Let's Not Understate the Cyber Threat

Wow. I read with some surprise and consternation an article in Government Computer News, 4 December 2009. In this article, the author portrays the fears of a “digital Pearl Harbor” or overwhelming cyber attack on the United States as overblown—almost as if it’s of no real possibility or significant impact. In short, the article states:

“What good would it do an attacker to take down the vital U.S. networks? While the damage to this country could be great, the benefit to an attack would be nil if it could not be followed up. The real threat of cyber warfare is not in stand-alone attacks, but in attacks coordinated with military action.”

While, I agree that a coordinated attack is obviously more dangerous than a cyber attack alone, the threat and potential damage of a cyber attack could potentially be devastating—with or without military action.

Let’s think for a second about how the military traditionally projects force around the world through conventional warfare—taking control of the air, land, and sea. Control the sea-lanes and you have power over 90%+ of international commerce. Control the land and you have power over people’s daily lives—including their ability to satisfy even basic needs for food, clothing, and shelter, their personal safety, and even their ability to govern themselves. Control the air and you control freedom of movement on the ground, people’s basic comings and goings. Traditional military power can affect just about every facet of people’s lives including ultimately the taking of life itself i.e. paying “the ultimate price.”

Now think for a second, about what a massive cyber attack could potentially do to us. At this stage in history, we have to ask ourselves not what elements could be affected by cyber attack, but what elements of our lives would not be impacted? This is the case since virtually our entire civil and elements of the military infrastructure are dependent on the Internet and the computers that are connected to them. If you “pull the plug” or corrupt the interconnected systems, “watch out” seems apropos.

The same areas that are vulnerable to traditional military attack are threatened by cyber attack: Commerce, Energy, Transportation, Finance, Health, Agriculture, (Defense)…are all deeply interwoven and dependent on our interconnected computer systems—and this is the case more and more.

Think e-Commerce, online banking and finance, manufacturing production systems, transportation systems, food production and safety, the energy grid, electronic health records, C4ISR, and so on.

While thank G-d, we have been spared a really devastating attack to date (if you exclude the massive data compromised/stolen in recent cyber attacks), we would be derelict in responsibilities for ensuring safety and security if we thought that was it.

Further, while unpleasant as it may be, we should consider the impact in terms of potential for physical harm or loss of life in the event of a serious cyber attack?

While many brush aside this possibility, there is certainly the potential. Even putting aside the potential public panic/chaos and ensuing loss of life and property that could occur in a serious attack, how about just taking out a single, major facility—like a dam, power plant, reservoir, electrical hub, transportation system, and so on. This is an important focus of efforts to ensure critical infrastructure protection, a public-private sector partnership initiative.

Rep. Lamar Smith, R-Texas said "Until we secure our cyber infrastructure, a few keystrokes and an Internet connection is all one needs to disable the economy and endanger lives.”

Sure, a severe and consequential attack would require ample skills, knowhow, resources, and sophistication—it is no small feat—but with the hosts of cyber criminals, terrorists, and hostile nation states out there increasingly trying to hack our systems, there is valid cause for concern.

This recognition of what’s possible does not mean it is probable or imminent. However, the awareness and understanding of our increasing dependence on the Internet and related systems and the acknowledgement that there are those out there—as in 9-11—who seek to do our country harm, should not blind us with fear, but rather spark us to constructively deal with the challenge and take proactive actions to secure the ever expanding realm of cyberspace.

The Executive Summary in the CyberSpace Policy Review that was conducted by the White House in 2009 sums it up, this way:

“The globally-interconnected digital information and communications infrastructure known as “cyberspace” underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century.”

We should not and cannot understate the possible threats against our nation, but rather we need to act responsibility and rationality, with resolve to protect our nation, before and not only after. As the CyberSpace Policy Review states:

“The Nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity-related issues, policies, and activities seriously.”

Fortunately, our nation has recognized the potential threat and is acting, as Security Focus reported on June 24, 2009: “The U.S. Secretary of Defense ordered the military to create a unified command to act as the nation's central hub for cyber capabilities and commanded the Pentagon to develop a policy framework for cyberspace operations.”

On a personal note, I am grateful for the many good, hardworking people in our military, civilian and private sector that are working to secure cyberspace for us, and believe we need to do this with vigor and resolve. It’s necessary in order to safeguard our future that is ever reliant on technology.

Let's Not Understate the Cyber Threat

Tech is Threatening to Some and A Savior To Others

As technology advances and supplants the “old ways” of doing things, some people are threatened that they are being put “out to pasture” and others find opportunity in the emerging technology—they find in it something new to learn and grow with, perhaps an opportunity to shine and become the resident subject matter expert at work or at home.

As we get older, it’s natural that some people may not be as flexible in “starting over,” learning something new, or changing the way “we’ve always done things.” It’s reminiscent of the sort of unflattering old saying that “you can’t teach an old dog new tricks”—a saying by the way that I don’t really believe (you should see my Dad on email, Internet, and so on—he’s great!). But at the same time, people, as do all things, have a life cycle, and our strengths and weaknesses go through peaks and valleys at various points on the cycle. For example, “with age comes wisdom.” Years ago, getting the chairman or CEO to use email was a corporate challenge. Now, young people are migrating to Social Media for communications, and email is the technology dinosaur. It’s a constant technology transformation.

