How to Get the Financing You Need

Monday, February 8, 2010 by Aaron Whittenberger
Any good Business Analyst will tell you that IT and business speak in different languages.  Good CIOs and IT Infrastructure Management know that CFOs have a language all their own.  “That being said, it is the money people who generally stand in the way of engineers and technologists and the spending required to accomplish great things with IT.”, according to an CTOEdge article.  CIOs generally don’t speak in the language of the CFO when making spending requests, so we walk away feeling that they “just don’t get it”.  Here are 10 areas where we, as the promoters of IT, can begin to communicate better with the CFO.

1.  Think TCO, not ROI

To the CFO, return on investment is how much money you’re going to give back to the company. Let’s face it. Most IT projects — no matter how compelling — don’t bring “return” to the organization like an additional sales person, a new marketing campaign, or a new product launch.  Preach total cost of ownership (TCO); repeat it until you are blue in the face.  Whether business application development, web application development, IT infrastructure investment; you can demonstrate “fiscal stewardship” through cost reduction or increasing customer satisfaction and loyalty.

2.  Cloud Computing

CFOs like what they hear about cloud computing as a cost saver. Don’t fight them on it.

3.  Green IT

Are you surprised when the CFO is not willing to pay a premium to keep the environment cleaner?  The reality is that no green projects exist unless they have a better TCO.  So whether to upgrade your IT infrastructure, better IT infrastructure cooling, or saving space for your IT infrastructure you can build a strong business case of the decreased TCO and community relations intangibles of being an “environmentally conscious” firm.

4, 5 and 6.  Virtualize, Virtualize and VIRTUALIZE

“This subject takes up three spots because there are three key virtualization targets -- servers, desktop and storage. But again, the key here is how to justify and how now NOT to justify.”  Again build your TCO case for virtualization, but be realistic in your cost savings estimates.  Many times virtualization projects are viewed as unsuccessful because they did not meet the upfront cost estimates.  Be sure to include high traffic times such as end-of-month close periods.

7.  Adopt IT-Centric Business Continuity

Over the years responsibility for business continuity have been put on IT management.  This needs to change.  Organizations need to understand that there are three phases to a business continuity plan; event response, disaster recovery and business continuity.  With the financial impact on the organization of disaster recovery and business continuity, business management must be involved and responsible for these areas.  It should not be IT management’s responsibility to determine which business units are most important.

8.  Align with the Big Picture

Along with TCO, build your requests showing how the request aligns with the business objectives and goals of the organization.

9.  Proactive Cost Reduction

Boy does that sound like another way to say TCO to you?  Take a proactive stance on reducing cost.  The article showed how to reduce cost of document retention.

10.  Reduce Data Center Costs

The organization’s data center is usually the center of the IT infrastructure, both in physical space and cost.  Just as in application software development, modular building of a data center can cut cost of the IT infrastructure through avoiding construction cost, reduced cooling cost and reduced capital expenditures.

“While the relationship between CFO and CIO can sometimes have more debits than credits, it is definitely worth the investment in time and effort to highlight IT projects in terms the CFO will understand.”

Technology at the forefront in Haiti

Friday, January 22, 2010 by Aaron Whittenberger
As you watch the enormous humanitarian relief effort going on in Haiti on the evening news this week, following the devastating 7.0 earthquake that hit that country on January 12th, you can probably imagine the technology and IT infrastructure that the U.S. Department of Defense and other agencies has put into place to assist in that relief effort.   Read more about it here. The Haiti government turned over the operation of the one runway airport at Port-au-Prince, the nation’s capital, to the U.S. military.  An acknowledgement of the U.S. military’s prowess in logistics and technology.  For a few days as the relief effort ramped up news reports of delays at the airport were heard, but as that relief effort got organized those reports of delays ceased even with the amount of aide and volunteers flowing into the country were increasing.

What is not reported on the evening news is how an army of geek volunteers from the private sector is supporting that relief effort.  Leading the way are organizations like CrisisCommons, Ushaahidi, the International Community of Crisis Mappers and InSTEDD, according to an InformationWeek artical.  Application software development gets into the mix, undertaking such tasks as developing ways to help locate U.S. citizens and provide information online about Haiti and how to donate money, developing a timeline of events and a wiki of information online, a GPS-compatible street map of Haiti, an English to Creole dictionary for IPhones and Android mobile devices, and a system to use Twitter messages to ask for or offer assistance to those in need.  "We've been working a lot at Sunlight Labs to get application software developers to organize and work together in volunteer communities.  Developers may not be competent with a saw, but are starting to realize they have a skill they can contribute," says Clay Johnston, director of Sunlight Labs.  "The tools are available, and methodologies like agile project management have been popularized that can facilitate this."

In light of the reports of the failings of the coordination of relief efforts following Hurricane Katrina and the reports of the relief effort in Haiti, it is clear that it is IT solutions that have been put into place to better support humanitarian relief efforts worldwide and that technological advances has clearly moved into the 21st century in support of those efforts.

Is IT Qualified To Satisfy The Business?

Monday, November 9, 2009 by Aaron Whittenberger

“IT executives increasingly implement marketing initiatives to improve the communications with their business customers. But these efforts often focus solely on the brand aspects of the services under the IT’s control without understanding the business’ perception of IT. To maximize the success, IT must add business satisfaction assessments to its tool kit. Understanding business satisfaction requires qualitative and quantitative data that capture customer expectations and perceptions through different types of interactions such as interviews, panels, focus groups, complaint systems, and surveys. This report provides best-practice recommendations, survey templates, and questions to guide IT executives through the deployment of a business satisfaction assessment. It applies Forrester’s deep expertise in external customer satisfaction to the interface between business customers and their internal IT suppliers.” says a new Forrester report.

