the controls we still come across black swans that disrupt the equilibrium and raise the difficulty level. Unfortunately the enterprise CXOs and the CIO have no choice but to run faster to stay in the same place.

Monday, June 06, 2011

Is Outsourcing cheaper in the long run ?

Once upon a time many moons back, the IT industry discovered multi-shore sourcing, I use this term to encompass all types of (out)sourcing initiatives, and with that came long-term contracts, 10 years was normal, 5 was seen as short-term. A lot of these that termed themselves as Strategic Sourcing also built in innovation, new technology, business process linked contracts with broad intent on changing market and business dynamics.

The fever spread across the globe and no markets or sectors remained untouched. Big or small, almost every company was expected to embrace this new wave. The euphoria within the enterprise as well as IT companies was such that companies that did not enter into such arrangements were seen as stakeholder unfriendly or just plain dumb for not acquiring the obvious value.

As the years passed by many companies reported rumblings of discomfort and missed expectations. Analysis appeared to indicate specific issues with companies and individuals for not putting in their best effort, safeguarding the model with zeal lest the industry collapse with an unsustainable framework if there were indeed cracks in the carefully crafted Contracts, Service Level Agreements and Reference Architecture that represented the blueprint for the future. Business, profitability, political and other pressures forced reviews and scale down.

Prudent and rigorous reviews also exposed that long-term contracts had advantages of consistency and predictability, but lost on taking advantage of swings in the IT industry as well as did not bring in the level of efficiency or capitalization of quick market trends requiring agility that was possible with short-term relationships or with the ability to review and recast the terms of engagement say every alternate year. This was reflected in the drying up of the decade long deeds and most engagements focused on a 3-5 year term. Maybe “familiarity breeds complacence” also took root with in most cases both parties working hard to keep the marriage going.

There is no implication that these did not deliver to promise; some of them did and continue to do extremely well; some required significant investments in governance. Leaving aside labour arbitrage, the value captured did stretch the boundaries of discussion and measurement models.

New models now seem to be emerging with focus on outcome based payment schedules, collaborative investments in new technology exploration, but the basic framework has survived the troughs and waves of the economy and resultant impact. The challenge of growth (manpower retention) has mutated the needs and solutions into new forms with service providers hungry to get back to growth of the past, but discarding the learning of unsustainable linear growth assumptions.

Outsourced contracts or strategic sourcing contracts will thus become expensive and non-tenable with linear growth not aligned to market/business or the (in)ability to manage sudden shocks or black swans that keen coming back to surprise us. Periodic review of terms of engagement even if they imply disruption is the need of the hour; the IT industry however is not very excited.

Monday, May 30, 2011

Don't turn my problem into your solution

It was an interesting meeting of a few CIOs with the debate revolving around IT Governance. From all types of models being discussed, the common subject of woes shifted to Business Intelligence. All the CIOs present had large investments in BI with varied degrees of success, some more than the others. Everyone acknowledged the presence of multiple tools and technologies with no single vendor’s ability to address the wide spectrum of needs. It was evident that their respective enterprises had reached a level of maturity in adoption of IT that would be the envy of many larger and smaller companies.

Later in the evening, the discussion continued over drinks and with rising spirits, the voices also became louder, the emotions hotter and the language looser. It so transpired that all of them had a few common service providers and solution vendors; stories exchanged stayed in the room but the lessons can be shared.

Most companies have common groups created with IT and Business participants to explore evaluate and decide on solutions. These heterogeneous groups are typically lead by the CIO or another senior IT leader who orchestrates the process. The process is similar across companies, with one or more of the following steps involving RFI, RFP, Demo/POC, Business case and budget approval, negotiation and commencement of project. A few vendors in their excitement sometimes try to take shortcuts which almost always results in unpleasantness for everyone.

But the more interesting phenomena occurs when solutions don’t really meet the functionality requirements by a reasonable margin, but the sales person in their desire to meet monthly, quarterly or whatever sales target pushes ahead with a desperation of a man clutching straws to save himself from drowning. Everything seems possible with a tweak, small code change, customization, bolt-on systems or to be released in the next version or patch.

The resulting tragedy of errors, omissions, round pegs in square holes and heartburn caused to the IT and business teams is imminently avoidable by following the process the way it should be, the urgency on the part of the sales person and his/her manager ensuring that targets do not override good business practices. It is not okay to withhold information or bend the process to fit the tools, neither it is acceptable for the CIO to allow leeway in the due diligence process. Even with rigor practised it is probable that some critical elements may remain uncovered. The Business IT teams will have to manage such exceptions (not a rule).

The luxury of time always eludes us in such activities; many a times deferred decisions put pressure on delivery of milestones thereby compromising quality or extended timelines and sliding targets to fix issues that could have been avoided with collaboration from both sides. Good practice is a result of everyone being on the same side of the table; a skilful CIO should and will recognize the body language when the problem is being twisted to fit the solution.

