Charles A. Araujo, Jr.

Checklist for Change

A client recently sent me this article about the utilization of checklists as we were going through some discussions on the implementation of a new ITIL-derived change management process. 

What I love about it is that it has nothing to do with IT.  It's about operating rooms.  Yet the lessons still apply - and my client was wise enough to see the correlation.  At the end of the day, most of what we do, well, isn't surgery.  It can be complex and can be incredibly important and risky for the business, but most of the time it's not life or death.  So where we can find lessons from people or organizations who are playing where the stakes are that high, we should look at them carefully and ask ourselves how we might learn something from their challenges and solutions.

My client did just that.  If you read the article, though, there is an extremely important piece of information that is easy to miss.  The checklist is important - but the real value comes from verbally going through the checklist as a group.  It is this interactive and interrogative process that creates the true power of the checklist - and when that step is skipped, the checklist loses its effectiveness.

I think that this is a perfect corollary to the Change Advisory Board (CAB).  There has been a lot of push recently to this concept of a "Virtual CAB" - a change authority body that doesn't actually meet, but reviews and approves changes based on a review of the RFC by using some automation tool.  Don't get me wrong - I'm a fan of the "Virtual CAB" for minor, low-risk changes.  But I believe that their use is becoming too prevalent and organizations, in their zeal for automation, often miss the true point of the CAB - to discuss and evaluate the risk of the change with all stakeholders to ensure that the risk has been adequately quantified, mitigated and accepted.  It's tough to do that with a click of a button.

So perhaps there is a lesson to be learned here.  We should use a checklist to help the CAB ensure that risk has been mitigated and that RFC approval requirements have been met.  But to really make it effective, we must require that the CAB does it verbally.  Maybe by doing so, we will get that dialogue that supposed to occur and perhaps we will begin to get a more complete understanding of the true impact and risk of proposed changes.  And maybe, just maybe, the process will work a little bit better.

Read the article by clicking here and see how you think you might apply it yourself.

The Fuss and Hype over CMDBs (aka "myCMDB")

We may have finally reached the pinnacle of CMDB hype with Managed Objects' release of their new product, myCMDB.  While I have been somewhat of a fan of Managed Objects, this one just has me completely baffled.  The press release hype is talking about bringing 'Web 2.0' to the CMDB.  Huh?

It seems to me that this is indicative of a general trend to make the CMDB so much more than it was ever meant to be...and in so doing make it more and more difficult to actually make it work.  Managed Objects is certainly not alone.  It seems as though there is a virtual land rush out there to see who can cram the most different types of data into the CMDB.

Call me a simpleton, but here's my take on effective CMDB implementations:

1. Keep It Simple - CMDBs (and really the Configuration Management System (CMS) - so we can avoid this whole discussion of one really big CMDB!) should be a relational representation of the core and critical assets that IT utilizes to deliver services.  Each organization needs to determine how deep that needs to go to be effective, but there is a definite balance point that must be found.  The more detailed the data, the harder it will be to keep it accurate.  So, the key point is to get the level of detail just "good enough."  IT people are sometimes their own worst enemy here - once we get a hold of this, we want to put everything under the sun in this wonderful, magical database.  Remember that we can provide access to additional detail and related information through the federation model, but when we are talking about what should be considered a CI there must be relentless restraint to keep the data model as simple as possible while still delivering data relevant to the delivery of service - just good enough.
2. Relationship Trumps Granularity - I always find it fascinating that so much effort is put into defining CIs to an excruciating level of detail, but little effort is put into mapping the relationships between CIs.  The truth is that it is in understanding the relationships that the true value of a CMDB/CMS will be found.  I believe that a CMDB/CMS that defines CIs at only a very, very high level, but maps their relationships effectively will provide significantly more value to an organization than one that contains infinite levels of detail about each CI and its various changes in state over its useful lifetime, but which cannot describe the relationship between each CI and others in the delivery of service.  Get this one right and everything else will fall into place.
3. Process is Still Key - ITIL is all about process (well, v2 anyway).  But when it comes to the CMDB/CMS, it seems that we throw process out the window.  Yes, I'm a big believer in discovery tools and application mapping applications.  But when it comes to maintaining the CMDB, nothing will take the place of a rigorous process.  Anywhere that there is a change to a CI, process should dictate how the CI data is updated in the CMDB.  This should be a key process activity tied to Change and Release Management.  It should also be incorporated into the Standard Change process that might be executed as a function of Incident Management.  The key point, though, is that if your CMDB is falling out of sync, it's a process failure.  Can tools help?  Sure, but nothing can take the place of a well executed, well managed process.

