Outsourcing And IT

What makes a good BA?

Friday, February 26, 2010 by Aaron Whittenberger

I have spent a lot of time talking about the duties of the Business Analyst (BA); now let’s talk about the characteristics that make up a good BA. I find it interesting that Kupe wrote on this very subject this week, I guess great minds do think alike. As Kupe notes, the IIBA call these underlying competencies and define these as “the skills, knowledge and personal characteristics that support the effective performance of business analysis”.

The BA performs an important role in the application development process and is tasked with the duty of ensuring that the IT business solution meets the needs of the business. The BA develops and maintains the business and functional requirements that the IT business solution must contain in order to be deemed successful.

So we know the role and duties of the BA during a business application development project, so what “skills, knowledge and personal characteristics” does a person need to have to perform these duties. As the duties of the BA entail eliciting requirements from stakeholders and working with an application development team, you can imagine that communication is at the heart of the competencies of a BA. Good written and oral communication is necessary in order to be able to perform these duties. Good communication is not only departing information, but taking in information, or listening. This is often the skill that is over looked when we talk about skills or create a competency model.

Notice that when discussing competencies, that we not only are talking about “skills”, like Decision Making, Creative Thinking, Learning and Problem Solving; but we are also considering “knowledge” and “personal characteristics”. As the BA has to work with both the business and information technology staff, they need knowledge of the organization, industry and technology. What kind of personal characteristics would you want in a person that serves such an important role? I am sure ethics and trustworthiness would make the top that list.

So if you’re a BA looking to advance your career, there are some competencies to work on. If you’re an organization or manager looking to hire a BA, look not only at their skills and past performance, but develop some probing questions that will give you a look into their “underlying competencies”.

Where Does the BA Fit into My Small Organization?

Monday, February 22, 2010 by Aaron Whittenberger

In my previous two-part posts I discussed where the BA fits into the organizational structure. Even Jeff Welsh notes how application software development has changed over the years and requires a team approach for successful implementation of IT business solutions.

But you are sitting there saying we are a small to medium size business (SMB), my entire IT staff is 10 or less, I do not have a Business Process Orgranization (BPO) or Project Management Office (PMO); where should the BA fit into my organization?

SMBs need to utilize the BA role within their project delivery methodology. If the role is not being fulfilled then there is higher risk of failure of the project in that it does not meet the needs of the business. I have worked on many small-to-medium IT staffs and can attest to the fact that when resources are few that people wear many hats. There were projects where I served as the project manager, business analyst, developer and trainer. On smaller staffs, where only one or two of the people will be doing the duties of the BA, it is even more important to make sure that those people are easily accessible by the business units that they support. Have them sit in the vicinity of those business units instead of in the IT Department. I still feel that the BA is an IT function and should report to IT management as opposed to business management, but making the BA readily available and accessible to the business adds value to their role and gains buy-in from the business people to assist the BA with their duties.

So when making the organizational chart keep the BA in the IT Department; but when divvying up office space, make room for the BA near the business unit(s) that they are to support.

Where Does the BA Fit into Your Organization? Part two

Friday, February 19, 2010 by Aaron Whittenberger

In my last post, I joined the discussion of “where does the BA fit into the organization?” I concentrated on the first line BA that should develop the enterprise architecture and help cultivate the business requirements for business process improvements. This BA would be part of a combined Business and IT staffed Business Process Organization (BPO). The purpose of the BPO is to analyze business issues and make the business case as to which IT business solutions projects should be undertaken.

Once a project is approved by the governance body it is turned over to the Project Management Office (PMO) to guide the project to completion. The PMO will be staffed with project managers (PMs) and business analysts (BAs) that will guide the project the rest of the way through the project life cycle. You may be asking why you would need BAs as part of the PMO, or project leadership team; after all the PM is responsible to see the project is completed on-time, on-budget and on-schedule. Yes, but the BA would be responsible to see that the project is completed and the IT business solution meets the business requirements. A business application development project will need functional and technical specifications that the BA should help develop.

The third role of the BA, I alluded to in my first post on this subject, is that of the Test or Quality Assurance Analyst. One role of the BA is to support the system, quality assurance and/or user acceptance testing phase of the project life cycle.

