Disaster Recovery, IT
Service Management,
IT Job Description, Sarbanes Oxley,
and IT Salary
Full news feed
December 24th, 2008
2009 IT Salary Survey Released by Janco
Janco has just released it 2009 IT Salary Survey
and it finding show that IT compensation has been adversely impacted by the down
turn in the economy, outsourcing,
lay-offs, and hiring freezes.
Improved Productivity and Reducing Cost a Survival Skill
In the downturn enterprises are looking for ways to reduce
expenses some eliminate staff others look for areas where usage costs are
reduced. Areas where many successful companies focus are:
Reduce power/cooling costs -
IDC, the research firm, estimates that for every $1.00 spent on new servers
today, an additional $0.50 is spent on power and cooling. In 2010, that ratio
is expected to be $0.70 per $1.00 spent for new servers. Begin by turning off
servers not being used and replacing older high power consumers and high heat
producers with newer more efficient ones.
Reduce complexity - Consolidate
multiple operating systems onto fewer servers. This will reduce operational
risk and operational costs that are linked to managing so many servers.
Clustering will benefit by having the option of "failing over" workloads to
virtual servers, reducing the operational costs of deploying standby physical
server machines that run in a "passive" mode rather than an "active" mode.
Taken together, these approaches improve the responsiveness of IT systems and
of the people who access them across the business, ensuring high levels of
availability and reducing business risk and operating
expenses.
Improve the management ofphysical andvirtualservers - Reducing the
total number of systems simplifies IT operations and impacts IT staffing
requirements. Importantly, downtime is impacted by having fewer individual
points of management.! Goinggreenacrosstheinfrastructure. At the same time,
business is being
Go Green - The process of IT transformation brings
the opportunity to change the IT infrastructure, supporting "go green"
initiatives by reallocating workloads to the sets of server and storage
devices on which they can run most efficiently and reducing total server
footprints through workload consolidation.
Regardless of the industry, the trend is clear: more businesses
require highly available solutions. Not only is this expanding along industry
lines, but we also see mid-sized companies requiring disaster tolerant
solutions. Janco has found that 18% of all businesses polled say they cannot
tolerate any application downtime. More than 60% cannot tolerate four hours
or less of application downtime. All told, more than 90% of companies surveyed
reported that they cannot tolerate more than 24 hours of application
unavailability.
By Industry Janco
found:
Manufacturing: Economic and competitive
pressures are driving companies to run as efficiently as possible.
Just-in-time manufacturing processes that coordinate shipments from suppliers
around the world demands 24 x 7 availability.
Retail: The critical applications include
credit card processing, cash transactions, point-of-sales data and enable
inventory and distribution require applications that are always available.
Distribution and Sales: Companies are becoming
increasingly dependent on a global economy. Many have established key
technology in follow-the-sun modes that require 24 x 7
availability.
Health Care: With the digitization of medical
images and patient records, retaining and ensuring availability of these
applications and files is beyond mission-critical. There continues to be a
pervasive use of technology in the health care field including the operating
room which is driving this dependence.
CIOs
and CTOs have many issues they must address when looking at overall performance
of the IT function. One of traditional ones is server monitoring.
Server monitoring spans three areas of operations: monitoring server operation
(the running status); monitoring server traffic (both in and out); and
monitoring the results of server use (keeping logs, statistics, and analysis).
This encompasses monitoring physical hardware, server performance, services, and
the network.
Issues with Server Monitoring:
Determining what needs to be monitored
No clear and holistic view of the data
Too many - or too few - "agents" for the
job
Too many manual tasks
Too much complexity and hidden costs
Hodgepodge of low-end tools
At the same time the role of the CIO and CTO is
changing as more enterprises more towards a "Value Added" role for the
Information Technology function. Those changes are depicted in the detail
job descriptions that have been created for all of the functions with IT --
especially for the CIO and CTO.
The 220 positions include all of the functions within the IT
group. The Job Descriptions have been updated to be compliant with
Sarbanes-Oxley and the ITIL standard. The job descriptions are all
structured to focus on "Best Practices" as defined by the IT Productivity
Center to meet the requirements of World Class Enterprises. They are ready to
use and easily modified to meet your enterprise's unique
requirements.
Disaster Plan - What to do after an Explosion, Terrorist Attack, or Other Random Act of Violence
After an explosion, terrorist attack, or other random act of
violence there may times there is a second event that cause as much damage as
the first so care should be taken and the following steps should be
taken:
Since
one event can be followed by another, stay alert. There may be more
danger yet to come.