In the end, IT and the many wonderful ITSM vendors must resist the temptation to turn the CMDB/CMS into something that is delivered in and for itself.  It's not.  The CMDB is nothing more than a tool that provides appropriate and relevant data during the execution of a process, in the delivery of a service so that those responsible for the execution and delivery can do so effectively and efficiently.  A well implemented CMDB/CMS is one that becomes virtually transparent.  The data you need is available when and where you need it to get the job done.  If you're having to interact with your CMDB data directly - "Web 2.0" or not - well, you're kind of missing the point.

Changing Perspectives: Pena Pachamama, The Upside Down Map and the Meaning of ITIL

I spent Memorial Day weekend in San Francisco and got some much needed mental rest.  Over the course of the weekend, I had a couple of experiences that made me think about the meaning of ITIL, but it might surprise you what they were.

First, I stumbled into a fair trade shop in Healdsburg and came across a map with the fun title, "What's up? South!"  An image is below.  It was simply a map of the world printed "upside down" but with the name of each country, ocean, etc. printed "correctly."  The result is an entirely new view of the world.  If you step back and look at this with "fresh" eyes and don't let your mind automatically flip it around for you, you will realize how an arbitrary decision (who decided that north was "up"?) can inform our perspective to the point that we don't challenge it.  I must have spent 10 minutes just taking it in.

Later in the weekend, we were wandering down (or was it up?) to North Beach for some good Italian and rather than cutting over on Green as we had intended, we continued down Powell....and stumbled across this little restaurant called Pena Pachamama - an amazing Bolivian restaurant in the middle of Little Italy.  They had a Bolivian band playing which was followed by a Middle Eastern band - complete with belly dancers! 

It was quite an experience.  There were a number of locals who were obviously of Bolivian descent and they were interacting and dancing traditional dances to the band.  My wife and I felt like we had almost crashed a family party.  What I found most interesting was that while there were a number of similarities to my Mexican culture, there were also some very strong differences.  It was an experience that opened my eyes to a way of life that was both familiar and unfamiliar and challenged my perspective of what I would find in "Little Italy."

So what does all of this have to do with ITIL?  Well, maybe I'm turning into too much of an ITIL-geek these days, but these two experiences exemplify two of the greatest challenges that we encounter while trying to adopt ITIL within an IT organization:

• Recognizing that it is less that what we are doing is new and more that we are challenged to look at what we do and who we are in a different and new way
• Understanding that while all IT organizations come from a similar place, every organization has its own unique cultural elements that must be understood and accounted for in order to make an ITIL adoption successful

ITIL IS NOT NEW
One of the greatest challenges that we have to overcome is the recognition that, for the most part, ITIL is not new.  Most IT organizations are already doing large parts of ITIL in some way - you almost have to if you're going to function as an IT organization.  But like the map, ITIL is about changing how you look at what is already there and challenging some of the preconceived notions of how IT should operate.  Yet, when an organization embarks on an ITIL adoption effort, what's the first thing that they start with?  Process development.  There is always this significant effort involved with tearing everything down and "developing the new XXX process."

In reality, however, I have typically found that most organizations have a lot of the building blocks already in place.  It doesn't necessarily require that everything be thrown out.  What is really needed is a deliberate review of what's there, what's working and what isn't - and the conceptualization of the behaviors that will drive change.   It's all about organizational change - and that means changing perspectives and changing the assumed way of doing things so that new, more effective and efficient ways of operating can be envisioned.

THE CULTURAL QUOTIENT
Culture is a powerful thing.  Even when cultures come from a similar history and share many common elements small, subtle differences can have a profound effect.  My brief experience with Bolivian culture, contrasted with my Mexican upbringing brought that into sharp relief.  And so it goes with IT organizations.  Over the years, I have probably been on the "inside" of 30-40 IT organizations and no two are ever alike.  Sure, almost all IT organizations operate using a lot of the same elements.  There are only so many ways to structure an organization and most IT groups are responsible for broadly the same types of services, but the subtleties of how those services are delivered and how interactions take place between management and staff (among other elements of culture) make all the difference. 

So remembering that adopting ITIL is really about driving cultural and organizational change, you must understand the cultural nuances of your organization before you can set out to change it.  That's why an initial, singular focus on "process development" or any other type of process-focused work is often misguided.  The focus must always be on understanding and quantifying those outcomes that will support the goals of the business and then undertaking those tasks that will change operating behaviors in a way that will result in the desired outcomes.  Will the redevelopment of processes be required?  Probably, but as those process changes are rolled out, it must be done in the context of the unique and subtle elements of the organizational culture. 