I have served on countless business application development teams within several organizations in the Southwest Ohio and Cincinnati Information Technology community, one thing I can say is that most IT organizations do not gauge business satisfaction with IT business solutions.  I have served in only a couple of organizations where the business serves on the IT governance committee.  An organization does not have to be “big” to have an IT governance committee.  No matter what the size of the organization decisions are made as to priorities in IT work.  IT governance does not have to be a long drawn out process or take great time commitment from the business or IT executives, but business involvement in IT governance goes a long way in gaining business buy-in as you roll out the IT business solutions to the business.

Involvement in IT governance is just one way that many organizations in the Greater Cincinnati area can improve the IT-business relationship.  The Forrester report goes into ways to solicit and gauge business satisfaction with IT business solutions.  Doing so should affect decisions concerning not only IT business solution delivery but also IT Infrastructure and IT outsourcing initiatives.

 

Take a Team Approach to IT attacks

Tuesday, September 8, 2009 by Aaron Whittenberger
You more than likely already know you need the best security possible to prevent an attack. You also need IT infrastructure and IT staffing in place to respond to an attack if one happens.

Incidence response should be one of the most important items on your IT security agenda. Your company must be prepared to respond to an incident once it occurs and quite possibly to stop the next one.

As of late, disgruntled employees violate internal policies or misuse system access for their own monetary gain or for revenge on employers due to mergers, outsourcing of business or IT jobs or employee lay offs.  Internal threats are as real as external threats.

IT experts say that security professionals with the right skills can help lower the number of and potential for incidents at any organization with their responses.

An article in this week's GovInfoSecurity.com outlines the experts you will need:
  • Network security specialist: A person familiar with intrusion detection systems.
  • Penetration testers: Someone who can assess a system's potential vulnerabilities.
  • Incident handlers: People who understand attack methodology and can apply critical thinking skills to respond to incidents.
  • Forensics Analyst: The person who looks for evidence after an attack.
  • Research Analyst: The person to keep abreast technological advances in incident response activities.
  • Team Leader: Leads the team through crises and communicates to the business incident activities and cost to the business.
The article also outlines a typical methodology the team should follow to respond to all types of attacks:
  • Preparation and Training: for both prevention and incident response.
  • Identification: fast identification of an occurring attack and its impact on the IT infrastructure can help in minimizing the duration and cost of clean-up.
  • Containment: Once an attack has been identified, steps must be taken to minimize the effects of the attack.
  • Recovery and Analysis: The recovery period allows analysis and lessons learned of What happened? Why did it happened? Was the response effective?
Is your IT infrastructure safe from internal and external attacks?  The proper IT infrastructure safeguards and IT staffing with proper security skills can help ensure your organization's security.

Teaching Old Dogs New Tricks

Wednesday, September 2, 2009 by Mark Murphy
Sometimes the solution to a problem is staring you right in the face.  Sometimes you already know the answer but can't see it because the pieces are labeled in a way that is outside the scope of the solution.  Sometimes you can just use an old tool to provide a piece of functionality you thought you needed to code a home grown solution for.  Recently, such a time occurred for me.

I was in a meeting discussing the logistics of transferring multiple gigs of text data across the internet.  The source computer was an iSeries, the target was something else.  Much of the discussion centered on network latency and the time it was going to take to transfer that much data, and how processes were going to have to be pushed back a day because the window was too short.  Well I said why don't we just zip up the file and send it that way.  Data files tend to be highly compressible, up to 90%.  "Can you do that on an iSeries."  That was the infrastructure guy.  Why not, I can run Java on it.  I shouldn't be too hard to find something, even if I have to write a simple Java program.  "Don't do anything we won't be able to understand."  That was one of the RPG programmers.  IMHO, the legacy tag belongs with those who use the technology, and the technologies  they choose to use rather than with the hardware and operating system.  For me it was a challenge.

A day later I had a working command using a tool that is bundled with every Java Development Kit.  I knew this, but it took a slight memory jog from a college to remind me.  A JAR file is a ZIP file with a different extension.  IBM explicitly provides a tool to convert a database file to a CSV file, or a flat text file, but to compress that file into a ZIP file you need to use the JAR utility and give the file a .ZIP extension.  Works like a champ.  IBM even provides an alternate JAR utility that acts more like a command line compression utility to create zip files, but instead of calling it zip, or izip or something like that they call it ajar.

Well, a short CL later and I have a full featured program that takes a database file name, a zip file name and path (in the integrated file system or IFS), and a format selector (*DLM or *FIXED).  It probably would have made more sense to name that format *CSV instead of *DLM, but IBM's conversion utility calls it *DLM.  The output is a zip file with the name and path as specified in the input parameters.

