Doing IT Right

The CIO or IT head today is caught in the middle of two extremes. On one

side, there's the burden of managing and maintaining an IT infrastructure and

its complexities. On the other are the users and the management who expect an

easy to use IT infrastructure that also helps with business growth. Both of

these are tough challenges, and can't be achieved without a strong vision.

After all, successful projects are the result of successful leadership, and in

order to be successful, you need well-defined objectives and a clear-cut

vision. 

In our survey this time, we started off by asking the respondents to define

what their vision was for their IT infrastructure. By and large, the responses

revolved around creating an IT infrastructure that helps meet business

objectives. It should help reduce the cost of doing business, enhance the

revenues, and enable better decision making, as one of the CIOs put it.

Availability was another key objective voiced by many respondents. Likewise,

scalability, keeping IT simple and user friendly were some of the other voices

we heard. The point is, only after a clear-cut vision has been defined can the

right set of practices be evolved. So what are these practices? This story

presents some of them based on our survey.

There's no single set of practices that can be considered as the ideal set.

It all depends upon what's top priority for your IT infrastructure, which in

turn depends upon the nature of business that your organization is into. Not

taking any names, we found that the CIO of an international hotel chain spent

more time optimizing the company's WAN links and managing the highly

distributed network than on other tasks. This is understandable considering that

the setup would be highly distributed across the globe. 

Handling user complaints was top priority for the IT head of a large FMCG

company. So the key is in understanding what's top priority for your IT

Infrastructure and then finding the right set of tools, people, and practices to

take care of it. Just as your body needs a variety of nutrients for staying

healthy, your IT infrastructure also requires a mix of elements to stay up and

running smoothly. Some of these include the right set of monitoring and

management tools, skilled and efficient manpower, top management buy-in, support

from colleagues and business unit heads, the right set of policies and

practices, and compliance to industry standards. There would be more depending

upon the nature of business that your organization is into, but the ones we've

mentioned are by and large applicable to just about every organization. All

these elements, combined with an overall vision, make up the recipe for a

healthy IT infrastructure. Let's look at these elements in more detail along

with responses from our survey.

Which tasks to spend time on?



There are so many critical elements on the network, which need to be constantly
monitored and managed for uptime. It's no longer as simple as monitoring the

health of a single or few core servers. The days of client/server computing,

where you had distinct servers for different tasks is now passé. In

client/server computing, even if a single server went down, it was still

manageable because it would only affect one function. Nowadays, there's a

great deal of interdependence amongst various elements of the IT infrastructure.

Your ERP solution, for instance, might be running on a single server, but it

might also be using the services of a database server, a web server, a separate

storage device or network, the communication links, network, and various other

services, depending upon the setup. So even if one of these were to go down due

to some reason, it would affect the whole setup.

So which of these elements should you spend most of your time on? In our

survey, most respondents said they spent most of their time on combating

security threats and network management. Both of these were on top of their

minds. Some of the solutions offered to address the security issue were to keep

a close and constant watch on new vulnerabilities and patch releases. More

importantly, these patches should be properly tested and timely deployed.

Application performance management followed this as the second most time

consuming task, and WAN links optimization was the third most time consuming.

Very few of the respondents spent time on tasks like hardware maintenance and

management, managing the growing volume of storage, managing servers, and even

handling user complaints. It seems these are no longer critical tasks for an IT

head to look into. It's also possible that there are ample tools available for

automating and managing these tasks? We tried to figure that out from another

question on which management tools were our CIOs and IT managers using.

Which tools to use?



With so many different elements in the IT infrastructure, you need a multitude
of tools to monitor and manage it as well. Interestingly, more than 80% of our

respondents were using helpdesk management tools, and around 69% were using

bandwidth monitoring and management tools. We also checked whether the

respondents were using any tools to help them handle the management tasks they

spent most of their time on. Interestingly, there wasn't a one to one mapping.

To be more specific, of the people who said their number one priority was

hardware maintenance and management, nobody was actually using any hardware

inventory management or asset-tracking tool for the job. Of the people who spent

most of their time doing network management, only 50% were actually using a

network discovery and management solution. Likewise, of the IT managers whose

number one concern was application performance management, 60% weren't using

any application performance monitoring tools. This could very well be the reason

for their woes.