In November 2009, the Wall Street Journal reviewed a new book by Sci-Fi author Cory Doctorow, called “Makers”. “This novel is set in a not-too distant future when the creative destruction of technological change has created an economy so efficient, with profit margins so thin, that traditional companies can hardly stay in business.” In this book, the inventor “uses three-dimensional printers to produce copies of machines and most anything else at close to no cost.” Now “good ideas are copied so quickly that they become commodities. Every industry that required a factory yesterday only needs a garage today.” Where this leaves us is in a time with “competition and invention getting easier and easier—it’s producing a kind of superabundance.” And the result is widespread unemployment and stress.

As we are presumably heading out of a major recession now with unemployment topping 10% (and some would say the real figures, including the underemployed and those that have stopped looking for work, at closer to 20%), we must but wonder whether the recession/unemployment is due to the financial crisis alone or is there some element that is due to our new high-tech economy, where everything in the manufacturing sector has either been tech-enabled or outsourced to Asia. And where we are left in a primary “services economy—pushing papers and flipping burgers? Is there a time coming when we become so technologically advanced, like in the Makers, that there is a very real threat of leaving hundreds of millions of people behind, while the few technology mavens “have it all”?

Interestingly enough, with the advancement of technology, the income disparity between rich and poor has grown where the top 1% of Americans own more than a third of the wealth, compared with a fifth of the wealth in the 1970s (according to Robert Reich).

I think it is critical that smarts and performance be rewarded (i.e. performance-based), but that we cannot let things get out of control and unjust. Billions cannot starve while the ultra-rich hop from rural mansion to Park Avenue condo and from private plane to recreational yacht. Technology must be used to level the playing field and not abuse it. Some like Bernie Madoff used systems developers and technology to create and issue phony financial statements to Ponzi-scheme clients showing trades that never occurred. Instead, we need to use technology to educate, communicate, share, and advance the opportunities for all and overcome the technology divide through amazing advancements here and yet to come. To do this, we must focus on continuous innovation and application of technology to the challenges we face—whether alternative energy, health care, world-hunger, global warming, and so much more. There is no shortage of issues for us to apply our minds and technology to—there is plenty for everyone to contribute to.

Tech is Threatening to Some and A Savior To Others

Playing It Safe or Provoking to Action

Which does your leadership do? Do they play it safe--staying the same familiar course, avoiding potential change and upset or do they provoke to action, encourage continuous improvement, are they genuinely open to new ideas, and do they embrace the possibilities (along with the risks) of doing things better, faster, and cheaper?

Surely, some leaders are masters of envisioning a brighter future and provoking the change to make it happen. Leaders from Apple, Google, Amazon, and other special leaders come to mind. But many others remain complacent to deliver short-term results, not "rock the boat," and keep on fighting the day-to-day fires rather than curing the firefighting illness and moving the organization to innovation, ideation, and transformation through strategic formulation and execution.

Provoking to action is risky for leaders as the old saying goes, "the nail that sticks up gets hammered down," and often leaders that make even the best-intentioned mistakes in trying to do the "right thing" get sorely punished. Only enlightened organizations encourage innovation and experimentation and recognize that failure is part of the process to get to success.

While responsible leaders, almost by definition, provide a stable, reliable, secure, and robust operating environment, we must balance this with the need to grow and change productively over time. We need more organizations and leaders to stand up and provoke action--to drive new ways of thinking and doing things--to break the complacency mindset and remove the training wheels to allow a freer, faster, and more agile movement of organizational progress. To provoke action, we need to make our people feel safe to look out for long-term organizational success strategies rather than just short-term bottom line numbers.

Harvard Business Review (December 2009) provides some useful tips for provoking action called "Five Discovery Skills Separate True Innovators from the Rest of Us."

• Associating--Develop a broad knowledgebase and regularly give yourself the time and space to freely associate--allow your brain to connect the dots in new ways and see past old stovepipes. “Fresh inputs trigger new associations; for some these lead to new ideas.”
• Questioning--”Innovators constantly ask questions that challenge common wisdom.” We need to “question the unquestionable” as Ratan Tata put it. We must challenge long-held assumptions and “Ask why? Why not? And What if?” Don’t be afraid to play devil’s advocate. Let your imagination flow and “imagine a completely different alternative.” Remove barriers to creative thinking and banish fear of people laughing at you, talking behind your back, dismissing you, or even conducting acts of reprisal.
• Observing--Careful observation of people and how they behave provides critical insights into what is working and what isn’t. There is a cool field of study in the social sciences called ethnomethodology that studies just such everyday human behavior and provides a looking glass through which we can become aware of and understand the ways things are and open us up to the way things could be better.
• Experimenting—We’ve got to try new things and approaches to learn from them and see if they work and how to refine them. Productive changes don’t just happen all of a sudden like magic; they are cultivated, tested, refined, and over time evolve into new best practices for us and our organizations. Experimentation involves “intellectual exploration, physical tinkering[and] engaging in new surroundings.”
• Networking—It’s all about people: they inspire us, provoke us, complement us, and are a sounding board for us. We get the best advances and decisions when we vet ideas with a diverse group of people. Having a diverse group of people provides different perspectives and insights that cannot be gleaned any other way. There is “power in numbers”--and I am not referring to the power to defeat our enemies, but the power to think critically and synergistically. The group can build something greater than any individual alone ever could.