That's why when it comes to ITIL, one size does not fit all.  Any attempt to adopt ITIL "out of the box" without applying the filter of your organizational culture and unique perspectives will find limited success, at best.  The contrast, however, is also true.  You can drive significant value for your organization, making IT more effective, more efficient and more business focused if you begin by embracing the role that your organizational culture plays in both your successes and your failures and by recognizing that you must change the perspective of how both of these are viewed to truly affect change.

The Maslow Adoption Model for ITIL

There appears to be a bit of 'Maslow Mania' taking root in the business press these days.  I've been a fan of his straight forward approach to understanding human psychology since I was introduced to his concept of the "hierarchy of human needs" by my dad as a kid.  But I really hadn't thought much about it or him until recently.

Over the past few weeks, I've been reading "Peak: How Great Companies Get Their Mojo from Maslow" by Chip Conley, the CEO of Joie De Vivre hotels.  As you might guess, he has used Maslow's theory as the basis for both his book and for how we runs his chain of hotels.

Then a couple of days ago, I read a great article from Baseline Magazine entitled, "Multiple Online Personas: The Choice of a New Generation."  In it, it discusses how marketers must start a new type of conversation if they are going to break through with what Gartner is dubbing "Generation V" - for Virtual.  The gist of it is that Generation V is not defined by age or geography, but by their desire for belonging, esteem and self-actualization, realized in online communities - the top three layers of Maslow's "needs pyramid."

So how can stories about a chain of hotels and retail marketers selling to an online generation and how they are using a 50+ year old psychology theory apply to the world of IT?

Applied to business, Maslow's theory is really about understanding a customer's needs. And let's face it, this is something that has not always been IT's strong suit.  But perhaps the most important thing that it can do is to frame an ITIL adoption effort.  One of the greatest challenges that an IT organization must overcome to succeed with an ITIL adoption program is to answer the question why?  Why is this project being undertaken?  Why is the investment of human and capital resources worthwhile?

These questions can only be answered by understanding the needs of IT's customers.  And Maslow's theory can help frame those needs.  Maslow basically said that humans (and therefore your customers) need five layers of needs to be met (paraphrasing a little): Physical, Safety, Belonging, Esteem, and Self-Actualization.  Chip Conley in PEAK boiled this down further into his Customer Relationship Model and identified three distinct stages in the relationship with your customer: Meets Expectations, Meets Desires and Meets Unrecognized Needs.

At it's core, ITIL is really about understanding and meeting a customer's base set of expectations and needs.  According to Maslow, until we've satisfactorily met that need, we cannot have a meaningful conversation with our customer about meeting any of their other needs.  So, why should you adopt ITIL?  First, because it is a key way in which you will help your IT organization meet the core, underlying needs of your customer.  Second, until you do that, you will be unable to move up the pyramid and find success with your customer at any higher level.

At the same time, when you begin an ITIL adoption it's also important to realize that adopting ITIL is also not enough.  While meeting their base set of needs is the first step, it's not what the customer really desires.  They are looking for solutions that will drive business value and help them succeed (personally and professionally).  The goal must be to enable IT to meet the "customer's desires" by enabling transformative uses of technology and ultimately identifying innovative ways that technology can provide competitive and differentiating advantage to the business ("unrecognized needs").

But none of this can happen until their basic, operational needs are met first.  So Maslow provides an incredibly useful framework for ITIL adoption: use it to meet the base needs of your customer, but only in the context of achieving a larger goal of business transformation that leverages technology for the betterment of the enterprise.  Not bad for a 50 year old theory.

Secrets of ITIL Success

I'm not typically a big fan of Pink Elephant, but SearchCIO recently posted excerpts from Graham Price's (of Pink) presentation at Pink's annual conference.  In it, he addressed the 10 biggest mistakes IT organizations make during an ITIL implementation - and what to do about it.  As I read it, I felt that it succinctly addressed the very common pitfalls that I have seen with ITIL projects.  There are other issues, to be sure, but what I particularly liked about his presentation was that he focused on the management and planning aspects of an ITIL adoption effort that are often overlooked or willfully skipped.

It's somewhat ironic that ITIL is all about process and management and yet when people embark on an adoption project, they skip over those very elements of the adoption process itself.  As in any project, an ITIL adoption effort is often won or lost at the beginning.  If you're about to start an ITIL adoption program (or restart one), this quick read will be well worth your time, provided that you take its lessons to heart.  Read the article here.

I'm curious to know what others think about this list.  Did he nail it?  What other mistakes would you have included?