Ensuring Project Success Through Automated Risk Management
Download as PPT, PDF•0 likes•259 views
The document discusses an automated project governance solution called Insight that provides visibility, control, and early detection of risks to ensure project success. It analyzes problems companies face with traditional risk management practices. Insight addresses these by collecting regular risk assessments and feedback to provide comprehensive visibility into project risks. This helps limit issues like burnout and turnover while improving information flow and risk management practices.
Ensuring Project Success Through Automated Risk Management
- 1. Visibility, Control and Early Detection @ CAI Ensuring Project Success Through Automated Project Governance
- 2. Today’s Agenda Risk Management The Problem Made Simple Today’s Objective The Road Less Traveled Learning the Truth the Hard Way @ CAI Our Solution Some Final Thoughts
- 3. Problem Statement The concept of risk is inherent in any project. Since risk is impossible to avoid, the best way to deal with risk is to contain it. One way to contain risk is through risk management. Risk management involves the identification of risks, analysis of exposure to the risks in a development effort, and execution of the risk management plan.
- 4. Have you ever been surprised by something of significance in your business?
- 5. Have you been told a project or activity was ok, only to find out later otherwise?
- 6. Are you sure that your organization understands what the rights things to do are?
- 7. Do you feel like you are being forced to make key decisions with missing data or information?
- 8. Does this version of “ Risk Management” look all too familiar?
- 9. Do you believe that you have … “At your fingertips” … the most important data and opinions about important activities and efforts?
- 10. If you answered “Yes” to any of these questions then your in good company for the wrong reasons …
- 11. What We Learned About The Industry … Greater than 60% of all IT projects have either failed or were delivered with less than the desired results.
- 12. Of Course We Know the Real Story … Don’t We?
- 13. Today’s Objective To introduce you too a new toolset, process, and capability that provides you with the opportunity to become proactive and quantitative in “ Project Risk Management”
- 14. Road to Risk Management Over 20 years of project experience as a process and metrics company 1 st “Fixed Price” development project delivered in 1983 1 st $1m “Fixed Price” development project delivered in 1986 The metrics of our evolution: Over 350 New Application Development Projects Deployed Over 50 Managed Maintenance Teams Completed Over 4m Billable Hours of Supplemental Support
- 15. We Learned …
- 16. We Learned …
- 17. Things We Know (Facts) The technology to be used The expected start date The expected delivery date The business rules that will be followed The tools that will be used: development and management The best practices to be followed Things We Think We Know The expected start date The expected delivery date The rate of change will be contained to 20% No one will leave the team during the project The business rules that will be followed Things We Know or Do We?
- 18. We Didn’t Know …
- 19. Which is Why We Found Ourselves Too Close To the Edge Awarded a large applications development project Assigned our best Development Manager Implemented our methodology Implement our tools Oversight: CAI and the Customer Bad “All of a Sudden” – Project, CAI, and the Customer @ Risk
- 20. What Did We Do Next ? First we identified our team of and increased our budget and made quick adjustments Including Customer We performed an extensive Post-mortem on this project and others to determine how projects could unravel
- 21. The analysis: Managing risks was a 1x event on projects or at best a 2x event (Beginning and Just Before it Ended) Bad “All of a Sudden” - Not Likely Same mistakes being made on different projects Inherent schedule flaws (Challenged from the Start) Filtered Communications (In Team) Limited Communication (Cross Team) Requirements Inflation (I’ll know it when I see it) Employee Turnover (Higher Than Expected) Specification Breakdown (Design Incomplete) Hidden Productivity Issues (Actual Time vs. Logged) Rate of Change Not Type of Change Heroics (Few People – Extraordinary Efforts) Project Review Revealed: Close to the Edge Too Many Times
- 22. What We Learned About The Industry … Greater than 50% of all IT projects have either failed or were delivered with less than the desired results.
- 23. What We Learned About The Industry … Greater than 50% of all IT projects have either failed or were delivered with less than the desired results.
- 24. And at the End of the Day Our Risk Turned Out to About People … It’s About How People Feel and How They Think !!!