For
protection, consider crawling under a table or desk and remain there for at
least 60 seconds.
Stay
away from windows, mirrors, overhead fixtures, filing cabinets, bookcases, and
electrical equipment.
If an
evacuation is ordered, go to a designated place. Make sure all staff and
others in your facility are accounted for. Do not forget handicapped
people who may need your help in exiting. Do not move seriously injured
persons unless they are in obvious, immediate danger (building collapse, fire,
etc.). Avoid known problem areas (where there are gas lines, fire
hazards, etc.). Once out, keep as far away from the building as
possible.
Open
doors carefully. Watch for falling objects.
Do
not use elevators.
Do
not use matches or lighters. Sparks might trigger explosions.
Avoid using telephones and hand radios. Again, electrical
sparks or signals could trigger other bombs.
Objectives of a Disaster Recovery / Business Continuity Plan Defined
The objectives of a disaster recovery and business continuity plan
are first to protect your business human and physical infrastructure and second
to stay in business...no matter what happens. Have you met the major objectives
of a disaster recovery and business continuity plan?
Regardless of all your good efforts--without advance Business
Continuity Planning (BCP)--your business may be closed due to an overt or covert
terrorist attack, a cyber attack, severe electrical storm, hurricane,
earthquake, wildfire, flood, epidemic or other
cause.
The questions that the Disaster Recovery / Business Continuity Plan
template help you answer are:
How well protected is your business
against future hurricanes, tornadoes, earthquakes, floods, a pandemic event or
a terrorist attack?
How prepared is your business to
reopen within 24 to 48 hours following a natural or man-made disaster or
epidemic?
What is your disaster Recovery-Time
Objective (RTO: your targeted time-limit to get critical operations/systems
back up and running) following a local
disaster?
Have you formulated a plan and
strategies to limit the impact of risks to your
business?
How quickly can you return from
incremental business resumption to normal business operations after a minor
disaster? After a major disaster?
Do you believe that insurance will
take care of the losses?
Where will your customers/clients,
vendors/suppliers go, during downtime, when your building is destroyed or
employees are quarantined and your business is knocked to its
knees?
Will your management team, employees, suppliers, and
customers be well informed about impact, on the bottom line, if there is no
Business Continuity Plan?
A
disaster recovery and business continuity plan is necessary for an enterprise to
secure its assets. CEOs and CIOs must be prepared to budget for and secure the
necessary resources to make this happen. It is necessary that an appropriate administrative structure be put in place to effectively
deal with crisis management. This ensures that all concerned understand who
makes decisions, how the decisions are implemented, and what the roles and
responsibilities of participants are. Personnel used for crisis management
should be assigned to perform these roles as part of their normal duties and not
be expected to perform them on a voluntary basis. Regardless of the organization
- for profit, not for profit, faith-based, non-governmental - its leadership has
a duty to stakeholders to plan for its survival.
The
Disaster Recovery and Business Continuity Template address these issues
directly. At the same time the security of the enterprise records needs to
be taken into consideration. It is for that reason that the Disaster Recovery/Business
Continuity and Security Manual Template bundle is a must have
product.
No
one factor ultimately determines the success of the CIO, though Janco has
determined a string of immediate "challenges" enterprises have to meet in with
their CIOs:
Establishing a position at the
right level and empowering the individual appointed to provide value to the
enterprise.
Defining clearly and
communicating the power of the CIO to enterprise executive and operational
management to all levels within the enterprise.
Selecting the right person for
CIO with the necessary skills. Career senior executives should not be
discounted as possible appointments to the position.
Building credibility, which comes
through the CIO delivering on leadership, ideas and products.
Changing the perception of an
information technology manager from that of a technical support function to a
CIO who is part of the senior management team.
Longer-term challenges involve
building a "comprehensive management system" for information
resources.
You have
had a disaster and now you are starting to look at the "mess" that you
have.What do you do to clean
things up?Some tips on disaster
recovery and business continuity clean up are:
Wet objects (electronic) - Disconnect from the power
source and do not turn it on.In
the case of disk drives or other electronic storage devices - inventory
all of them and label them.Create a log of all objects recovered, actions taken, and
location.Have a disaster
clean-up specialist be the one who looks at what can be recovered.
Wet objects (non-electronic) - Rinse with clear water or a
fine hose spray. Clean off dry silt and debris with soft brushes or dab with
damp cloths. Try not to grind debris into objects; overly energetic cleaning
will cause scratching. Dry with a clean, soft cloth. Use plastic or rubber
gloves for your own protection.