Of course, we cannot drive change like a speeding, runaway train until it crashes and burns. Rather, change and innovation must be nurtured. We must provoke to action our organizations and our people to modernize and transform through critical thinking, questioning the status quo, regular observation and insight, the freedom to experiment and constructively fail, and by building a diverse and synergistic network of people that can be greater than the sum of their parts.

Playing It Safe or Provoking to Action

Federal Computer Week - Discussion of ITIL and EA

Services listed under ITIL and enterprise architecture models are
different in nature, said Andy Blumenthal, chief technology officer at
the Bureau of Alcohol, Tobacco, Firearms and Explosives, who did not
speak on behalf of the agency.

“When we talk about services in an EA context, we refer to those that
are used for mission and business purposes,” he said. “In contrast,
ITIL-type services are underlying support functions to the customer,
such as problem identification and resolution. An example of an EA
service versus an ITIL service would be a document management solution
versus a help desk or network management function.”

...

“Traditionally, architecture efforts have been notorious for being an
ivory-tower effort that results in shelfware,” Blumenthal said. ITIL
proponents also tend to be squirreled away in data centers and not
inclined to consult with architects.

A cultural shift is necessary, Blumenthal said. Enterprise architects
in particular must become more user-oriented if they’re going to stay
relevant in a changing technology environment, he added.

To read the entire article go to:
http://fcw.com/articles/2009/12/07/comparing-ea-and-itil.aspx

Federal Computer Week - Discussion of ITIL and EA

Leadership: Fight or Flight

When we are confronted with difficult situations, people tend to two different responses: fight or flight.

Generally, people will stand and fight when they are either cornered and have no other option, when they will suffer undue harm if they just try and “let it go”, or when the issue is something that they really believe strongly in (like a principle or value such as equity, justice, righteousness, etc. that they feel is being violated).

In contrast, people typically will flee when they feel that they can get out of a bad situation mostly unscathed and their principles will not be violated (such that they can live with their personal and professional dignity intact). Often, people consider fleeing or a change of venue preferable to “getting into it” when it’s possible to avoid the problems that more direct confrontation can bring.

There is also a third option not typically addressed and that is just “taking it,” and letting it pass. In the martial arts, this is akin to taking someone’s best shot and just absorbing it—and you’re still standing. You go with the flow and let it go. This is sometimes feasible as a less dramatic response and one that produces perhaps less severe consequences (i.e. you avoid a fight and you still yield no ground).

Harvard Business Review (December 2009) in an article called “How to Pick a Good Fight” provides some guidelines on when as a professional you should consider standing up and fighting, as follows:

1. “Make it Material”—Fight for something you really believe in, something that can create real value, noticeable and sustainable improvement.
2. “Focus on the Future”—Don’t dwell on the past or on things that cannot be changed. Spend most of your time “looking at the road ahead, not in the rearview mirror.”[This is actually the opposite of what 85% of leaders do, which is trying to figure out what went wrong and who to blame.”
3. “Pursue a Noble Purpose”—Make the fight about improving people’s lives or changing the world for the better.” I’d put it this way: stay away from selfish or egotistical fights, turf battles, empire building, and general mud slinging.

“The biggest predictor of poor company performance is complacency.” So leaders need to focus “the good fight” on what’s possible, what’s compelling, and what’s high impact. Great leaders shake things up when the fight is right and create an environment of continuous improvement. Leaders create the vision, inspire the troops, and together move the organization forward to greater and greater heights.

As for fleeing or “turning the other cheek” those venues are best left for issues of lesser consequence, for keeping the peace, or for times when you are simply better off taking up the good fight another day.

Leadership: Fight or Flight

A Young Adult Chooses To Give Rather Than Take

Here is a poem written by a young adult who was recently confronted
with a difficult choice - whether to go on a fancy trip to Europe or
Peru, costing thousands of dollars but promising "the time of your
life," or to spend a week participating in a Habitat for Humanity
project, and giving back to those in need.
I am humbled and inspired by her words and her choice.
In terms of tikkun olam (repair of the world - a Jewish term for an
individual's purpose in life), this is a great lens with which to view
many of the choices we have day in and day out. Our investments in
people and those less fortunate are often the best ones that we can
make - and those with the highest return, personally and for the
organizations we represent.
_____________________
"What is a Good Feeling?"
A dream maybe that looks me in the eye,
I try to catch it but it just flies by,
A short second ago there was my chance,
I was even just about ready to dance.
The question is always asked: why not me?!
Why can’t I be lucky!
The sun, the moon, the stars,
Waken me up oh mars.
Shine that light on me,
Guide me to what is happy,
Pearl, silver, and even gold,
It’s now time to think beyond what is displayed and told.
Look beyond the light,
Into the darkness of the night,
Like others, it is even hard for me,
When I even dare to see reality.
The million-dollar beach home,
The shape of a dome,
An in-door pool,
Oh how mighty and cool.
Pshh, ya right!
Just look at MOST people’s plight,
People losing jobs here and there,
This is in no way fair.
Millions of citizens living on the streets,
On disgusting benches supposed to be used just for seats,
It’s time to wake up and see,
People don’t live all rich and fancy.
It’s time to open our eyes,
We shouldn’t live lies,
I want to step closer to reality,
I’m at the right age to learn more about actuality.
I want to help others,
I want to give to families: fathers, mothers, sisters, and brothers
I want to put smiles on children’s faces,
I want to leave some of my traces.
Traces of charity,
What a rarity,
I want to be one who gives and not takes,
For once in my life I am positive that this won’t be a mistake.
This choice is the right,
And I say this with all force and might,
It’s without doubt a chance to make a difference,
This surely makes the most sense.
~THERE IS NOTHING LIKE THE GOOD FEELING OF ASSISTING OTHERS~