So the answer to the question ‘where does the BA fit …?” is in many positions within the organization. It depends on which BA role you wish to discuss, and whether the organization is large enough to have a BPO and/or PMO.

Any thoughts on the subject?

Where Does the BA Fit into Your Organization?

Monday, February 15, 2010 by Aaron Whittenberger

I attended the CIO Speaker series sponsored by the Cincinnati Chapter of the IIBA^®. The January meeting showcased the CIO and Deputy CIO of FirstGroup America. It was not part of their presentation, but a question was asked of them “should the BA report to IT or to the Business?” This alludes to the bigger question “where does the BA fit into the organization?”

This is the question that many organizations are still trying to answer today. Many organizations are just realizing the benefits of the BA role. One thing to realize, is those of us in the BA arena today are in the forefront of an infantile and growing profession. The International Institute of Business Analysis (IIBA)^®, the professions governing body, was formed in 2004; incorporated in 2006. There are 827 certified professionals (CBAP)^® in the world. Compared to the Project Management Institute (PMI)^®, which was incorporated in 1969, offer five certification programs and has nearly 300,000 certified professionals. You may say that your company has had BAs for the last 5 or 10 years. Then I say your company is one of the forward-thinking organizations that has recognized the benefits that the BA role provides in developing IT business solutions.

Now I believe this discussion will go on for years; but as this is my blog, here I get to put my two cents in. First, let’s define the role of the BA in which we discuss. Many organizations have a quality assurance team, department or processes within the IT application development team. As these people support system or user acceptance testing procedures, these people are Business Analyst. For this discussion, I refer to the Business Analyst that works on the front end of the project life cycle. Who develops the Enterprise Architecture, gathers business requirements for business process improvements and makes the business case for IT business solutions projects to make those improvements.

As the role of the BA is to develop requirements and make the business case for IT application development projects, this is an IT function; therefore the BA is an IT position and should report to the IT management as opposed to the Business management. Although the duties that the BA performs may put him/her in front of external customers of the company, their goal is not to perform the business of the company but to recommend IT business solution projects to improve business processes within organization; this is an IT function.

If your organization is large enough to use terms such as Business Process Organization (BPO) and Project Management Office (PMO); then you should find the BA at the heart of the BPO. The purpose of the BPO is to analyze and recommend improvements to business processes. So now you say that in most organizations the BPO is a business team; I would reply that it should be a combination business and IT team. The improvement to business processes may require a business solution, such as upgrade or replace business machinery or training; or an IT solution, such as application enhancement, system training or system upgrade. Therefore, the BPO should be made up of business positions and IT positions working together to determine the best solution to business issues.

One thing that I would change in many organizations is that I believe the BA should sit more in the vicinity of the business unit(s) that they support as opposed to sit in the IT Department. BAs will be much more effective when they fully understand the business processes in place, issues that business workers face and the daily going-ons within the business unit(s). Also, easy approachability to the BA for the business gains buy-in to the duties and recommendations of the BA.

So there is my opinion on the subject, what is yours?

Technology at the forefront in Haiti

Friday, January 22, 2010 by Aaron Whittenberger

As you watch the enormous humanitarian relief effort going on in Haiti on the evening news this week, following the devastating 7.0 earthquake that hit that country on January 12th, you can probably imagine the technology and IT infrastructure that the U.S. Department of Defense and other agencies has put into place to assist in that relief effort. Read more about it here. The Haiti government turned over the operation of the one runway airport at Port-au-Prince, the nation’s capital, to the U.S. military. An acknowledgement of the U.S. military’s prowess in logistics and technology. For a few days as the relief effort ramped up news reports of delays at the airport were heard, but as that relief effort got organized those reports of delays ceased even with the amount of aide and volunteers flowing into the country were increasing.