And Here it is:

             PGM        PARM(&DBF &ZIPFILE &FORMAT)


             DCL        VAR(&DBF) TYPE(*CHAR) LEN(32)
             DCL        VAR(&ZIPFILE) TYPE(*CHAR) LEN(255)
             DCL        VAR(&FORMAT) TYPE(*CHAR) LEN(6)
             DCL        VAR(&FILE) TYPE(*CHAR) LEN(10)
             DCL        VAR(&LIB) TYPE(*CHAR) LEN(10)
             DCL        VAR(&MBR) TYPE(*CHAR) LEN(10)
             DCL        VAR(&CMD) TYPE(*CHAR) LEN(255)
             DCL        VAR(&TEXTFILE) TYPE(*CHAR) LEN(15)
             DCL        VAR(&TEMPFILE) TYPE(*CHAR) LEN(40)
             DCL        VAR(&ERRLOOP) TYPE(*CHAR) LEN(1) VALUE(N)
             DCL        VAR(&INTER) TYPE(*CHAR) LEN(1)

             MONMSG     MSGID(CPF0000 QSH0000) EXEC(GOTO CMDLBL(ERROR))

             RTVJOBA    TYPE(&INTER)

             CHGVAR     VAR(&FILE) VALUE(%SST(&DBF 3 10))
             CHGVAR     VAR(&LIB) VALUE(%SST(&DBF 13 10))
             CHGVAR     VAR(&MBR) VALUE(%SST(&DBF 23 10))

             /* Ensure ZIP directory exists for error logging */
             MKDIR      DIR('/zip')
             MONMSG     MSGID(CPFA0A0)

             /* Delete &zipfile if it exists */
             RMVLNK     OBJLNK(&ZIPFILE)
             MONMSG     MSGID(CPFA0A9)

             /* build text file name */
             IF         COND(&FORMAT *EQ *DLM) THEN(DO)
                CHGVAR     VAR(&TEXTFILE) VALUE(&FILE *TCAT '.csv')
             ENDDO
             ELSE       CMD(DO)
                CHGVAR     VAR(&TEXTFILE) VALUE(&FILE *TCAT '.txt')
             ENDDO

             /* generate temporary file name */
             RTVTMPIFSN NAME(&TEMPFILE)
             IF         COND(&TEMPFILE *EQ ' ') THEN(CHGVAR VAR(&TEMPFILE) +
                          VALUE('/tmp/$$__tempfile'))

             /* export DBF to temporary file */
             CPYTOIMPF  FROMFILE(&LIB/&FILE &MBR) TOSTMF(&TEMPFILE) +
                          MBROPT(*REPLACE) STMFCODPAG(*STDASCII) +
                          RCDDLM(*CRLF) DTAFMT(&FORMAT) RMVBLANK(*TRAILING)
             MONMSG     MSGID(CPF2817) EXEC(DO)
                SNDPGMMSG  MSGID(CPF9898) MSGF(QCPFMSG) MSGDTA('Error +
                             converting Database File to Interface File') +
                             MSGTYPE(*DIAG)
                GOTO       CMDLBL(ERROR)
             ENDDO

             /* Send 'compressing' status message */
             IF         COND(&INTER *EQ '1') THEN(SNDPGMMSG MSGID(CPF9897) +
                          MSGF(QCPFMSG) MSGDTA('Compressing file ' *CAT +
                          &FILE) TOPGMQ(*EXT) MSGTYPE(*STATUS))

             /*---------------------------------------------------------------*/
             /* This command is using the unix environment to zip up the file */
             /* extracted above.  All errors are logged to a text file        */
             /* named error.txt.  The 2>> operator redirects stderr to the    */
             /* file following it, and adds any messages to the end of the    */
             /* file.                                                         */
             /*                                                               */
             /* The following unix utilities are used here:                   */
             /*  ajar - create an archive                                     */
             /*                                                               */
             /* The following environment variables are used here:            */
             /*  QIBM_QSH_CMD_ESCAPE_MSG - Sends QSH0005 as an escape message */
             /*        if the exit status is not 0 (Qshell error condition)   */
             /*---------------------------------------------------------------*/
             /* Send an escape message if the command fails */
             ADDENVVAR  ENVVAR(QIBM_QSH_CMD_ESCAPE_MSG) VALUE(Y) +
                          REPLACE(*YES)

             /* Create &zipfile from temporary file */
             CHGVAR     VAR(&CMD) VALUE('ajar -c -M' *BCAT &ZIPFILE *BCAT +
                          '''' *CAT &TEMPFILE *TCAT ''' :' *BCAT &TEXTFILE +
                          *BCAT '2>>' *BCAT '/zip/error.txt')
             QSH        CMD(&CMD)
             MONMSG     MSGID(QSH0005) EXEC(DO)
                SNDPGMMSG  MSGID(CPF9898) MSGF(QCPFMSG) MSGDTA('Error +
                             creating ZIP file') MSGTYPE(*DIAG)
                GOTO       CMDLBL(ERROR)
             ENDDO

             /* Delete temporaty file */
             RMVLNK     OBJLNK(&TEMPFILE)
             MONMSG     MSGID(CPFA0A9)

             /* Exit Normally */
             GOTO       CMDLBL(OUT)


             /* Process Errors */
 ERROR:      IF         COND(&ERRLOOP *EQ Y) THEN(GOTO CMDLBL(OUT))
             CHGVAR     VAR(&ERRLOOP) VALUE(Y)

             /* Delete temporaty file */
             RMVLNK     OBJLNK(&TEMPFILE)
             MONMSG     MSGID(CPFA0A9)

             /* Send Escape message */
             SNDPGMMSG  MSGID(CPF9898) MSGF(QCPFMSG) MSGDTA('Error +
                          Processing File') MSGTYPE(*ESCAPE)

 OUT:        ENDPGM

Check it out.  Create a ZIP file using the Java Archive utility.  A Rose by any other name would smell as sweet!

What’s new at JavaOne Part 3 - The Sun Cloud and The End?