A Young Adult Chooses To Give Rather Than Take

Right In Front of Us, but We Are Blind to It

Last week, there was a 13-year-old boy, with Asperger’s syndrome, who ran away from home and rode away in the NYC subway system for 11 days undetected!!! The boy went missing with $11 dollars in his pocket. “According to CNN, the boy's mother says he survived on fast food and candy he purchased in the subway system. He spent the majority of his time riding the trains. He wore the same clothes for the duration and lived underground, sleeping in subway cars and using underground restrooms.” Many people were out looking for this boy, including the police, but neither the searchers nor the extensive surveillance apparatus in New York picked him out. Apparently, no one on the trains reported seeing this kid riding endlessly around 24x7, and the boy was invisible to the myriad of hardworking transit workers and officers who are all over the transit system, until day 11 when finally one officer recognized the boy from his missing picture. How can a boy be there for almost two weeks, but be seemingly invisible to the thousands of riders and workers passing thru the subway system and what can this teach us about leadership and organizations? Information Overload—This is truly the information age. We have morphed from not having enough information to being flooded with it and not being able to process it. With the missing boy on the NYC MTA subway system, he was literally lost amidst the more than 5 million riders a day and 468 stations. This is a common situation these days where we have access to stores of information, on databases and through the Internet, yet we frequently struggle to find the golden nuggets of information that really mean something. Post 9-11, our military and intelligence communities are being flooded by sensor information from a vast network of resources, and the challenge now is to find innovative ways to process it quickly and effectively—to find the proverbial “needle in the haystack” and to stop the next potential attack. Our organizations in the public and private sectors need faster, more accurate, and finely tuned systems to find the dots, connect the dots, and see the picture. Process Matters—According to Digital Journal, “the disappearance was reported to police immediately, who treated it as a runaway. After five days had passed, it was being treated as a missing persons case.” The police were following their processes in handling this little boy, but it resulted in five days passing without the assumed more intense search that occurs with a missing persons case. Lesson to note is that having standardized, documented business processes are important in efficiently managing operations, but we should not get so caught up in the process that we become rigid and inflexible in handling cases according to the specific situation. While I am not an expert in this, the question does come to mind, whether the search for a child with a known disability may have been escalated/elevated sooner? And the point, I am really trying to make is that we need to keep our organizations and processes agile and responsive so that we can act meaningfully and in time. Break through the Apathy—Having been a former New Yorker (and I suppose, it never truly leaves your blood), I am well aware of the accusations and jokes made about rudeness and apathy from people in the “city that never sleeps.” NY is a tough town, no doubt. The people are quick and sharp. They work and play hard. They are good, productive people. But living in a city with 8.3 million people in one of the most dense urban centers of the world can take a toll. Even with major clean-up efforts in recent years, NYC still has its fair share of crowding, pollution, and crime and this can take a toll on even the best people. I remember daily sights of panhandling, poor and ill people, aggressiveness not limited to the yellow cabbies. I suppose, one disabled boy could get lost amidst the city chaos, but the challenge is to break through the apathy or callousness that can easily overtake people and continue to care for each and every person that needs our help. This is no small challenge in a city with a 21.2% poverty rate (US Census Bureau 1999), let along in a world where 1 in 4 (or 1.3 billion persons) live on less than $1 a day. As leaders, we need to push for caring over apathy and for seeing and acting versus blinding ourselves to the pain and misfortune of others. Could we have found this little boy sooner? Maybe. Could it have ended a lot worse? For sure. While this missing persons situation is now over, we need to prepare ourselves for future events and contingencies. We can do this by continuing to create better systems and mechanisms to process information better, faster, and cheaper—it’s not longer just the quantity of information, but the quality and it’s timeliness and relevance; by reengineering our business processes so that we are alert, nimble and responsive—rigid processes lead to hard and fast rules that serve no one; and building camaraderie with one another—seeing that we are more the same, than we are different—and that everyone matters—even a kid underground in a subway system spanning 656 long and winding miles. And lest anybody think I’m giving New Yorkers a hard time, believe me when I say – it is “the city” that has given me the street smarts to navigate the Beltway and challenge anyone who says that something can’t be done!