What is not reported on the evening news is how an army of geek volunteers from the private sector is supporting that relief effort. Leading the way are organizations like CrisisCommons, Ushaahidi, the International Community of Crisis Mappers and InSTEDD, according to an InformationWeek artical. Application software development gets into the mix, undertaking such tasks as developing ways to help locate U.S. citizens and provide information online about Haiti and how to donate money, developing a timeline of events and a wiki of information online, a GPS-compatible street map of Haiti, an English to Creole dictionary for IPhones and Android mobile devices, and a system to use Twitter messages to ask for or offer assistance to those in need. "We've been working a lot at Sunlight Labs to get application software developers to organize and work together in volunteer communities. Developers may not be competent with a saw, but are starting to realize they have a skill they can contribute," says Clay Johnston, director of Sunlight Labs. "The tools are available, and methodologies like agile project management have been popularized that can facilitate this."

In light of the reports of the failings of the coordination of relief efforts following Hurricane Katrina and the reports of the relief effort in Haiti, it is clear that it is IT solutions that have been put into place to better support humanitarian relief efforts worldwide and that technological advances has clearly moved into the 21st century in support of those efforts.

Deploying JavaFX on Glassfish and Facebook

Thursday, January 21, 2010 by Matt Warman

First, sorry for the tardiness of my posts. Between the holidays, coming back from the holidays, a cold, and a secret project (for now), I haven't had time to blog.. until now. My current focus has been a Facebook game application. Well it's still in the alpha phase, but I wanted to get the architecture up and running. There's nothing worse for an application development person than to finish your application, then find out you need to rewrite it (or worse) because of the architecture doesn't support it. Even without Zembly, setting up a Facebook application is pretty easy. Since I had most of the defaults already in, the only thing I need to do is to tell Facebook where my application resides. Since I don't have Zembly anymore, I have to put on my application development and network administrator hats on set up an application server.
My first test was to deploy the application into my local Tomcat. NetBeans does a great job of having the files available to you, but the thing you learn quickly is that there isn't a simple deployment piece. Tomcat needs a WAR file, so I tried to use the JAR command to WAR up the files in the dist folder. No dice. The war file needs a proper web.xml file to work properly. Rather than use workarounds on workarounds, I created a web application project in NetBeans, linked the jar file from my JavaFX project, and copied the JNLP and HTML files to my new project. I now have a WAR to deploy. Tomcat loves this file. I run and... “FILE NOT FOUND?” was heard all throughout Cincinnati. Your JNLP file that was created points to a servlet called internally by NetBeans. Make sure change the following lines:

<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0+" codebase="http://your server.com/app path/" href="SBWarsTest_browser.jnlp">
<information>
<title>SBWarsTest</title>
<vendor>STAR BASE </vendor>
<homepage href="http://your server.com/app path/"/>

Once I made the change to localhost, everything was fine. Now I wanted a real application server, so I downloaded and installed Glassfish V.2.1 on one of our servers, changed the JNLP file and we are in business. I tried to hit it from my machine, and no dice. After some extensive research, I found out the the Java 7 EA JRE does not play well with JavaFX. I uninstalled it (which reverted to JRE 1.6.18), and it works. In Facebook, you need to set the canvas callback URL to your host application path. The result is the pretty picture you see at the top of my post.

Open-source Security A Major Concern for 2010

Friday, January 15, 2010 by Aaron Whittenberger

According to ComputerWorld, web application development remains top dog by far in the top IT skills to have in 2010. Specifically, companies will look for developers with knowledge of .Net, Java, Web development, open source and portal technologies. The article goes on to suggest that combining web application development skills with business analysis or project management skills is a big plus. ComputerWorld lists the remaining skills to have for 2010 in its top six as: Help Desk/Technical Support, Networking, Project Management, Security and Business Intelligence.

I feel ComputerWorld did not put enough emphasis on Security; this without doubt will be the biggest challenge for IT executives in the coming years. Open-source software may be an innovative money saver, but IT professionals still have concerns that networks could be vulnerable to viruses, cyberattacks and other intrusions.

According to InfoWorld, a new survey from Forrester Research found that 58 percent of large companies have security concerns about open source. In addition, 57 percent of small and mid-sized businesses expressed concern that open-source software would be "complex and hard to adopt".