Drying Objects - Air dry objects indoors if possible and
use portable fans to move the air. Sunlight and heat may dry certain materials
too quickly, causing splits, warping, and buckling. If possible, remove
contents from wet objects and furniture prior to drying. Storing damp items in
sealed plastic bags will cause mold to develop. If objects are to be
transported in plastic bags, keep bags open and air circulating.
Mold Prevention and Cleanup - Exposure to molds can have serious
health consequences such as respiratory problems, skin and eye irritation, and
infections. The use of protective gear, including a respirator with a
particulate filter, disposable plastic gloves, goggles or protective eyewear,
and coveralls or a lab coat, is therefore essential. In order to inhibit the
growth of mold and mildew you must reduce humidity. Increase air flow with
fans, open windows, air conditioners, and dehumidifiers. Moderate light
exposure (open shades, leave lights on in enclosed areas) can also reduce mold
and mildew. Remove heavy deposits
of mold growth from walls, baseboards, floors, and other household surfaces
with commercially available disinfectants. Avoid the use of disinfectants on
historic wallpapers. Follow manufacturers' instructions, but avoid splattering
or contact with objects and wallpapers as disinfectants may damage objects.
Broken Objects - If objects are broken or begin to fall
apart, place all broken piecesand detached parts in clearly labeled, open
containers. Do not attempt to repair objects until completely dry or, in the
case of important materials, until you have consulted with a professional
conservator.
Paper Materials - Documents, books, photographs, and works
of art on paper are extremely fragile when wet; use caution when handling.
Free the edges of prints and paper objects in mats and frames, if possible.
These should be allowed to air dry. Rinse mud off wet photographs with clear
water, but do not touch surfaces. Sodden books and papers should also be air
dried or kept in a refrigerator or freezer until they can be treated by a
professional conservator.
Office Furniture - Furniture finishes and painting
surfaces may develop a white haze or bloom from contact with water and
humidity. These problems do not require immediate attention; consult a
professional conservator for treatment. Textiles, leather, and other "organic"
materials will also be severely affected by exposure to water and should be
allowed to air dry. Shaped objects, such as garments or baskets, should be
supported by gently padding with toweling or uninked, uncoated paper. Renew
padding when it becomes saturated with water. Dry clean or launder textiles
and carpets as you normally would.
Art Work - Remove wet paintings from the frame, but not
the stretcher. Air dry, face up, and away from direct sunlight.
Metal Objects - Rinse
metal objects exposed to flood waters, mud, or silt with clear water and dry
immediately with a clean, soft cloth. Allow heavy mud deposits on large metal
objects, such as sculpture, to dry. Caked mud can be removed later. Consult a
professional conservator for further treatment.
Every business faces the risk of natural disaster and no
plan to protect property can be complete without insurance coverage against
potential damage and loss. It is important to know exactly what coverage
you may need and what coverage is available to protect your property against all
of the natural hazards it may be exposed to so that you are not underinsured or
not insured at all.
Janco strongly encourages business
owners, CIOs, CSOs, and line managers to fully explore their insurance
needs and obtain adequate coverage before a disaster strikes.
Buy flood insurance
Find out if your busienss or
prospective new location is in a flood zone
Get informed on the full range of insurance
coverage available to businesses
Fourty Percent of Enterprises That Face a Disaster Fail
No disaster recovery business continuity plan places at risk the
continued operations of a business. According to industry analysts, 40% of
enterprises that experience a disaster go out of business within five years.
With out a plan in place that over 80% do not even open their doors.
Disaster Recovery processing Datacenters are a first step and
options that businesses have are:
Load balancing between two Datacenters
Complex and requires over-provisioning for continuous availability. Actively
load balancing between two Datacenters means that both datacenters are updated
and verified in the case of a disaster. But, the datacenters are duplicated
and require 2x physical and management complexity if continuous availability
is expected.
Stand-by Datacenters - Expensive to build,
maintain, and test. Stand-by datacenters provide computing resources that sit
idle waiting for a Disaster to occur. Building, maintaining, and testing a
duplicate datacenter is expensive and complex.
Outsource Disaster Recovery - Very Expensive
and typically very slow to recover. Outsourcing Disaster Recovery is not
effective if multiple customers are impacted as in the case of area wide
disasters such as hurricanes and earthquakes. Outsourced Disaster Recovery
requires long-term contracts and inflexible testing environments, and provides
insurance only that resources will be available.