Right In Front of Us, but We Are Blind to It

Personal Technology Trumps Work IT

The pendulum has definitely swung—our personal and home technology is now often better than what we are using in the office.

It wasn’t always that way. Early on, technology was mysterious to those not professionally engaged as system engineers or IT professionals. Technology was expensive and made sense for business purposes, but not for home use. IT was a professional enabler to get the job done, but consumer applications were scarce and not intuitive for anything but the office.

The world has turned upside down. Now as consumers, we are using the latest and greatest computers, smart phones, gaming devices, and software applications, including everything social media and e-Commerce, while in the office, we are running old operating systems, have nerdy phones, locked down computers, applications that aren’t web-enabled, and social media that is often blocked.

The Wall Street Journal (16 November 2009) summed up the situation this way:

“At the office, you’ve got a sluggish computer running aging software, and the email system routinely badgers you to delete message after you blow through the storage limits set by your IT department. Searching your company’s internal website feels like being transported back to the pre-Google era of irrelevant results…This is the double life many people lead: yesterday’s technology for work, today’s technology for everything else…The past decade has brought awesome innovations to the marketplace--Internet search, the iPhone, Twitter, and so on, but consumers, not companies, embrace them first and with the most gusto.”

What gives and why are we somehow loosing our technical edge in the workplace?

Rapid Pace of Change—We have been on technological tear for the last 20 years now; virtually nothing is the same—from the Internet to cloud computing, from cell phones and pagers to smart phones and iPhones, from email to social media, and so much more. From a consumer perspective, we are enamored with the latest gadgets and capabilities to make our life easier and more enjoyable though technology. But at work, executives are tiring from the pace of technological change and the large IT budgets that are needed to keep up with the Jones. This is especially the case, as financial markets have seized in the last few years, credit has tightened, revenue and profitability has been under extreme pressure, and many companies have laid off employees and others have even gone kaput.

Magnificent Technology Failures—Along with the rapid pace of change, has come huge IT project failure rates. The Standish group reported this year that 82% of IT projects are failing or seriously challenged. Why in the world would corporate executives want to invest more money, when their past and present IT investments have been flushed down the toilet? Executives have lost faith in IT’s ability to upgrade their legacy systems and fulfill the promises behind the slew of IT investments already made. Related to this is the question of true cost-benefit and total cost of ownership of all the new technologies and their associated investments—if we haven’t been able to achieve or show the return on investment on all the prior investments, why should we continue investing and investing? Is the payoff really there? Perhaps, we are better off putting the dollars into meeting core mission requirements and not overhead, like IT?

Security Risks Abound—With all the technology has come a whole new organizational risk set in terms of IT security. Organizations are hostage to cyber criminals, terrorists, and hostile nation states who can with a few keyboard strokes or mouse clicks disable the company transaction capability, wipe out its memory, steal its information, or otherwise neutralize it from functioning. And the more technology we add, the more the risk level seems to increase. For example, the thinking goes that we were safer when we ran everything in a locked down, tightly controlled, mainframe environment. The more we push the envelope on this and have moved to client server, the web, and now to even more transparency, information sharing, and collaboration—through social media, cloud computing, and World 2.0—the thinking is that we are potentially more open to local and global threats than ever before. Further, with the nation under virtually constant cyberattack and our capabilities to slow or stop these attacks seemingly not existent at this time, executives are reluctant to open up the technology vulnerability spigot any further.

While there are many other reasons slowing or impeding our technology adoption at work, we cannot stop our march of IT advancement and progress.

We are in a global competitive marketplace and the world waits for no one. The problems resulting from the speed and cost of change, the high IT project failure-rate, and the cybersecurity danger/challenges cannot be allowed to inhibit us from progress. We must address these issues head on: We have got to achieve efficiencies from technological advancement and plow the cost-savings into next generation technologies. We have got to drastically improve our IT project success rate though mature implementations of enterprise architecture, IT governance, project management, customer relationship management, and performance measurement (Reference: The CIO Support Services Framework). And we must invest heavily in IT security—with money, people, policy, training, new technology safeguards, and more.

Innovation, technological prowess, and information superiority is what gives us our edge—it is tip of our spear. So yes, we must carefully plan/architect, wisely invest, execute well, and secure our IT. But no, we cannot dismiss the evolving technologies outright nor jump in without proper controls. We must move rationally, but determined into the future.

Personal Technology Trumps Work IT

Learning from Steve Jobs, CEO of the Decade

Fortune Magazine (23 November 2009) named Steve Jobs of Apple, the CEO of the decade.

Steve Jobs’ unveiled his “digital lifestyle” strategy in 2000 when Apple was worth about $5 billion. Now almost a decade later, Apple is worth about $170 billion—slightly more than Google. Apple has revolutionized the markets for music, movies, mobile telephones, as well as computing.

Steve Jobs embodies User-centric leadership in every way:

Customer is #1—Apple’s products satisfy customers. “He may not pay attention to customer research, but he works slavishly to make products customers will buy.” There is intuitiveness to Steve Jobs’ understanding of people and technology. He knows what customers want even if they don’t or can’t articulate it and he designs the technology around the customer. Think iPhone, iPod, and Mac—they are some of the easiest and most customer friendly technologies out there; hence 100,000 applications for the iPhone, 73% of the MP3 player market, and some of the best PCs on the market today.

