Monday, February 6, 2012

What will IT organizations look like in 2016

If you have been reading this blog or following me on twitter you know I'm a big believer in cloud and consumerization of IT. In the next few years I expect Google's vision of 100% web to be the norm. Users will be able to use any device to access their data with or without IT's help.

So what does this mean for IT organizations, and how should we structure ourselves to be relevant in this new, and frankly for some people, scary new world?

I think of IT as several groups today. There is the most important group, the service desk (or helpdesk). This is the most important group since it is the "face of IT". Frankly if you have a great service desk it can really help hide other issues which, if you as a CIO are paying attention, can fix before they get you in trouble.

Typically then there is either a split with Applications and Operations, or Maintenance and New Projects. Sometimes there is a third group that covers more of running IT as a business type stuff, like service management, financial management, customer relationship managers etc.

In the future though most of the operations will be done by cloud providers. Even now, I hardly ever get involved in any salesforce.com issues. Partly because we don't really have any issues, but if we did it would be to verify connectivity through the Internet to their data center. Beyond that it's a contracts issue.

If we move to Google Apps, which is pretty likely, our email and storage service goes the same way. What changes though it is the pace of innovation. We will really need people focused on discovering pain points, and solutions to resolve them, before users can find the solution and implement it on their own.

Dan Petlon tells the story about when he decided social media was important. The short version is that he read an article about the relevance of the CIO and the quote was "How can you expect to remain relevant when your CEO has to learn about Facebook - the most successful application ever, from his 12 year old daughter."

I want to make sure that IT knows about and understands the next Facebook before the CEO's daughter tells him about it. To do this I think a dedicated group is needed to ensure that we hear about new technology and also encourage adoption of it. This "Change Management" group fills that role. This is a huge shift but with Google releasing 200+ new features a year alone making sure that the users understand the features and can leverage them is going to be the difference between the good companies, and the dead companies.

Development also changes. Many of the cool features in a cloud environment are really integrations between various exisitng cloud applications. Also many times simple applications will be able to be done by power users, assuming the change management team does a good job training on the new tools, so that should free hard core developers up to really work on integrating and making an excellent user experience. Things like single sign on, consistent look and feel etc. will be table stakes to new applications.

Finally the contracts and vendor management piece gains importance since so much depends on vendors providing what they promise. Infrastructure really will become the network and Internet connectivity to allow users to get to the cloud. Clients will be whatever the end user likes and will likely be purchased and supported from the vendor, whether that be Apple Ipad's, Google Chrome or Android devices.

The break down of resources will probably look something like this.

You can see the two biggest departments in IT are really "change management" and "integrations and development".

Anyway this is what I think. I'd love to hear feedback on what others think.

Sunday, January 8, 2012

Nice customer service story

I, like most of us, am pretty used to bad customer service. I mean the number of times I've been delighted is much less than the amount of times I've walked away frustrated by the lack of caring.

But I was pleasantly surprised by VW of America. They had sent me a recall a month or so ago for a fuel line issue. Now I wasn't really annoyed or even phased by this. Every one has recalls and I knew I'd just schedule time to get it done. No big deal.

But VW did something that really shows great customer service, they actually sent a $50 gift card to their customers to make up for the inconvenience. In it they apologize for the problem, re-iterate their desire to avoid repeating the problem in the future, and for the paranoid in all of us, explain there are no strings attached.

We all make mistakes, but great companies not only fix them and apologize for them, but make it right for the customers, Great job VW!

Wednesday, January 4, 2012

Employee privacy and corporate liability...

I just read this blog post from

@CesareGarlati 


http://bringyourownit.com/2011/12/19/consumerization-101-employee-privacy-vs-corporate-liability-2/

It's a great, thought provoking post. Here's my take on it, for what it's worth. Also thanks to my friend Mark Townsend for pointing me to the blog. Lots of great stuff.

If you are too lazy to read the above, basically a company wiped a users iphone that was connected to the corporate email system. She had signed an acceptable use policy but it had a picture of her son that had just passed away from cancer. She sued and collected 5M...

Cesare asked about that, as well as the company's right to track location and what the company should do about questionable content...

We tell people if they want to use their personal device to get their corporate email. that they need to be aware that we have the right to wipe. if you don't like it, we will get you a corporate device.... but... not sure that this will protect us since in this case, she had signed an AUP, which I assume had the same sort of language in it that we use in ours. Which basically says, if you connect it to us you give us the right to wipe all data off of it.

Now I feel bad about it, but if she had lost the photo because she dropped the iphone would she have sued apple? Would the building owner be responsible for having too hard of a floor? Would the flooring people be responsible? At some point people need to be responsible for backing up data that they want to keep. I mean she had the picture for a few weeks...

Regarding tracking location. If you don't want the company to do that, don't use it to connect to corporate, turn it off, or leave it on your desk. After all we aren't tracking the user, we are tracking a device that is accessing corporate resources. Is that much different than tracking IP's on a website? Other than the granularity I would say no... 

As far as accessing questionable websites while at work. I would say if it was done using the corporate LAN (or WLAN) the company has the right to monitor. If on your personal cell phone plan then no.  My network, my rules. IMHO

The trickier piece is if we let you bring your device to work and it already has questionably, or even illegal content on it (piracy, inappropriate etc) is the company liable? Do we have the right or obligation to report it if we see it? We had a case many years ago where a field guy sent his laptop in for repair and it had illegal files on it. Our policy was not to look. but if we saw something illegal to report it. Clear enough if it is a company owned machine, but if it's not what should we do??? I mean if someone has a bag of pot in their car in our parking lot are we liable?