On the other hand, there were also tasks that were not top priority, and were

being handled by management tools. For instance, none of the respondents raised

storage management as a key concern, even though about 25% of them were using

storage resource management solutions.

Corporate IT Policies



Technology and tools aren't the only critical elements for managing the IT
infrastructure. Corporate IT policies are equally essential. In general, most of

the respondents were fairly satisfied with their corporate IT policies, but

there were a third of the respondents who were not really satisfied and would

have liked them to be better. Of the respondents who were moderately satisfied

with their corporate IT policies, most were also not too happy about the level

of involvement from their top management in drafting IT policies.

We also tried to analyze the level of involvement from the top management as

well as business unit heads in helping the IT team in enforcing corporate IT

policies. Our results revealed that there was a similarity in the thought

process of both. It's important to keep that in mind when enforcing IT

policies. You might have a similar pattern in your organization.

Drafting and enforcing policies is definitely an area where buy-in from the

top management and LoB managers is necessary. Even though they would not have a

high degree of understanding of technology, they would help you get the buy-in

from your users for using technology.

Not only that, but the responsibility of studying the feasibility of new IT

projects also requires the support of business unit heads. This is essential for

ensuring that IT is aligned with the business needs. Around 69% of the

respondents we surveyed said they had a committee comprising of the IT

department and business unit heads, which decides on new IT projects. While this

is a majority figure, it's also alarming to note that a third of the

respondents did not involve the business unit heads in studying the feasibility

of IT projects.

Compliance to industry standards



A lot of questions are often raised regarding adherence to compliance standards.
Should your IT infrastructure be compliant? If so, then what standards should be

followed? We asked questions related to compliance in our survey, and found that

69% of the respondents felt that it was very critical. More than 80% of the

respondents were following some national or international compliance standards.

Surprisingly, a fourth of the respondents were already compliant with the BS7799

standard for information security. Other standards being followed by some of the

respondents were ISO 27001, BS15000, ISO 9001, TS16946, and COBIT.

A majority of the respondents said that the CIO/IT head of the organization

was responsible for ensuring adherence to compliance standards. Only a fourth of

the respondents had a dedicated compliance officer.

The right manpower



Such a complex IT infrastructure, so many management tasks, and tons of
different tools to manage....how do you manage all this? It's not possible

without a proper IT team in place. You need the right skill sets to handle all

the resources. This is a challenge in itself because people with good skill sets

are difficult to find. Moreover, even if you find them, it's a challenge to

retain them, due to numerous reasons.

One, the IT infrastructure is not something you would keep playing around

with every day, so the challenge is primarily in building it. Once it's been

built, what remains is monitoring and management, which is a fairly mundane and

routine task. It can, therefore, become difficult to retain manpower for doing

this kind of task on a routine basis. As a result, what's needed is some

policies/practices/processes that would retain them. This could be motivational

exercises and re-skilling through proper training.

Interestingly, the biggest concern raised by our respondents with respect to

their IT teams was not finding or retaining the right manpower, but rather

updating their skills on a regular basis. Everything else was secondary. One of

the reasons for this could be the growing IT services market, wherein you can

outsource a host of your IT functions. That's why the data on the team

structures our respondents had was also very interesting.

A good 50% of the respondents had an equal mix of inhouse as well as

outsourced members in their IT teams for the job. Nearly 37% were happy having

their own inhouse teams and the rest worked completely on the outsourced model.

Two key reasons emerged for a completely outsourced IT management. One was to

focus on the core competencies and leave the rest for an external agency to

manage; second was affordability.



Having an outsourced team was more cost effective than maintaining an inhouse
team. Those who had their own inhouse teams chose this path because it gave them

the flexibility and control they needed of their IT infrastructure. Some

respondents also had an inhouse team due to confidentiality of information.

The reasons for having an equal mix of inhouse and outsourced were need

based. Where business knowledge and domains specific expertise was required,

in-house staff was kept. Non-core functions such as helpdesk management were

outsourced. Yet others had their IT infrastructure so distributed that an

inhouse model would have proven ineffective.