Each
option is expensive - but must less expensive than going out of
business!
Many companies have already deployed high-speed wireless
technologies to mobile workers for remote laptop connectivity and access to
critical business applications. Industry estimates are that as of January 2008,
more than 3 million users have adopted data cards and embedded modem modules in
notebook PCs. In addition the next
generation of SmartPhones and PDAs
are arriving with built in 3G capabilities.In addition, 3G connectivity is also
emerging as an alternative or backup to more traditional network connectivity
options such as dialup, frame relay and ISDN. The high data rates and secure
communication channel of 3G technologies are driving demand for new applications
of this technology. Some benefits that businesses are trying to
achieve with this technology are:
Network diversity - High-speed wireless
wide-area networks provide an alternative to traditional network access and
provide backup when hard wired connections, such as a T1 line, are broken in a
disaster.
Low-cost - Backup access can come at affordable
rates.
SmartPhone Effective Terminals - With the
advent of 3G SmartPhone if Internet applications are designed correctly cost
to implement disaster recovery and business continuity plans is significantly reduced.
Productivity - During a disaster access on 3G
does not exactly match the throughput of dedicated T1 access but is fast
enough for business operations to continue in a degraded but functional
mode.
Routing - Configuration for business continuity
purposes can be done quickly.
In these troubled times employee burnout is a
reality.There are a number of
impacts on the employees that negatively impact the organization that they work
for.They are:
Withdrawal - Employees want to avoid what discomforts
them, and those organizational conditions that can cause burnout are certainly
discomforting. Signs to watch for
are that employees leave work early, arrive at work late, take long breaks,
and stay away from the workplace as much as possible.
Interpersonal friction - Employees strike back at what
they do not like.Signs are
employees begin being cynical and callous toward others, small differences
lead to monumental arguments, work assignments begin to seem like
insurmountable challenges, and friends begin to look like
foes.
Performance declines - When employees are not happy they do not perform well.The quantity of the employees may not
be reduced, but the quality will. Signs are clients say that service
quality is poor and interrelationships been the burned out employee, their
peers, their customers is a low point.There are few smiles and jokes - it is all work and no
play.
Family life and personal space negative - Just as
burnout leads to behaviors that have a negative impact on the quality of one's
work life, it can also lead to behaviors that cause a deterioration of the
quality of home life and personal space. Burned out individuals are often
described by their wives as coming home tense, anxious, upset, angry, and
complaining about the problems they faced at work. These individuals are also
more withdrawn at home -preferring to be left alone, instead of sharing time
with their families.
Declining health and gaining weight - Burnout often
leads to health-related problems. Burnout victims are more likely to suffer
from insomnia, excessive drinking or smoking, and to use medications of various
kinds.
There are
three roles that the CIO must play in improving organizational productivity and
designing Information Technology infrastructure:
Strategy -Decide where analytics should be
leveraged in the business and information technology. The CIO must articulate
the business' information technology distinctive capability and chosen basis
of competition, determine where in the business environment to leverage the
power of information technology and organizational infrastructure, and direct
productivity initiatives.
Capability -Drive with passion and commitment the
organizational changes needed by an information technology competitor. Without
top executive support, any company is unlikely to make the needed changes in
skills, information management processes, and IT capabilities.
Execution -Advise and educate the enterprise's
management team so that the
business takes action based on the CIOs recommendations. Its often easier,
for example, to create a Service-Oriented Architecture (SOA) scheme for
customers than to actually treat customers differently. And it's easier to
establish the profitability of products than to discontinue unprofitable ones.
Managers of the functions involved in productivity projects must be prepared
to take action with the insistence and backing of top
management.
As you
start an Outsourcing Process there are many factors to consider before you past
a point of no return. Examples of these are:
If your enterprise is going
through periods of rapid or dramatic change, including changes in the way you
do business, how will outsourcing impact this?
Your enterprise's IT function is
efficient and has a low cost of operation, what value will the outsourcer
provide?
The primary motivator for
outsourcing is the drive to reduce costs, why could you not do the same
internally?
The enterprise does not have the
management talent or competency to plan and manage the outsourcing process and
outsource provider, how will you know that you are getting value from your
outsourcer?
Outsourcing is being driven by
senior management that does not have a strategic vision of where the
enterprise is going, is the driver behind this move someone who thinks this is
the "in" thing to do?