Innovation is key—Apple is consistently ahead of the curve. Their products are leaders, not follower-copycats. Despite losing the PC wars to Microsoft Windows, the Mac operating system, functionality, and design has been the one setting the standard for ease of use, speed, and security. The iTunes/iPod completely upended the music and movie industry, and the iPhone is the envy of just about every professional and consumer out there who doesn’t yet own one.

Holistic Solutions Delivery—Steve Jobs delivers a comprehensive solution’s architecture for the customer, and it shows with his merging of hardware, software, and service solutions. For example, “over the course of 2001…Apple launched iTunes music software (in January), the Mac OS X operating system (March), the first Apple retail stores (May), and the first iPod (November).” In 2002, Jobs told Time, “We’re the only company that owns the whole widget—the hardware, the software, and the operating system. We take full responsibility for the customer experience.”

Design Genius—The design of Apple’s products are sheer genius. They are sleek, elegant, compact, mobile, yet user-friendly—they are timeless, and pieces such as the G4 Cube have actually been showcased in The Museum of Modern Art and The Digital Design Museum. Even the Apple store in Manhattan with its winding glass staircases and cube entrance is a tourist destination in NYC.

Big Picture, Little Picture—Jobs is a master of balancing the strategic and tactical aspects of product execution. Jobs set the vision, but is also involved in the execution. “He’s involved in details you wouldn’t think a CEO would be involved in.” Apple is his passion and his desire for virtual perfection comes across the spectrum of both product and service from the company.

“Mastery of the Message—he rehearses over and over every line he and others utter in public about Apple.” And it’s not only the contents of the message, but also the timing. Jobs knows how to keep a product launch secret until just the right moment. MacWorld, for example, has been used to strategically communicate the launch of new products, and this has kept both Apple fans and competitors closely tuned to these events.

Steve Jobs is a true model of leadership excellence due in no small measure to his relentless pursuit comprehensive product solutions based on innovation, design excellence, and customer service excellence.

Great Jobs!

Learning from Steve Jobs, CEO of the Decade

Cloud Computing, The Next Evolution

On November 4-5 2009, I attended a good CSC Leading Edge Forum on Cloud Computing.

The kickoff by W. Brain Arthur was a highlight for me (he is the author of The Nature of Technology). He provided an excellent conceptualization of cloud and it’s place in overall technology advancement and body of world innovation. Essentially, he sees cloud in the 2000’s as the next evolution from the Internet in the 1990s. As such, the cloud is computational power in the “virtual world,” providing a host of benefits including easy access, connectivity, and cost efficiency. He sees the cloud coming out of the initial frenzy and into a industry sort-out that will result in a stable build out.

Another great speaker was David Moschelle from CSC who talked about the myriad benefits of moving to cloud such as scalability, self-service, pay as you go, agility, and ability to assemble and disassemble needed components virtually on the fly. With the cloud, we no longer have to own the computing means of production.

Of course, we also talked about the challenges, particularly security. Another speaker also spoke about the latency issues on the WAN with cloud, which currently limits some usability for transactional processing.

Over the course of the forum numerous examples of success were given including Bechtel achieving a 90% cost advantage by moving storage to the cloud. Others, such as Amazon were able to put up new web sites in 3 weeks versus 4-6 months previously. Also, Educational Testing Service as another example is using cloud bursting, since they tend to run data center at known cyclical peaks.

Others connected cloud with social computing: “the future of business is collaboration, the future of collaboration is in the cloud.”

In terms of the major types of cloud, I thought the relationship between responsibility and control was interesting. For example:

• Software as a Service -- more “freedom” from responsibility for service, but less freedom to change service (i.e. less control)
• Platform as a Service – (Hybrid)
• Infrastructure as a Service – less freedom from responsibility for actual end-user services, more freedom to change service provision (i.e. more control)

In all cases, the examples demonstrated that organizations do not have a lot of leeway with SLAs with cloud providers. It’s pretty much a take it or leave it proposition. With liability to the vendor for an outage being limited to basically the cost of the service, not the cost of lost business or organizational downtime. However, it was noted that these mega-vendors providing cloud services probably have a better availability and security than it’s customers could have on their own. In other words, an outage or security breach will either way cost, and where is there a greater chance of this happening?

Sort of a good summary was this: “Leading companies are moving development/test and disaster recovery to the cloud,” but then this will reverse and companies will actually move their production in the cloud and provide mainly a back up and recovery capability in house. This is similar to how we handle energy now, were we get our electricity from the utilities, but have a back-up generator should the lights go dark.

Cloud Computing, The Next Evolution

Delivering Obsolete and Broken IT Projects, No More

NextGov reported on 9 Nov 2009, that the Government Accountability Office (GAO) released a report that “forecasts $3 billion in cost overruns on 16 major projects.”

What’s so of baffling is that these overruns occurred despite the agency’s use of earned value management.