With the advent and increasing usage of open-source in the business world, expect to see demand for IT security related skills to grow. According to the FLOSS 2020 roadmap presented at the Open World Forum in Paris, 40 percent of jobs will be related in some way to open source by 2020. You can expect application development and security to comprise a great majority of these jobs.

Run with the Pack

Friday, November 20, 2009 by Jeff Welsh

I was reading this article and as a Cincinnati based IT consulting firm owner, found it interesting. Social networks are influencing our everyday lives more and more each day. This research was conducted by Don Bulmer from SAP and Vanessa DiMauro According to them, there were six key findings:

1. Professional decision-making is becoming more social - enter the era of Social Media Peer Groups (SMPG).
Professionals want to be collaborative in the decision-cycle but not be marketed or sold to online; however online marketing is a preferred activity by companies.
2. The big three have emerged as leading professional networks: LinkedIn, Facebook & Twitter.
The convergence of Internet, mobile, and social media has taken significant shape as professionals rely on anywhere access to information, relationships and networks.
3. Professional networks are emerging as decision-support tools.
Decision-makers are broadening reach to gather information especially among active users.
4. Professionals trust online information almost as much as information gotten from in-person.
Information obtained from offline networks still have highest levels of trust with slight advantage over online (offline: 92% - combined strongly/somewhat trust; online: 83% combined strongly/somewhat trust).
5. Reliance on web-based professional networks and online communities has increased significantly over the past 3 years.
Three quarters of respondents rely on professional networks to support business decisions
6. Social Media use patterns are not pre-determined by age or organizational affiliation.
Younger (20-35) and older professionals (55+) are more active users of social tools than middle aged professionals.
There are more people collaborating outside their company wall than within their organizational intranet.

After reading this, a Bad Company tune came to mind, “Run with the Pack”. There is certainly safety in numbers. My question is this: If everyone is doing the same thing, are they giving up any competitive advantages?

Is IT Qualified To Satisfy The Business?

Monday, November 9, 2009 by Aaron Whittenberger

“IT executives increasingly implement marketing initiatives to improve the communications with their business customers. But these efforts often focus solely on the brand aspects of the services under the IT’s control without understanding the business’ perception of IT. To maximize the success, IT must add business satisfaction assessments to its tool kit. Understanding business satisfaction requires qualitative and quantitative data that capture customer expectations and perceptions through different types of interactions such as interviews, panels, focus groups, complaint systems, and surveys. This report provides best-practice recommendations, survey templates, and questions to guide IT executives through the deployment of a business satisfaction assessment. It applies Forrester’s deep expertise in external customer satisfaction to the interface between business customers and their internal IT suppliers.” says a new Forrester report.

I have served on countless business application development teams within several organizations in the Southwest Ohio and Cincinnati Information Technology community, one thing I can say is that most IT organizations do not gauge business satisfaction with IT business solutions. I have served in only a couple of organizations where the business serves on the IT governance committee. An organization does not have to be “big” to have an IT governance committee. No matter what the size of the organization decisions are made as to priorities in IT work. IT governance does not have to be a long drawn out process or take great time commitment from the business or IT executives, but business involvement in IT governance goes a long way in gaining business buy-in as you roll out the IT business solutions to the business.

Involvement in IT governance is just one way that many organizations in the Greater Cincinnati area can improve the IT-business relationship. The Forrester report goes into ways to solicit and gauge business satisfaction with IT business solutions. Doing so should affect decisions concerning not only IT business solution delivery but also IT Infrastructure and IT outsourcing initiatives.

Too Little, Too Late.

Friday, November 6, 2009 by Jeff Welsh

I am part of the LinkedIn community and a member of several groups in LinkedIn. One of the groups I am a member of is the IBM i Professionals group. I get a weekly summary of activity and sometimes there are comments on the posts that people have made. Usually there are no more than 3-5 comments. What caught my attention is a LinkedIn post that had 23 comments. The original post referenced this blog post: http://blog.angustheitchap.com/?p=159 In this post, the author talks about the iSeries application development community needing to pull together to DO something about the lack of support for the platform. He asks the question: What have YOU done for the IBM i platform this week?