Internal costs of the IT function
are not fully understood, how will you know that you are getting the most cost
effective solution from your outsourcer? Performance metrics are not well
defined for the IT function, how do you know that the service provided by your
outsourcer will be as good if not better than what the enterprise is getting
today?
The enterprise operations are
entwined with IT functions such that if the IT function is outsourced a
significant amount of core enterprise functionality and operational knowledge
will have to be transferred to the outsourcer, will the outsourcer have a
large "learning curve"?
The enterprise's strategic plan
has not been defined with all of the outsourcing implications defined, is it
possible that outsourcing is not in the best interest of the enterprise's
operation?
(Reuters) - Despite turmoil in global
markets, two-thirds of senior technology industry executives polled in a new
survey say the economic slowdown will not hurt them as badly as the bursting of
the tech bubble in 2000.
However, more than three-quarters of respondents
say their business has been impacted by the financial crisis, according to the
study, which was released on Monday by the law firm DLA Piper.
Still, only 27 percent said they were cutting sales
and marketing expenditures, and only 15 percent said they were reducing planned
R&D spending. The executives were surveyed between Sept 23 and Oct
6.
"That suggests that most of the companies are
focused on the fact that this crisis would not have a big impact on them or that
they wanted to continue to make investments through this cycle," said Peter
Astiz, global co-head of the technology sector practice at DLA
Piper.
Slightly more than half of the respondents think
the economy will begin to rebound in the second half of 2009, while nearly a
third think it will not happen until 2010 or later.
However, a majority agree that the market for
initial public offerings -- often seen as a sign of truth health in the
technology industry -- is not likely to rebound until at least
2010.
The poll received 145 responses from senior
executives at technology companies and venture capital firms in the technology
sector.
Separately, a study found that overall VC
investment in the third quarter dipped 1 percent from the previous quarter to
$7.37 billion, according to data compiled by Dow Jones VentureSource. That
figure is 7 percent lower than a year ago.
Users demand 24 x 7 IT service availability via web sites,
portals, email, and mission critical applications.When these systems and applications are
not there or are operating in a degraded mode, it negatively impacts the
reputation and revenue of an enterprise.Maintaining availability and preventing downtime begins with the
successful deployment of network and system management solutions that are
focused on IT Service Management in a Service-Oriented architecture.
When
managing the help/service desk in an IT Service Management environment (ITSM)
with Service-Oriented Architecture (SOA), there are four (4) things that you
need to do.They are:
Validate that you have implemented service tools
versus having added unnecessary overhead and bureaucracy Evaluate
your policies, procedures, and processes from the user perspective. To be a
service desk, you must serve your clients, rather than make them change what
they do to meet your needs.
Survey your users often and understand what they do
not like Review the comments and listen to critics with an eye
improving what you are doing.When an change is implemented go back to the critics and see if you
have improved.
Implement metrics and track performance over
time Use metrics that apply to your users, see what the trends
are overtime. In addition, use the same metrics to see how your competition is
doing.Determine if you are
providing world class service or just average service.
Determine the cost of a service solution and its ROI
before you implement it measure achievenent.Be professional in implementing
changes to your help/service desk.If you are constantly changing the process you will not know if your
changes are having the right impact.
Encourage input from your users Listen to
your users, validate that the problem that you are solving ti the one the user
want solved. Listen to your clients. Tell them what you heard them tell you
and what your action steps will be. After you implement the solution confirm
with them what you did and how it
worked.
Steps to Assess Your IT Service, Change Control, and Help Desk Functions
When
managing the help/service desk in an IT Service Management environment (ITSM) when you have
Service-Oriented Architecture (SOA), there are five (5) things that you
need to do.They are:
Validate that you have implemented service tools
versus having added unnecessary overhead and bureaucracy -
Evaluate your policies, procedures, and processes from the user perspective.
To be a service desk, you must serve your clients, rather than make them
change what they do to meet your needs.
Survey your users often and understand what they like
and do not like - Review the comments and listen to critics with
an eye improving what you are doing.When an change is implemented go back to the critics and see if you
have improved.
Implement metrics and track performance over
time - Use metrics that apply to your users, see what the trends
are overtime. In addition, use the same metrics to see how your competition is
doing.Determine if you are
providing "world class" service or just average service.
Determine the cost of a service solution and its ROI
before you implement it measure achievenent - Be professional in implementing
changes to your help/service desk.If you are constantly changing the process you will not know if your
changes are having the right impact.
Encourage input from your users - Listen
to your users, validate that the problem that you are solving ti the one the
user want solved. Listen to your clients. Tell them what