Tuesday, July 14, 2009 by Matt Warman

This is the last of a three part series; part one is here and part two is here. Many application development guys are wondering, what is the Cloud, and what is the Sun Cloud? Think of Cloud computing as a virtualized data center. In part one I talked about VirtualBox, which allows you to virtualize network components and resources. Think of VirtualBox working on the atomic level, taking small resources to create a virtualized network. Now Cloud computing takes all of the virtualized networks and utilizes them as resources in a virtualized data center. The Sun Cloud is a set of APIs to let you manage networks and storage areas as resources. You can cluster or categorize networks in any way you wish. You can manage user access to the resources, not unlike application development teams utilize in web applications.
What does all this mean to application development and management? It means that you can create a single network and copy or clone it. For example, you can create a single network instance with servers, storage areas databases, and clone the entire network for each region you manage. That means all networks are managed in one spot, and all regions are setup exactly the same. No application compatibility issues. You can, of course, add or remove components, but they are all have the same infrastructure. You can upgrade the virtual network, and pass the changes to the other regions. The electricity saved by running virtualized datacenters would be significant. You can connect to your partners’ virtualized networks to access their data. For application development teams, that would change how we design applications if we have access to external data and applications.

This was my fifth JavaOne conference. Since it is always at the Moscone center, I know pretty much every nook and cranny of JavaOne. Although smaller this year, I thought this was the best one yet. The people there were truly happy to be there, and combined with takeover news and a bad global economy, a bigger sense of cooperation. I would highly recommend coming to one if they still have one. Nobody, not even James Gosling (I was in a group of 20 who had a 45 minute meeting with him) knows if there will be one next year. The reason you come to JavaOne is not the presentations (they are great!), but the people. Meeting and befriending people who created your favorite blog, book, or technology is the reason to come. I remember meeting Craig McClanahan (co-creator of struts) in 2004, and saying "that’s Craig freaking McClanahan!" Last year, I was honored a share a picture of beer with him, Jarda Tulach (inventor of NetBeans), and Geertjan Wielenga (JavaLobby blogger extraordinaire). Application development people get to "network" with the best and brightest architects, technical press, and business owners. This year I got hang with the JUG leaders, NetBeans Dream Teamers, and the JavaFX guys. I wrote, and helped edit a YouTube video "pushing Java", and met more of my fellow Java music software developers. I literally have friends from all over the world (yes Cincinnati too), and I am considered an honorary Brazilian because of JavaOne. Larry Ellison, if you are reading this, please don’t stop JavaOne!

Quantum Leap, Part 2

Thursday, July 9, 2009 by Jeff Welsh

In part 1 of this post, I talked about the 80’s television show Quantum Leap, that wasn’t the point of the post. It is fun to imagine traveling around in time; but then again, I digress.   In part one, I introduced the concept of “quantum superposition”; big words, even for an IT strategy consultant.

Have you heard of the particle wave theory? In practical terms, it means that bizarre and counterintuitive effects occur on very small scales, and they can be harnessed.

This “quantum superposition” effect will, for example, will transform how we do “computer math.”  Currently, everything done by computers is in binary. The smallest piece of information a computer handles, the bit, is either a one or zero. A quantum computer, though, would be able to store and work with number systems other than binary.

This means computers would become exponentially more powerful because each “quantum bit” (qubit) could store a much greater range of numbers than the two that binary math restricts us to. Imagine a laptop with the computing power of the world’s 10 most powerful supercomputers. Then you begin to grasp the potential of quantum computing.

Designing chips and IT infrastructure to take advantage of “higher level” math than binary is years away.  The more immediate impact will be in storage.  Most application developers know that 8 bits make up a byte or 1 character.  What if a qubit could hold many bytes or characters?  

Next time, I will share another quantum idea.

 

Quantum Leap, Part 1

Tuesday, July 7, 2009 by Jeff Welsh

By the title of this post you might think that it is about an 80’s television show by the same name.   I really enjoyed Quantum Leap when it first aired and you can still catch re-runs if you have cable or satellite TV, but I digress.

In the past, I have talked about rate of change and its impact on IT infrastructure and application development. Today, I’m continuing along that line.

IT infrastructure is going to go through a massive transformation in the years ahead. Quantum technologies that were only theories in scientific journals just a few years ago are being prototyped in labs now. These new components will change the way we live forever.

Currently, data is processed by moving bunches of electrons about in huge batches. Think of the components in your PC as electrical plumbing. Data is usually stored as batches of electrons or in computer terms, bits. Imagine your computer’s hard drive as a bunch of very small buckets, some full of water, some not. This would represent the on and off that current computers understand or binary language.  This will change:

Improved technologies from emerging nanosciences are allowing us to replace batches of electrons with the smallest individual unit: the electron. As a result, computers will work at far higher speeds. Additionally, far less electricity will be required to do the same amount of work.  So what’s the big deal you may be thinking, that’s been happening for years.

The big difference now is “quantum superposition”.  In a nutshell, this means that a quantum particle can exist in multiple states and everything in between at the same time. This is because a quantum particle, such as an electron, behaves as both a particle and a wave.  Quantum physics is going to have a huge role in how we store and represent data in the future.

Next time, I will take a quantum dive deeper into this. 