As a former iSeries application developer, I thought it was a good question, perhaps about 10 years too late, but a good question none the less. Let me state for the record that the iSeries is a great platform and it is without a doubt the best box for business that IBM has.

The problem is that it is a victim of its own success. There is no other platform where an application written in the 1980’s could still run un-touched even though the underlying hardware has changed numerous times. To me the core issue is this: IBM is no longer in the hardware business; meaning they don’t derive that much revenue from hardware anymore. The majority of IBM’s revenue comes from services. The iSeries does not need or generate the services revenue that other platforms do. So in my opinion, it’s an economic issue and no amount of doing or community is going to change that.

IBM, Java, and the Community

Thursday, November 5, 2009 by Matt Warman

I recently read an article about the state of the IBM “i” and the amount of complaining by IBM application development and business partner folk. I know several RPG application development folk, and it sounds familiar. That made me think about my Java Application development and career. Are there things to complain about, and uncertainty about the future? Yes, but there are 2 reasons why the Java community is in a better place; the business model and the community. Before the IBMers call for a holy war, I said COMMUNITY! I am not talking about the strengths or weaknesses of the hardware or software. The business model for IBM is that they make the hardware and software, and partner for the sales and service. I think that is a viable model until IBM competes in the sales and services with their partners. If a lead is brought in by a small partner, they are awarded by giving the business to someone bigger. This sets up a confrontational relationship between IBM, the big partners, and the little partners. IBM can also decide whether or not you are worthy to be a partner. Why does this affect the software application development team? Because most consulting firm are selling SERVICES not HARDWARE. If they are not seeing business because of political fighting, they don't have to sell it. There are viable options on other platforms, where interference does not happen. IBM never fostered a community, they created a hierarchy with themselves as the head.

Certainly Sun has done some things that made myself and others unhappy. Besides, complaining, we actively pushed to remove barriers in our path. We do have an open source Java. Is there a IBM community that can work with RPG to make it work for them? I also think its about scale and timing. It's not like IBM software developers have their own AS/400 at their home. It's easy for me to create and use nearly any kind of application at my home in Cincinnati, and pretty cheaply. It makes it fun to tell non-technical people about my application development. Nobody but accountants want to hear about accounting programs. Java, and newer languages have grown up with the Internet. I have friends from all over the globe that have similar interests. If I have a problem, I can go online to a forum, friend, or web page to find what I need. I can read and write blogs to voice my opinion (like now). These things are not ingrained in the Legacy community, and in fact, have been actively campaigned against. It is my belief that any software, hardware, or service will die when there is no vocal community to support it.

Takin’ the Basset Hound to the Farm (Part One)

Tuesday, October 20, 2009 by Jeff Welsh

Seems like it has been a while since I have had a chance to do a post. For the last 3 weeks things have been absolutely crazy in our IT consulting world, but in a good way. We had a chance to go to the Techserve Alliance national conference in Las Vegas. I have heard all the jokes, including the one about it staying in Vegas. We did learn that just because you are pre-checked with the airline, does not mean that your bags are. We got our bags checked with literally a minute to spare and fortunately all made it back to Cincinnati.

Upon return, we signed a support contract for a new customer. They trust us enough to outsource their entire IT applications support to us. We have a real life example of an IT Strategy that was discussed at the conference (See #3). Not only was IT strategy discussed but business strategy as well. Here are some highlights:

1. Market Differentiation - customers have lots of choices, how will you stand out?

2. Improve Systems and methodology for delivering service- excellence, efficiency, depth of service.

3. Outsource what you can-eliminate the busy work that does not add strategic value.

4. Deal with the economy being slow to recover till 2012, spend your money wisely, hire wisely, fire quickly, and refine what is working, stop what is not.

5. Build Alliances with like minded providers in different industries and sell collaboratively to serve the customers' need.

My favorite of these five is number four. Said another way, its takin’ the basset hound to the farm. I’ll expand more on that in my next post.

IT Outsourcing in for some big changes

Tuesday, October 6, 2009 by Aaron Whittenberger

A new report from Gartner Research Firm

IT Outsourcing is not going away anytime soon, but a new report from Gartner Research states that the market is in for some big changes. The report predicts that one in four business-process outsourcing firms will disappear within the next three years.