- 25. No one is immune to “ Project Problems” (Unmanaged Risks = Problems) some are just more agile at reacting to them to minimize the impact … Conclusion …
- 26. The Road to the Solution … Investigate how a PMO could solve the problems without the overhead Already committed to the concept just not the typical implementation (needed to automate it) Investigate Tools Only thing on the market were portfolio management tools (not a portfolio problem!!!!) Only possible solution was to “Build Our Own”
- 27. So What Problems Must Be Addressed? How do we get comprehensive visibility to project risks in order to make decisions How do we improve the information flow and get back to a “Management By Walking Around” by leveraging technology How do we limit heroics, burn-out and turnover How do we perform risk assessments regularly during the project lifecycle in order to make comprehensive decisions How do we change the culture by doing the right things and doing things right
- 28. So What Problems Must Be Addressed? How do we get comprehensive visibility to project risks in order to make decisions How do we improve the information flow and get back to a “Management By Walking Around” by leveraging technology How do we limit heroics, burn-out and turnover How do we perform risk assessments regularly during the project lifecycle in order to make comprehensive decisions How do we change the culture by doing the right things and doing things right
- 29. So What Problems Must Be Addressed? How do we get comprehensive visibility to project risks in order to make decisions How do we improve the information flow and get back to a “Management By Walking Around” by leveraging technology How do we limit heroics, burn-out and turnover How do we perform risk assessments regularly during the project lifecycle in order to make comprehensive decisions How do we change the culture by doing the right things and do things right
- 30. So What Problems Must Be Addressed? How do we get comprehensive visibility to project risks in order to make decisions How do we improve the information flow and get back to a “Management By Walking Around” by leveraging technology How do we limit heroics, burn-out and turnover How do we perform risk assessments regularly during the project lifecycle in order to make comprehensive decisions How do we change the culture by doing the right things and do things right
- 31. What would be the value of having a sound, low cost, risk assessment capability for our business?
- 32. Create an automated system that ensures “management, visibility, control, and governance” are actually occurring, is easy to use, easy to change, easy too maintain Get the heart beat of the project on regularly scheduled basis … The Goal of Our Solution …
- 33. Our Solution …
- 34. “ The power to discern the true nature of the situation”
- 35. Modular Design: The Solution The Solution
- 36. Modular Design: The Solution
- 37. Modular Design: Solution + Content
- 38. IT Governance Content Cartridge
- 39. Future Cartridges and Content Future Availability Contract Management Compliance Adherence Risk Assessment Legal Assessment Health Assessment IT Infrastructure Assessment
- 40. Create an Individually Customized Model Collect data – what data, from whom, when Knowledge by phase Reminders Issues Repository for all projects Analysis Insight Must Do’s Never Agains Exceptions Corrective action Visibility Dashboard Reports Alerts Management Knowledge & Subject Expertise Assessments Project/Process types Project/Process classifications Rules Consistent Execution What do we need to know? Where do we store it? How do we consume it or view it? What Will we learn from this?
- 41. Foundation for Process Improvement Capability Level VISIBILITY Streamline Processes Implement Standard Processes OPTIMIZATION CONTROL Understand What is Happening Cumulative timeline
- 42. Developers Designers Team Leaders End Users Business Managers Vendors IT Management Infrastructure Team Risk Discovery Team Project Manager
- 52. The Value of Automated Management Insight and IT Governance Repository of Defined, Codified Recommended Practices Non-Intrusive, Non-Bureaucratic Oversight and Control Vehicle to Monitor and Enforce Recommended Practices Utilization Repetitive, Repeatable “Project Office” Type Reviews for All Projects Proactive, Quantitative Approach for Managing Project Risks Collection of Historical Data and Metrics Orient Act Observe Decide
- 53. What is Insight Doing for CAI … Allows us to query stakeholders keeping them engaged in the success of the project Expands participation in project status reviews Captures a “Million Points of View” Early warning means early action and more success Eliminates bureaucratic best practices activities and focuses everyone on the success of “The” project Helps us avoid blunders (Repeated Mistakes) Enables us to change the culture by encouraging people to do the right things by doing things right Impact Low High Difficult Easy Implementation
- 54. The Insight Control Room Control Room for Knowledge & Management Notifications Alerts Warnings Data & Opinion General and specific Alerts, Notifications, & Warnings Best practice Mechanism Historical benchmarking Analysis of large volumes of data Knowledge, Rules, Experience Doer Manager Rules & Knowledge Rules & Knowledge Activities External Expert
- 55. Closing Thoughts … Few companies can grow without taking risks. But poor risk management leads to surprises in business operations that can impact shareholder confidence, regulatory oversight and the bottom line.