 

And So It Begins…

Monday, June 1, 2009 by Matt Warman
I am now in San Francisco at the CommunityOne event. The focus this year is on Open Solaris and Cloud computing. The question I always have about Cloud is what is it really? Well from what I have seen and the people who know it tell me that it’s a kind of enterprise MVC design pattern, with cool tools. Think about creating your own virtual network. If you want a firewall, you drag a firewall to your network design. It works right there, or you can configure it to your needs if need be. You can virtually set up your Dev, test, and prod areas, and swap out your back end data store, or change parts of your system. You can backup your data to the cloud and access it anywhere. You can also pay for what you use in your data center.
As a JavaOne alum, today is very much about catching up with old friends. I am setting up lunches, dinners, and “networking” events.  It is tough to go to the Thirsty Bear, but that’s what I do!
I will be giving daily updates as I can, so stay tuned!

Are You Prepared?

Friday, May 15, 2009 by Jeff Welsh

Saturday morning 8:30 am:  The phone rings, I answer, “Hello”.    Eric, my son who spent the night at a friends house says, “I’m getting ready to leave, I’ll be home before 9:00.  “Ok”, I reply, “see you then.”

8:45am: The phone rings again, I see that it is Eric’s cell number.  Now what does he want this time I thought, I answer, “Yes”.   “Dad, I’ve been in an accident”.  “What happened!!?”  “Someone pulled out in front of me and I ran into them.”  “Are you hurt?” “No, but I think the car is totaled.”  “Why do you think that?”  “Because both air bags went off and the hood is pushed up pretty good.”   “Uh Oh, is anyone else hurt?”  “No”.   “Call the police and I will be right there. “   “We already did”.  

Fortunately, there were no injuries that we are aware of and the other driver had good insurance.  I can’t decide if its fortunate or not that I am experienced in dealing with how to negotiate an insurance claim. 

So what does my exchange have to do with IT consulting or IT Strategy?  Plenty, it illustrates that the unexpected can happen at any time.  Check out this IT infrastructure post.

 

Pandemic IT Economy

Tuesday, April 28, 2009 by Jeff Welsh

What do those 3 words have in common?  They are certainly 3 words that you usually don’t use in a single conversation, let alone a single sentence. But in this day and age, maybe we should.  Let me ask the question this way:  How would a pandemic outbreak affect your IT infrastructure given the layoffs forced by the economy?

Not only do we need to worry about IT infrastructure, how about business continuity?  IT managers need to look at business continuity and disaster plans.  The problem today is that consolidations, layoffs and restructurings may have scrambled response plans. People who were once part of a critical team may now be collecting unemployment.

While the CDC isn't calling the swine flu outbreak a pandemic, and the World Health Organization has raised its threat level, which at Level 4 in its six-level scale because the swine flu currently has "sustained human-to-human transmission."

I’m recommending that managers review their call lists and decision-making chains. There could be a weakness in plans because of organizational restructuring that people need to very quickly take a look at.

If an organization does not have a specific pandemic plan, any plan that considers a "significant absence" of employees may work as an alternative plan.

The standard model used in pandemic planning is to consider what would happen to a business if 40% of the workforce was absent for an extended period of time.

In 2006, in response to earlier concerns about the bird flu, Gartner Inc. offered specific suggestion to IT departments, such as storing 42 gallons of water per data center worker, enough for a six-week quarantine.  This may seem a little extreme, but I have to ask the question, How prepared are you?  Maybe a our IT Wellness Check could shed some light

 

Consulting the Consultants (Got Problems?)

Monday, March 30, 2009 by Jeff Welsh

I got an interesting call last week from an individual that had a Websphere production problem.  What made the call interesting was that it was from one of our competitors wanting us to help figure out what the problem was.  So I guess we are officially the IT Consultants to the IT Consultants.   I guess we are easier to deal with than IBM.

Fortunately we were able to point them in the right direction.  In retrospect, the process we went through to narrow down what the problem was would make a good post, so here it is:

The call started out like this: We've been having this problem for two days; we don’t know why this started happening.  My immediate question back was this:  What changed two days ago?  They insisted, nothing had changed, and so they e-mailed the server logs that contained the error messages to me.   The root message indicated the server was out of database connections.

So back to the root question, what changed?  Did they have more users?  Did any of the code change?  Did they do an upgrade, restore a backup?  Finally, we found the answer.  An application developer did make a change.  In making the code changes, the application developer failed to close out the database connection.  Guess what? The server eventually ran out of database connections and therefore created the problem.

So the lesson we've learned here when dealing with application development or IT infrastructure problems is to always ask the basic question what's changed? or what's different?  Nine times out of ten, that will lead you to the answer.

 

Think Change

Friday, March 20, 2009 by Michael Kiffmeyer

Organizations that build strong value-driven cultures frequently achieve high performance.  The values that are developed must touch every department in the organization or the overall operation will fall short of its targeted goals.

As an IT consulting firm in Cincinnati, we see many different approaches from many different companies and it is the “out-of-the-box thinkers that seem to continually apply lateral thought process on a continual basis and always stay a few steps ahead of their competition.

One would think that IT departments would observe and learn from this but way too often they do not pay attention to the business drivers of the organization and continue to stay with the same IT infrastructure year in and year out and resist change on any level.

There are those that would argue that “if it isn’t broke don’t fix it” and I agree to a point but I believe that if IT professionals are going to contribute to building a strong value-driven culture that works to achieve the business goals of the organization they are going to have to look at new approaches that may enhance the very work they are held accountable for.

Being responsible for business development for our Cincinnati IT consulting firm, over the past couple of weeks I have approached several clients and potential clients with some new value propositions.  Many do not want to talk about them, nor are some even curious on what they are.  Everyone has a full plate and little capacity for a new application development services, IT training or IT consulting project.