According to Dave Powner, director of IT management issues at GAO, “Every one of the agencies had major problems in determining earned value management…as a result the agencies were unable to accurately identify the progress contractors had made on IT projects.”

These finding are expected to drive the 2009 Information Technology Oversight and Waste Prevention Act to increase oversight of IT investments.

This bill calls for “a Web site to publish information on the status of federal IT investments, similar to the Federal IT Dashboard,” but with more accurate data and with explanations on why projects are over budget.

Certainly, the use of measurements and dashboards to display and track these are helpful in understanding how we are doing in managing our IT investments—so they are on schedule, within budget, and to customer specification.

Clearly, we can only begin to better manage that which we measure and track. Our IT investments and their execution are no longer a black box or so it’s supposed to work.

However, to make these metrics and dashboard effective to improve IT execution, there are a number of critical success factors:

1. Transparency—This is a concept that is in common use these days, and we need to continue to put it in action. All IT investments need to be measured, not just the “major” ones, and their success and failures need to be visible. The purpose must not to scrutinize or shame project managers, but to be able to genuinely guide projects to successful conclusions. This is what the control phase of capital planning and investment control is all about. We need to course correct projects early and often, if necessary, before they are billions of dollars out of control.
2. Honesty in Reporting—Projects need to be reported accurately—no gaming the system. If the facts are sugarcoated or whitewashed, then no dashboard in the world is going to catch the problems that are misreported to begin with. Unfortunately with project management, the elements of scope, schedule, and cost can be manipulated to make it seem as if a project is okay, when it isn’t. One example is de-scoping the project to enable a delivery on schedule and on cost, even though what’s being delivered is not what was asked for or agreed upon.
3. Skills Enhancement—With better measurement of IT investments, we need to provide more training to our project managers. We can’t just expect perfection day 1. We need to work with people and grow them to be better project managers. We can do this with training, mentoring, coaching, and so on. Remember, it’s generally the people that make the IT project a success or failure, not the technology—so let’s invest in our people to make them better project managers.
4. Accountability—We shouldn’t be looking to exact a pound of flesh for genuine human foibles—mistakes do happen. But at the same time, people must be held accountable for fraud, waste, and abuse. Sometimes, people get complacent and they need a reminder that there are real implications to an IT project’s success or failure—mission and people are depending on you to do your job, so you had better do it responsibly and to the best of your ability.
5. Continuous Improvement—Ever since business school, I’ve always loved the Japanese management practice of Kaizen—continuous improvement. This concept is right on the mark with our IT investment and project execution. We are not going to magically put up a dashboard and whoola—better IT projects. It’s going to be a process, a transformation over time. We need to incrementally improve our IT project success rate through learning measurement, and best practices implementation. Of course, time is money, and we need to move quickly, but we do not want to artificially create the appearance of short-term performance improvement at the expense of genuine long-term success.

All the power to IT performance measurement and dashboarding, but with the absolute commitment to not only track and measure, but also grow and improve our customer results. It’s not a gotcha that we need, but a how can we help you succeed.

Delivering Obsolete and Broken IT Projects, No More

Breaking the Organization Free of Dysfunction

Recently, I read this amazing poem called "Autobiography in Five Short Chapters" by Portia Nelson (see below).

It's about the learning and healing process. It can apply to individuals as well as organizations.

It's about learning from our mistakes, growing from them and changing accordingly. This is one of the purposes of life.

All too often, we get stuck in a misguided way of thinking, a "bad" behavior, or in the case of an organization--a dysfunctional status quo.

But it is possible to break harmful paradigms and to change for the better.

Dysfunction is as much about habit and accepting the status quo as it is about the challenge of change.

But growing beyond the dysfunction is possible and rewarding.

Here are five lessons for organizational leaders from this poem:

1. Change is hard
2. Change is possible
3. Change is growth
4. Change is incremental
5. Change is healthy

And one for "good luck"...We don't change for change's sake, but to literally avoid the pitfalls that can sink us.

____________________________________

AUTOBIOGRAPHY IN FIVE SHORT CHAPTERS

By Portia Nelson

I

I walk down the street. There is a deep hole in the sidewalk I fall in. I am lost ... I am helpless. It isn't my fault. It takes me forever to find a way out.

II

I walk down the same street. There is a deep hole in the sidewalk. I pretend I don't see it. I fall in again. I can't believe I am in the same place but, it isn't my fault. It still takes a long time to get out.

III

I walk down the same street. There is a deep hole in the sidewalk. I see it is there. I still fall in ... it's a habit. my eyes are open I know where I am. It is my fault. I get out immediately.

IV

I walk down the same street. There is a deep hole in the sidewalk. I walk around it.

V

I walk down another street.

Breaking the Organization Free of Dysfunction

Supercapitalism and Enterprise Architecture

As a nation are we overworked? Are we just showing up, doing what we're told, and making the same mistakes again and again?

Robert Reich, the former Labor Secretary and Professor at University of California at Berkeley, says that we are more than ever a nation of workaholics.