The article in InformationWeek gives advice to CIOs who wish to initiate a new IT Outsourcing contract on warning signs to look for in your prospective BPO partner that would indicate this firm may not be able to fulfill any new contract:

1.    Are they losing money?
2.    Are they winning new business?
3.    The loss of marquee clients.
4.    Poor capitalization is impeding growth.
5.    Toxic exposure to tainted financial firms.
6.    Lock down your exit strategies.

In another article in EconomicTimes I read that IBM will goble up half of India’s IT outsourcing business in 2010.

This is not to suggest that the offshore IT outsourcing business is coming home. IBM’s business is international. With IBM awarding one-half to 1 billion dollar contracts, many India firms will not be able to compete in delivering hardware, software, IT consulting services and integrated business solutions. IBM is one reason that 25% of IT BPO firms will meet their demise within the next three years.

Cincinnati companies show a commitment to Business Analysis

Thursday, September 17, 2009 by Aaron Whittenberger

I attended the first meeting of the season for the Cincinnati IIBA^® Chapter. They are doing a series entitled CIO Speaker Series, where they have the CIO from prominent companies in the Cincinnati area who have demonstrated a solid commitment to promoting the effective practice of Business Analysis in their organizations come and speak on how that commitment is put into practice within their organization.

Now I really thought this was going to be boring but the speaker; Jeff Wolverton, Senior VP and CIO of Great American Financial Resources, Inc. (GAFRI), captured my attention when he spoke about how he used the area of Business Analysis to turn his IT organization around and assist them in providing better IT business solutions.

Jeff has been with GAFRI for 11 years and has held the position of CIO for the past 8 years, but they have really put an emphasis on the area of Business Analysis and have begun to reap the benefits thereof here in the last year and a half.

He demonstrated how putting Business Analysis first changed the reputation of his IT staff within the organization from an IT production support group that is slow in delivering business applications that are often bug ridden, to an IT staff that develops great business application solutions that work for the business. GAFRI IT staff went from delivering solutions and telling the business to report any bugs found and they will fix them to delivering business solutions where they had found 85% of all bugs prior to user acceptance testing.

Jeff also spoke about how in last year’s economy where IT budgets in most organizations were being slashed, he received a double-digit increase; the largest increase in his 8 years as CIO. So how do you get that kind of budget increase and turn around the reputation of your IT staff and the business application solutions that they deliver? GAFRI did it by getting to the business requirements behind the business requests and implementing a systematic, repeatable project delivery process.

Jeff and his team put into place a new IT business solutions delivery process from the requirements gathering phase to project delivery (implementation). This new process was going to take much longer than the old process. What use to take a week will now take two to four weeks. How do you get business buy-in to wait for their business applications? When you deliver a business application solution in which the business usually reports several bugs during testing to delivering a solution in which the business reports almost no bugs, they see value in the new process.

GAFRI’s new IT business solution delivery process put emphasis on two areas: requirements gathering and application testing. They created new roles within their IT staff and put people in place with very specific duties to gain measurable increased value in these areas. They not only put IT staff through training, but they put the business through training on the new delivery process and the business role on working with the IT staff to drive better IT business solutions.

The first new IT role is the Requirements Analyst. This person works with the business in the beginning of the project to elicit and form clear and concise business requirements for the IT business solution. So many times when IT delivers a project they get the punch line to that Dr. Seuss rhyme about the Super Programmer, where the requester says ‘You gave me just what I asked for but not what I need!’. The Requirements Analyst works throughout the project, in a diminishing role, to ensure that the IT solution will meet the needs of the business.

The second new IT role created is the Test Analyst. Typically, testing is thought of after development is complete or nearing completion. In GAFRI’s model test plans are created before or as development starts and are based on the business requirements of the project. The Test Analyst either performs or supports IT Quality Assurance testing and supports User Acceptance Testing.

GAFRI is a shining example of how commitment to the area of Business Analysis can reap many benefits for the organization, both for IT and the business. The end result is better IT business solutions.