However, here is a question that I have for these individuals.  If it is true that information technology changes every fifteen to eighteen months, how can the IT systems and enterprise IT applications that you have had in place for the last three to five years continue to be relevant or simply as efficient as they could be?  Do you not owe it to yourself to at least listen to what an IT consulting firm here in Cincinnati has to offer?  Perhaps that IT consultant has significant experience with a solution that can make a difference but you are unaware of it because you are resistant to change and everything is running 'smoothly'.  I can understand your hesitation but what if the new solution could greatly improve your IT infrastructure, decrease costs, fuel improved productivity or more effectively balance your IT staffing needs?   Wouldn’t it behoove you to at least listen?
 

The IT Value Proposition Amid Turmoil

Monday, March 16, 2009 by Michael Kiffmeyer

ClearviewIn weak economic conditions, your company’s decision makers need the ability to understand how the company is performing against its targets. They simply do not have the time to sift through stacks of reports to find out what’s right – or wrong.  By linking applications, processes and information technology support together any organization will be able to measure exactly how they are performing against their targets.

The management team of any organization uses dashboards, gauges, charts and other graphical elements to translate complex information into a dynamic view of business conditions.  Is it possible to take this same approach when it comes to mapping IT’s relevance to the business targets of the organization?  The short answer is absolutely, but one must start with a plan and that plan should begin with an IT Wellness Check™.

In the IT consulting industry we find too many organizations that try to piecemeal their information technology systems together.  The problem with this is the mere fact that everyone everywhere is dependent on technology, and in this environment, every CIO and IT manager must know that their IT departments are in line with the business goals of the organization.  In these times of economic downturn downturn IT departments are one of the first departments to be cut.  In many cases, this results in the slowdown of production and contributes to missing the business targets of the organization.

An IT Wellness Check™ protects against economic challenges by shoring up internal operations to ensure the entire organization is running at peak efficiency.  IT is a vital part of any organization's internal operations, and a proper IT strategy is critical for IT departments to gain insight and to connect operational details to business drivers.  The IT Wellness Check™ is your business plan to make sure there are no inefficiencies, that you are operationally sound and that there is less chance that your budgets and your department will get cut.  That application development services project that you are trying to get approved will have a better chance of acceptance if you can show exactly how it relates to the business goals of the organization.

Remember, non-technical people often do not realize the consequences of the actions they take when they cut budgets and staff.  It is our job as responsible information technology professionals to make sure we are always operating at peak efficiency and paint the picture for upper management that shows why specific people, applications or IT infrastructure are necessary to assist them in meeting the business targets of the organization.
 

This Is Your Opportunity

Friday, February 6, 2009 by Michael Kiffmeyer

I read today that unemployment has risen to 7.6%.  Yes, its official – we are in a recession.  However, that does not mean there isn’t opportunity because there is.  If everyone believed everything the press is saying our economy does not have a chance and the United States is going to cease to exist.

I also read today that the U.S. government is going to re-visit its parameters for H-1B Visas because they are being used by recruiting body shops rather than giving foreign nationals the real opportunity that they seek.  This means that application developers and specialist are going to be able to make up ground that they have lost to foreign nationals in the past.

My suggestion is for developers to increase their skill-set now before the economy begins to get worse.  Information technology consulting has never been a steady business it always has had peaks and valleys.  When the economy is good projects are plentiful.  When it starts to decline projects usually come to a grinding halt.  But is you have multiple skills it decrease your odds of becoming a statistic.

Organizations try to do more and more internally rather than outsource it when the economy begins to falter.  The more skills a person has the better chances one has to stay employed.  This holds true for IT staffing, development and consulting.  Additionally, when a developer or infrastructure architect can show an organization how to safe time, investment and people through the implementation of their solution they will endear themselves to that particular organization.

Good information technology strategy can more than pay for itself in this economy.  Organizations everywhere are dependent on technology and they need processes to become dynamically automated so they can accomplish more with less while the move towards models of efficiency that will contribute to the productivity of the organization.

Make it your mission to learn more applications and methodologies that can greatly increase the productivity of any company.  To do this is to build value for the organization and you by ensuring there will always be a job for those that are willing to innovate and create a better way.  

This is your opportunity.  Make it happen!

 

Why should I use a Framework?

Thursday, February 5, 2009 by Mark Murphy
Frameworks have become the rage in OO application development, and despite the inherent need for programmers to build it themselves, using a well designed and well supported framework can save you significant time when developing applications for the web.  Let's face it, web applications have a whole set of constraints and threats that local applications don't have, not the least of which is security.  An IT Strategy Consultant can help you choose a framework that will boost your productivity and make your applications more secure.

A good framework relies on well researched design patterns like Model-View-Controller (MVC) to make it easier to apply coding techniques like Don't Repeat Yourself (DRY).  While this can appear to make applications more complex, in practice a modular application based on an MVC framework will help maintain consistency of the application.  If there is only one piece of code that calculates item prices, then wherever those prices are needed, they will always be calculated the same way.  This may seem totally intuitive, but you would be surprised the number of applications I have seen where the same task is coded separately in each place it is needed.  In fact that is how the monolithic programming style worked.  Each program contained all of its code, and it was, usually, easy to see where that program needed to be changed to fix the pricing rule.  Unfortunately, it was much harder to find all the programs that the pricing rule needed to be changed in.

A good framework will contain an abstraction layer to shield you from the nuances of your specific database.  When the time comes to change database engines you won't be stuck with a major rewrite.  Yea, I know you have used the XXX database forever, and will never change.  And in Cincinnati, pigs can fly!  Acquisitions, mergers, changing business requirements, and other things can cause your simple IT Infrastructure to become complicated beyond your ability to effectively manage it.  Consolidation frequently involves choosing a database and porting everything else over to it.