Monday, April 25, 2011

The micro-app nemesis

If you have looked for an app on Apple’s App Store, I am sure you have faced a Google search kind of frustration with hundreds of applications purporting to do the same stuff, one better than the other, or many times just a me too. So some of us end up downloading more than one to try and then decide which one is better; many a times we don’t end up discarding the others. Check around with friends who would have downloaded say an “Alarm Clock” and it is quite likely you will find that their app is different. You may be tempted to download that one too, just to try !

I met a CIO who was showing his angst on the fact that there were more than a dozen applications within his enterprise for travel approvals. While some were a result of “forgotten” acquisition synergies, the others were created by Shadow IT for departments to address short term need. These sustained themselves even after the corporate version was deployed. And now to top it all, almost all of them had mobile versions for different mobile devices thereby multiplying the number of micro-apps that were floating around.

The resulting collection of travel approval micro-apps exceeded a number that crossed the tipping point for the CIO. There was an uneasy silence on the table as she described the chaos and now the support expectations when some of them failed to work with the clamp down or rationalization of applications. Sympathetic nods followed as new governance processes were discussed and general agreement that the actions taken were fair.

Most of the micro-apps on the App Store are written by enthusiasts and programmers wanting to showcase their prowess. They test waters with free apps, and then add features and a tiny charge. Some start-up companies too indulged in similar bunch of apps on the store getting a few hits and lots of misses. How did this suddenly become an industry with 10 billion downloads in such a short span ? Because you can !

The simplicity and ability to create such apps is I guess one of the reasons that contributed to this explosion. Consumerization of the handheld device has given rise to the opportunity that had to be capitalized upon. The slowdown/recession encouraged the blurring of the lines between work and life, while everyone wallowed in the need to stay connected 24X7. The pressure is now on the CIO to stay ahead of the game and deploy even more processes that can be accessed on the mobile. Even if you have already formulated a mobility strategy, review it frequently to stay on top of the situation.

But what about the increasing number of micro-apps that are being downloaded, sanctioned or otherwise ? No one knows what kind of vulnerabilities they create; what will they lead to in the future ? Are they the future support nightmare ? Only time will tell; until then tread cautiously, create the micro-apps required, test the ones you may want to endorse from the store, and pray !

Monday, January 03, 2011

My CFO is my best friend

The recent past has seen many discussions, debates, as well as advice from anyone and everyone who has an opinion and finally some pieces of alignment between the CIO and the CFO. All of them make interesting reading, depending on whether you are the CIO or the CFO. Last week, my CFO and I were approached by a media house to do a story on our relationship and the CFO called to ask  "Is this a story"?

Almost every CIO (and I will not debate the merits or lack of) passionately believes that he should be reporting to the CEO or the Board. This is a demonstration of IT’s strategic intent, as the CEO has direct overview of the direction taken by IT and the influence it has on the business. Reporting to the CFO is fraught with pitfalls, as the primary discussion is around cost. While I largely agree with this hypothesis, a lot of equations changed during the downturn, as the CFO grew in his span of influence.

IT was at the receiving end to some extent, with squeezed budgets, investments becoming difficult and overall sentiment prevailing around cost containment. Organizations with good governance processes as well as CIOs who were aligned to the enterprise realities adapted quickly, and worked with the CEO and CFO to create models that worked for everyone. Innovation slowed in some cases, but did not come to a halt. On the other hand, some CIOs had difficulty in adjusting to the new reality as the CFO dominated the decision making process.

Gigabytes of information were created around this new paradigm; CIOs hating it and CFOs wondering about what’s wrong with IT. The strain in an otherwise cordial coexistence or tolerance became a sore point for the CIO who could only vent his frustration at the inability to break the deadlock — unwilling to recognize that change begins from self. In the last 18-24 months, I had many interesting discussions with CIOs who struggled to get on with the IT agenda. Not that this was universal; many adapted to the new reality. In the new normal, the baseline has shifted and the new paradigm is a way of life. The CFO is an integral part of the decision making process, and signs off at least large value investments or costs.

Coming back to the interview between my CFO, myself and this senior correspondent, the discussion was around the relationship, alignment, issues and challenges. The bantering between us left the reporter surprised, until it was clarified that I am the CIO and my CFO is indeed the person who manages the money (amongst other things). The stereotype CFO too has changed as the CIO has evolved; thus to expect a Bean Counter in every CFO is like expecting every CIO to go fix the CEO’s laptop or the boardroom projector.

CIOs who have cultivated a relationship with other CXOs (including the CFO) would wonder if this hype is created by consultants wanting to sell models of alignment or governance. My quip would be that you should invest in relationships with all CXOs. If you do not help them win, why should they help you?