- 56. I am not suggesting that we can eliminate all project risks, nor do we want to … some risks are good I am also not suggesting that projects will never fail again … when organizations fail to react to information, projects can still fail
- 57. What I am suggesting is that if there isn’t a “Risk Identification, Assessment, and Mitigation Process” implemented on all of your projects then you are just waiting for projects to fall behind schedule or fail.
- 58. Remember … “ Managing risk does not deal with future decisions, but the future of present decisions”
- 59. “ The power to discern the true nature of the situation”
Editor's Notes
- #2: How many of you are waiting for projects to fall behind schedule? Three (3) undeniable truths: 1 – SW development is a risky business because the entire business is shrouded in uncertainty 2 – Greater than 50% of all projects are delivered late or with less than promised by the original deadline 3 – Any project worth doing that is undertaken without a formal risk identification, assessment, and mitigation process is waiting to fall behind
- #3: What we will be talking about today is what we did at CAI to institionalize project knowledge, mitigate project risks, and eliminate surprise from projects but not just IT projects … Why? Because we found ourselves “Waiting for projects to fall behind” In doing that we will discuss the:
- #5: Drop background of image – make it bigger
- #6: Drop background of image – make it bigger
- #7: Drop background of image – make it bigger
- #8: Drop background of image – make it bigger
- #9: Drop background of image – make it bigger
- #10: Drop background of image – make it bigger
- #11: Drop background of image – make it bigger
- #12: iTMPI – Risk Consultants
- #13: iTMPI – Risk Consultants
- #16: The things we think we know are like dark clouds on projects … you never really know what is in the dark clouds … they could pass, could contain rain, or could contain lightening
- #17: The things we think we know are like dark clouds on projects … you never really know what is in the dark clouds … they could pass, could contain rain, or could contain lightening
- #18: Everyone tells the truth and projects never fail
- #19: The things we think we know are like dark clouds on projects … you never really know what is in the dark clouds … they could pass, could contain rain, or could contain lightening
- #22: Heroics a problem … what we did was identified as something always being done
- #23: iTMPI – Risk Consultants
- #24: iTMPI – Risk Consultants
- #32: Drop background of image – make it bigger
- #33: Drop background of image – make it bigger
- #39: Externalized package of knowledge installed like a cartridge Something that could be leveraged without programming
- #40: Externalized package of knowledge installed like a cartridge Something that could be leveraged without programming
- #53: Most PMOs only review some projects. A minimally intrusive system will allow project office review for all projects if you choose to do so. APO is a web application with no client footprint required.
- #54: When a Good Rating Doesn't Mean Much By Allan Holmes | Thursday, March 06, 2008 | 02:20 PM The Risk Factor blogger Bob Charette, a risk management expert who consults with federal agencies on risk management, picked up yesterday's story on the deep trouble that the Census Bureau‘s handheld computer contract is in. In his blog post, he questions the credibility of the Capability Maturity Model Integration (CMMI®). Harris Corp.'s Government Communications Systems Division, which is the prime contractor on the $600 million handheld contract (now likely much more than $650 million after all the costs from changes, errors and delays are included), has a Maturity Level 3 rating. "The Level 3 rating denotes superior process maturity within the division's program management, engineering, quality assurance, and other disciplines, and achievement of this rating has become a competitive differentiator on many government programs," Charette quotes. Charette wants to know: "At the very least, I think the division's CMMI rating may need to be re-evaluated, or maybe better, the U.S. government better start looking at what, if anything, SEI CMMI Level 3 actually means in practice.“ Or it could mean, the customer, the Census Bureau, put too many demands on Harris -- so many, in fact, that no maturity designation, no matter how high, could have avoided the very problems that now threaten the viability of the U.S. census.
- #55: Great Management Process + Tools = Increased Management and Governance