A good framework has a thriving developer community behind it.  This makes it easier to retain application developers, get training, and get questions answered.  This also means that security threats are quickly addressed to keep your data safe in the brave world of the internet.

As a good IT strategy, choosing and using the right framework can boost the productivity of you application development staff, and make your applications more consistent and more secure.

Cincinnati IT

Thursday, February 5, 2009 by Michael Kiffmeyer

I have been a part of the Cincinnati Information Technology community for twenty one years now.  In that time I have seen many changes, but if there is one constant it is the need to establish and nurture relationships. While this can be a valuable asset it also can be a detriment for information technology departments that are seeking the best IT business solutions for their company.

As a native Cincinnatian who also has also lived and worked an extended amount of time on the West Coast I have had the opportunity to compare and contrast the different business environments.  In Cincinnati people really have to know and trust you before they are willing to do business with you.  In other parts of the nation the relationship is not quite so intimate.

I believe in the old saying “different strokes for different folks” but sometimes habits and traditions can get in the way of progress.  I sell for a living and establishing new business in Cincinnati can have more than its fair set of challenges.  People do not like change for the most part they like familiar and comfortable instead.  Comfortable can make your IT business vulnerable and if you are a CIO that likes to maintain the “status quo,” you could be missing out on a new technology that can be a difference maker simply because you were unwilling to entertain anything new.

The value of listening to a new consultant is that they can bring valuable insight and insight to a situation or problem that you had not previously considered.  In these economic times, organizations need to embrace new solutions that can do more with less and put you at a real competitive advantage.  If you have kept the same vendor for let’s say five years how do you know what else is out there?  Do you regularly measure you IT infrastructure against the best practices in the industry?

Technology changes every eighteen months and often times sooner than that.  If you have not listened to other consultants or recently conducted an IT Wellness or optimization check, how do you know that the applications or the infrastructure developed meets the needs of the organizations business goals and objectives?  Do you know how to build the business case for management that will preclude your IT department from getting budget reductions during these critical times?

Organizations have become extremely dependent on technology and understand that with the right applications business processes and methodologies they can make a real difference in the entire operation.  CIO's owe it to themselves to continually research and put themselves in the position of entertaining new approaches and new ideas.   Regardless of how comfortable you may be with your current supplier do you not owe it to yourself and your company to at least listen when you approached by a new supplier? I appreciate our tradition in Cincinnati to develop long-standing relationships, but perhaps we should question if these long-standing relationships are giving us everything we need from an IT perspective.  What is my suggestion?  The next time I call perhaps you might want to speak with me because I just might have a solution for a problem that you never considered before and it just may be the difference maker you have been searching for.
 

Phone Future?

Monday, December 8, 2008 by Matt Warman

With the success of the iPhone, and new releases by Google and Blackberry, it is clear that the next generation of phones will find their way into business users’ hands. What does this mean for application development team members?

First, a little opinionated history of the telephone industry. As a mandated monopoly for many years, telco technology was stagnated until it were forcibly separated. Technologies like the cell phone were created after they were forced to compete. The recent re-consolidation of the "Baby Bells" is showing that profit is more important than innovation. Fortunately, companies like Apple and Google are pushing the technology.

Unlike other countries, the U.S. has large population bases spread out over thousands of miles. There are many areas today without Internet or cell phone coverage. "The last mile" installation has been a hotly contested issue for a while now. Countries in Europe and Asia have exceedingly fast networks. For example, Japan is working on pushing HD movies on demand to the phone. Russia has created its own WiMax service that gives their country better service and coverage.

On the good side, it means there are new interesting applications to develop. I wrote about some applications in an earlier post. These were consumer applications, but could easily be adapted for business. Locating field staff graphically would have a big use in business. Taking a picture of a part, and having the server recognize the part and send a replacement would another example of using the new technology in unforeseen ways. Technologies like Flex and  JavaFX will make life for application development team members easier to create the next generation applications.

On the bad side however, is the US cell phone infrastructure. Unreliable, slow networks and conflicting technologies will limit the usage and types of applications written. Application development team members will be frustrated in writing applications that don’t have enough bandwidth to perform.

Will it improve? Time will tell. Clearly the existing service providers are not interested with improving service, and would even like to charge more for access. Once business demands better service, things could improve. The new president is looking to give Internet access for all children. For that to happen, we would need a network that is comparable to the rest of the world. Some even think this issue is so important to our country, a "mobile space race" is necessary.

I think it has to happen, or we will be left behind economically. More workers can telework if the infrastructure is there. That saves valuable energy, and also changes how and even where people live. A federally funded initiative would create a lot of jobs in developing IT infratstructure, networking, and application development, and would greatly benefit not only business, but all of this country.

Is Your Network Secure?

Friday, December 5, 2008 by Aaron Whittenberger
You could probably go into any business in the world and answer that question with—probably not.  The fact is that day by day, more and more companies are becoming vulnerable to internet attacks on their network.  Only 15% of businesses filter malware at their firewall.  SQL injection attacks have more than doubled in 2008 according to a July 2008 report by IBM.  Web applications by far are the greatest point of attack, but attacks on VoIP are increasing according to NetworkWorld. This is caused by many factors including:

1.    Network security technology is not keeping pace with new types of attacks
2.    Some security measures interfere with other security measures effectiveness
3.    Businesses concentrate on securing traffic coming in through their firewall but put little effort in securing their employee’s traffic, both in and out.