Take a Team Approach to IT attacks

Tuesday, September 8, 2009 by Aaron Whittenberger

You more than likely already know you need the best security possible to prevent an attack. You also need IT infrastructure and IT staffing in place to respond to an attack if one happens.

Incidence response should be one of the most important items on your IT security agenda. Your company must be prepared to respond to an incident once it occurs and quite possibly to stop the next one.

As of late, disgruntled employees violate internal policies or misuse system access for their own monetary gain or for revenge on employers due to mergers, outsourcing of business or IT jobs or employee lay offs. Internal threats are as real as external threats.

IT experts say that security professionals with the right skills can help lower the number of and potential for incidents at any organization with their responses.

An article in this week's GovInfoSecurity.com outlines the experts you will need:

Network security specialist: A person familiar with intrusion detection systems.
Penetration testers: Someone who can assess a system's potential vulnerabilities.
Incident handlers: People who understand attack methodology and can apply critical thinking skills to respond to incidents.
Forensics Analyst: The person who looks for evidence after an attack.
Research Analyst: The person to keep abreast technological advances in incident response activities.
Team Leader: Leads the team through crises and communicates to the business incident activities and cost to the business.

The article also outlines a typical methodology the team should follow to respond to all types of attacks:

Preparation and Training: for both prevention and incident response.
Identification: fast identification of an occurring attack and its impact on the IT infrastructure can help in minimizing the duration and cost of clean-up.
Containment: Once an attack has been identified, steps must be taken to minimize the effects of the attack.
Recovery and Analysis: The recovery period allows analysis and lessons learned of What happened? Why did it happened? Was the response effective?

Is your IT infrastructure safe from internal and external attacks? The proper IT infrastructure safeguards and IT staffing with proper security skills can help ensure your organization's security.

Are IT Jobs on the Rebound?

Sunday, August 30, 2009 by Aaron Whittenberger

A Network World article reports that the U.S. gained 7,400 IT jobs in August. Gaining back what was lost the month before and following five months of losses of IT jobs in the U.S. Hopefully this is the first signs of the U.S. coming out of the recession that has gripped the country.

Adding to the good news for IT Services Companies in Cincinnati, across Ohio and the country; as well as application development personnel is news from the U.S. Citizenship and Immigration Services that demand for H-1B Visas are on the decline. They expect the entire 85,000 visas to be given out this year, just not as quickly and with the same frenzy as in the past few years. FierceCIO continues to state that ‘employers are putting a greater emphasis on hiring American workers, buying American goods and abandoning offshore outsourcing’. Where I do not believe this to be the general direction of employers in America, some smaller employers may have taken this direction but large firms continue their offshore IT outsourcing plans.

So does all this mean that better times are in store for IT business solutions professionals in America? I remain pessimistically optimistic.

Swweeet!

Wednesday, July 1, 2009 by Jeff Welsh

Web application development is a must for Cincinnati and Dayton companies. We at STAR BASE, Inc. have written much lately about open source IT solutions. Since we have been on a roll with that, why stop now?

Another open source IT solution we have worked with is Sugar CRM. Sugar CRM falls in to a relatively new software category that I’m going to call Commercial Open Source or COS for short. (Remember you saw the TLA (three letter acronym) COS here first!) COS applications have a free version that you can download and implement and they also have a commercial version that can be licensed and supported like any other software application.

What we have found to be very effective; is to use the open source version and customize and tailor it to meet specific business needs. No need to re-invent the wheel. Swweeet!

Browser Wars Redux

Tuesday, June 23, 2009 by Jeff Welsh

Just when I thought the browser wars were pretty much a thing of the past, they are heating up again. Web application development is difficult enough without having to worry about what version of what browser a client may be using.

We just upgraded a couple of machines to IE 8 and guess what? IE 8 is not compatable with our web based CRM! IE 7 and FireFox 3 work fine, but in IE 8 the search fields are not input capable. IE 8 provides for a “compatablity mode”, but hey that doesn’t work either. I was wondering if Google Chrome would work, but in Chrome, the search fields don’t show up at all; the field labels are repeated.

I was thinking about trying Opera, but stopped because how many web browsers do I really need on my machine any way?