Reich’s book, Supercapitalism, talks about how we have to work harder to make ends meet for the following reasons:

• Globalization—“our real incomes are under assault from technology and low-wage workers in other countries.”
• Greater competition—“all barriers to entry have fallen, competition is more intense than ever, and if we don’t work hard, we may be in danger of losing clients, customers, or investors.”
• Rapid pace of change—“today most people have no ability to predict what they’re going to be doing from year to year, and job descriptions are not worth the paper they’re written on because jobs are changing so fast.”

Reich says to temper our workaholic lifestyles, we need to “understand that the quality of work is much more important than the quantity.” Honestly, that doesn’t seem to answer the question, since quality (not just quantity) takes hard work and a lot of time too.

In terms of supercharged programs, I have seen enterprise architecture programs working "fast and furious," others that were steady, and still some that were just slow and sometimes to the point of "all stop" in terms of any productivity or forward momentum.

Unlike IT operations that have to keep the lights on, the servers humming, and phones working, EA tends to be considered all too often as pure “overhead” that can be cut at the slightest whim of budget hawks. This can be a huge strategic mistake for CIOs and organizational leaders who thus behave in a penny-wise and dollar foolish manner. Sure, operations keep the lights on, but EA ensures that IT investments are planned, strategically aligned, compliant, technically sound, and cost-effective.

A solid EA program takes us out of the day-to-day firefighting mode and operational morass, and puts the CIO and business leaders back in the strategic "driver's seat" for transforming and modernizating the organization.

In fact, enterprise architecture addresses the very concerns that Reich points to in our Supercapitalistic times: To address the big issues of globalization, competition, and the rapid pace of change, we need genuine planning and governance, not just knee jerk reactions and firefighting. Big, important, high impact problems generally don't get solved by themselves, but rather they need high-level attention, innovative thinking, and group problem solving, and general committment and resources to make headway. This means we can't just focus on the daily grind. We need to extricate ourselves and think beyond today. And that's exactly what real enterprise architecture is all about.

Recently, I heard some colleagues at a IT conference say that EA was all bluster and wasn't worth the work and investment. I strongly disagree. Perhaps, a poorly implemented architecture program may not be worth the paper it's plans are printed on. And unfortunately, there are too many of these faux enterprise architecture programs around and these give the rest a bad rap. However, a genuine user-centric enterprise architecture and IT governance program is invaluable in keeping the IT organization from running on a diet of daily chaos: not a good thing for the mission and business that IT supports.

Organizations can and will work smarter, rather than just harder, with strong enterprise architecture, sound IT governance, and sound business and IT processes. It the nature of planning ahead rather than just hoping for the best.

Supercapitalism and Enterprise Architecture

Building High Performance Teams

At work, there is almost no greater feeling than being part of a high-performing team, and no worse than being part of a dysfunctional one.

Teams are not, by definition, destined to succeed. In fact more often then not, they will fail unless they have the right mix of people, purpose, process, commitment, training, and of course, leadership—along with the time for it all to jell.

I remember being on a team in one special law enforcement agency that had the “right mix.” The project was both very successful and was written up as a case study, and everything in the project was really fulfilling personally and professionally: from gathering around the whiteboard for creative strategy sessions to the execution of each phase of the project. Now, that is not to say that there were not challenges on the project and on the team—there always are—or you are probably just dreaming rather than really in the office working. But the overall, in the experience, the health of the team was conducive to doing some really cool stuff. When the team is healthy and the project successful, you feel good about getting up in the morning and going to work—an almost priceless experience.

Unfortunately, this team experience was probably more the exception than the rule—as many teams are dysfunctional for one or more reasons. In fact, at the positive team experience that I was described above, my boss used to say, “the stars are all aligned for us.”

The challenge of putting together high-performance teams is described in Harvard Business Review, May 2009, in an article, “Why Teams Don’t Work,” by Diane Coutu.

She states: “Research consistently shows that teams underperform their potential.”

But Coutu explains that this phenomenon of underperformance by teams can be overcome, by following “five basic conditions” as described in “Leading Teams” by J. Richard Hackman (the descriptions of these are my thoughts):

“Teams must be real”—you need the right mix of people: who’s in and who’s out.

“Compelling direction”—teams need a clear purpose: “what they’re supposed to be doing” and is it meaningful.

“Enabling structures”—teams need process: how are things going to get done and by whom.

“Supportive organization”—teams need the commitment of the organization and its leadership: who is championing and sponsoring the team.

“Expert coaching”—you need training: how teams are supposed to behave and produce.

While leadership is not called out specifically, to me it is the “secret sauce” or the glue that holds all the other team enablers together. The skilled leader knows who to put on the team, how to motivate its members to want to succeed, how to structure the group to be productive and effective, how to build and maintain commitment, and how to coach, counsel, mentor, and ensure adequate training and tools for the team members.

One other critical element that Coutu spells out is courage. Team leaders and members need to have the courage to innovate, “ask difficult questions,” to counter various forms of active or passive resistance, and to experiment.

In short, harnessing the strength of a team means bringing out the best in everyone, making sure that the strengths and weaknesses of the individuals offset each other—there is true synergy in working together. In failing teams, everyone might as well stay home. In high-performance teams, the whole team is greater than the sum of its individual members.

Building High Performance Teams