Hackers are working daily to find new ways of hacking into networks and websites and the technology to prevent them from getting in is not keeping pace.  They take tools, such as network scanners and snoopers, which Network Security Specialists use to secure their network and scan remote servers for vulnerabilities or ports that should not be open.  Once found, they exploit those points of vulnerability.  Using tools like eVade O’ Matic Module (VOMM), they create thousands of variants of a virus or malware, requiring an equal number of Anti-virus or IPS signatures for your scanning software to pick them up.  They use obfuscating tools to break up the communication packets to help prevent detection of the malware contained within.  These are the kinds of tools and methods that are being used to render your IT infrastructure vulnerable.

Many companies use SSL technology, especially those that have ecommerce websites.  This is great for traffic as it passes over the internet.  SSL encrypts the packets so that they can not be picked off the internet and read.  However, the encryption occurs at the origination of the communication and decryption occurs at the destination, after it passes through the firewall.  So the firewall reads what part of the communication it can read and sees it is destined for your website, has a rule that allows that and passes it through.  It is unable to decrypt the encrypted part of the packet, which may contain a virus or malware.

Companies focus their efforts on traffic to and from their website, but don’t put a lot of effort in securing their employees as they surf the web, for business purposes of course.  Google reports that on any given day 1 in 10 websites is infected with malware.  Today’s attacks are aimed at getting you to an infected website where the malware is hidden on the webpage and downloads to your computer as soon as you hit the website.  Even once trusted websites, such as Wikipedia and Expedia, have encountered recent attacks.  Blogs have become popular in recent years and are usually considered to be from an expert authority on the subject.  But anyone can post a comment to the blog and encourage the readers to go to a URL.  When the reader clicks on the URL link they become unknowingly infected.

So what is the answer?


Technology solutions to be effective against the multitude of the types of attacks that are out there today and tomorrow have to have a layered approach.  Stop the attacks at different points, so that if an attack gets past the first security point, it is stopped by the second or third.

Proxy server

Proxy servers remove the hacker’s view of your servers and applications.  Cost constraints keep a lot of companies from deploying proxy servers, but they more than pay for themselves by allowing your IT Infrastructure Management staff to concentrate on other issues besides security breaches.  80% of Internet attacks are aimed at a specific application, Oracle, MS-SQL or VoIP.  Remove the hacker’s ability to see what is running on your servers and they will be less effective in their attack.

Positive Secure Model

This model states that everything is bad except what is explicitly stated as good.  So rules are put into place for every piece of allowed internet traffic, everything else is disallowed.  This requires in-depth knowledge of your employees and applications.  This model is very effective in stopping the “zero-hour” attacks.  These are very newly created attacks that have been in existence for zero hours.

Deep inspection firewalls

New firewall applications are coming out and will be readily available soon that have the ability to decrypt the SSL packet and inspect it for unwanted traffic.  This gives them the visibility to fully enforce their policy rules on the entire communication packet.

Reputation and Geo-Location policies

Just as every individual and business has a credit rating that indicates to a company or lending institution whether they should do business with this individual or business, serves are coming out that gives a reputation score to websites.  Appliances are put into place to retrieve the reputation score of the website being visited or attempting to get into your website and it is determined whether it will be allowed, or if certain functions, ActiveX, exe or pdf file downloads, JavaScript shall be disallowed.

McAfee reports that Hong Kong, China and Russia are the most dangerous countries for internet traffic.  If you’re a local or regional American business that has no interaction with these countries, why would you have internet traffic from these countries.  

Conclusion

Even though security technology is not keeping pace with the number and changing types of threats being developed out there, there are several technologies being developed to render these attacks less effective.  The best approach to securing your network is to put into place as many of these technologies as possible, but in all cases more than one model is needed to make your IT infrastructure secure.

IT Infrastructure Management

Wednesday, December 3, 2008 by Michael Kiffmeyer
One of the telltale signs of over taxing the US infrastructure is the economic turn down that has not only affected the US but many parts of the world as well.  Our healthcare system is crying for change, or airline industry is running on a 30 year old infrastructure and many corporations are still trying to operate business with technology that is outdated and maxed out. Yet, organizations seem to want these systems to produce more even though they personally do not invest in their upkeep.

Fact of the matter is – most organizations maintain their automobiles better that they maintain their IT infrastructure.  It is a fact that technology changes every eighteen months. So, why is that far too many companies insist on using the same systems that they purchased twenty years ago?  I believe one of the reasons for this is that far too many organizations do not realize the business value of IT along with the advantages of IT optimization.  For too long, IT has been looked upon as a cost center instead of a viable contributor to the overall value of the business.

Ask any CEO today of any organization how vital technology is to their business and 9 out of every 10 asked, will state that their business would not survive without it.  If this is indeed the case, these organizations need to ensure that the technology and IT systems that they depend on should be reviewed on a regular basis.  One of the ways to make sure that your technology is in good operating shape is through an IT Wellness Check™.  My organization, STAR BASE Consulting Inc offers such a service and it is designed to provide a professional third party benchmark based on industry standards on the effectiveness and wellness of your IT systems.

A word of warning as it pertains to IT systems and IT infrastructure.  They both had a lifespan and it would behoove any firm that is dependent on technology (virtually and organization today) to take a serious look at its current IT systems and to determine what the overall wellness of its systems is.  Ignore them and they will fail you much like the US financial infrastructure has failed the United States recently.  Everything worked really well for an extended period of time but when it started to fail it failed in many areas.  Do not let this happen to you – take preventive action now!