In order for web applications to continue to flourish and expand, there has got to be adherence to standards by both application developers and software companies. There are so many other applications that could be developed and expanded. But what do we do with IT solutions? Both vendors and developers shoot themselves in the foot by delivering applications and software that “stops working”.

What's the business impact?
- Increased support costs.
- Increased applications development and testing time
- Less confidence by the user community of “IT not being able to do anything right”.
- Less time and money to develop new applications.

As a reformed, application developer, maybe I should retitle this post “The Return of the Angry White Guy.” I think instead, I’m going outside and shouting, “I’m mad as hell and I’m not going to take it anymore”.

Come On In, We’re Open

Monday, June 22, 2009 by Matt Warman

The Cincinnati market is known for being conservative when it comes to using software. Most application development people I know would say that big software, from the big firms, either three lettered companies, or their name ending in “soft”, are the only code found in shops. There is the occasional open source item here and there, but usually in smaller shops. Why is that? Well, some firms don’t create their custom application development, they just enhance out of the box software. They need a vendor to yell at and fix things when it breaks, because their staff can’t fix the code, or don’t have access to it. For many firms, it is better to pay a vendor for support than to maintain it themselves. As long as you can point to somebody, it’s ok. Some firms actively fear that open source means that everyone will have their intellectual property somehow. They fail to realize that it is the same proprietary code that everyone uses too. Since, you have the source code, you can see if there is a backdoor coded in the application, something you can’t do with proprietary code.

With these fears aside, many firms, even in Cincinnati, are looking to use open source solutions for their issues. Certainly many are using the free (as in beer) code to save costs. I hope though that some firms will see how this free (as in liberty) also helps their business. It’s a tough call whether to purchase a pre-made business process package (I am looking at you SAP), or to roll your own. I think the best of both worlds would be to use an open source application, and to enhance it. It is a popular misconception that you MUST contribute code, or that you can’t change the code. You can create your own code for use; you can’t sell the application with YOUR enhancements as YOUR NEW application. There is some legal wrangling, yes, but the bottom line is that you have application development teams, so use them. Your best business plan is to use your process as a competitive advantage, not to shoehorn your process into software that all of your competitors use. I think the goal is to beat them, not join them.
The best thing to do is to give your application development team a couple of old boxes to play with, and let them do some research on applications that can save your money, and are flexible enough to work with your processes. You may end up with an inexpensive system, and get that application that outperforms your competitors.

Object-Role Modeling In your Enterprise

Wednesday, June 3, 2009 by Mark Murphy

Recently I have been working on a project revamping a very poorly designed database. This activity brought me to look for some new tools, and I came across something called ORM. That is Object-Role Modeling, not to be confused by my developer friends in the OO world with ORM or Object Relational Mapping. Somewhere, somehow, we have to get a handle on all these TLAs, but I digress. In the past I have touched briefly on the apparent divide between the business and IT. If both of those groups would just speak the same language then application development be better for it, and IT would be able to support the business in the way it was intended.

So what does Object-Role Modeling do for me?

ORM is not a new concept - it dates back to the 1970's, but it is a way to build simple information models using nothing more than simple facts. For example a Customer has a Name. When designing a new system, or even upgrading an existing system, we can easily retrieve these natural language facts, and combine them into a powerful information model that the business can look at and say "yes that is true, but you forgot that a customer also has an address!" Add a couple constraints that tell about the relationship between the object and it's roles, and the developers can automatically generate all the ER diagrams and class models it wants. ORM provides a simpler, more accurate and more powerful approach to information modeling than other approaches such as Entity-Relational Modeling and UML.

ORM is really a very simple approach that, once you get past the "there has to be more to it" reaction, will give you some better communication tools for use between the business and the application development team. In fact if they don't already know it, ORM has been part of Visio for Enterprise Architects for quite some time now, and there are even some open source ORM tools that plug into Visual Studio. The integration of these tools into your application development environment will make your business analysts and database analysts far more productive. As such I will impart, over the next couple of posts, some tidbits that will get you going. In the mean time if you are chomping at the bit, I suggest you jump over to The ORM Foundation for some additional reading.