Tricky issues and while I think my answers make sense, that doesn't mean the law will agree. I would not want to be the test case...





Thursday, December 15, 2011

Collateral damage of the browser wars

Is it just me, or is starting to become a real pain to use web applications? I mean they are great, and I love the idea of 100% web, but it seems like I need 3 or 4 browsers to be able to use all of my apps.

Some work fine in IE but not chrome, others only work is firefox. Then some only work in chrome. So if I want to use Okta to get into ADP, i need to use IE. But if I want to get my email, chrome works better.

What would be cool, I mean besides all applications working in all browsers, would be a way to track which sites get opened with which browser and automatically start the right one when I click on the URL. Microsoft sort of does this with their application virtualization stuff. At least in the demo it knew to open site A in IE6 and site b in IE9.

It just seems way to confusing to me. I can only imagine what our users must think when we have to say things like "Open your email with google chrome, unless it's encrypted then use Firefox, but if you follow a link to sharepoint you need to use internet explorer"

I'm hoping, though not very optimistic that HTML5 will fix this. Anyone find any cool tools that make this better? If so I'd love to hear about them.

Monday, October 17, 2011

Linked > Monster

I'm actually working on a social media class for our employees on LinkedIn. We've already done classes on salesforce.com Chatter, and Twitter so LinkedIn is next.

Facebook is on the list as well but frankly I haven't figured out what to talk about with Facebook yet, and am still of the mindset that Facebook is more personal than professional. I think that's me being old fashioned, but hey, if someone else wants to do the Facebook class, they are more than welcome to. The last think I really need is the whole company to see my prom picture from 1985. For those that have seen it I'm sticking to my story that it was a cool look back then.

OK but back to LinkedIn. When I mentioned I was thinking about doing the class, someone said "Why? Do you want people to find other jobs?". Which of course made me realize that the impression about LinkedIn is that's where you post when you are looking for a new job.

Now LinkedIn is a great place to network, and if you are looking for a new job networking is a great way to help with that. Networking though is only a  piece of the puzzle when job hunting and since I'm not writing this post to help people find jobs I'll leave it alone, maybe another post later.

The reality though is LinkedIn is way more than a job board. It has a whole section on company, including what products they sell, recommendations from your connections, research on employees - like which schools people went to, what type of degrees they received, and how much experience they have as shown below.

Pretty cool right. Does it matter that 52% of our employees have 15+ years experience? Yeah, it does. There is a big difference between getting someone with 15 years experience helping you troubleshoot a network issue when you first call in for assistance, and getting someone with 6 months experience who will gladly take your contract info and have someone call you back.

You can also see News headlines that you care about. Search for new connections (great if you are in sales),  I can give recommendations to people I know (which I really need to do more of) and keep in touch as people move around.

My favorite section though is groups. There are groups on practically everything. Some groups are very good, some not so good. I have found them to be incredibly useful though when looking for new technology or even just new ways of working, like Agile programming or Scrum project management. Generally if you are struggling with an issue, there is probably a group that can help solve it. If not solve it, they can at least sympathize with you.

There are a host of other interesting applications, like slideshare.net or twitter integration. You can link to amazon so people can see what you are reading, or and I just found this, you can link blogs right into your LinkedIn profile and see what your connections are blogging about. Not sure how cool this will be, but it sounds cool and based on the 90 second analysis I just did, it is pretty cool.

The summary though is this LinkedIn is way more than a tool to find your next job. Who knows,it may even help you keep the one you already have.

Monday, October 10, 2011

When long tenure is bad..

I'm pretty lucky, most of my staff has worked with me for 10+ years. There are some great benefits to that, like the wealth of institutional knowledge in the group, and the fact that we can eliminate a lot of bureaucracy and that frankly we work well together.

There is a dark side to though. We are pretty spoiled with our network management toolset and don't even realize how lucky we are. Two examples came up the last week when we we're talking to customers. They were really excited to see these features and frankly we were shocked that other vendors don't have them. In some cases we have had this ability for almost 20 years

If you are a long term Enterasys customer you have probably used these features a lot too and you may also be surprised that not everyone has these.

Compass
The first one is "compass". At it's simplest it lets you find a device on the network. You can locate them by MAC or IP address or if you use authentication you can find them by name. Now this is very helpful if you have a device behaving badly. You can simply type in the address and find out which switch and port it is plugged into.

Or if you have a user that calls in with an issue, you can simply search by their username. Most people know their username, very few actually know what a MAC address is and even less have memorized theirs. I know mine has an 8 in it, but that's as far as I remember. Being able to search on username just makes it that much easier and quicker to resolve a users issue.

History lesson on Compass: Many years ago it would list all of the ports, including uplinks, that the device was seen on, but over time it's gotten pretty good about just showing the one port that it is physically connected to.  The early prototype was a unix shell script that required the user to manually convert the MAC address to decimal and enter it that way. It's way better now.

Third Party devices
The second "feature" is the ability to manage third party devices in our network management software. I sort of thought everyone did this but several people told me the product they are using (I didn't ask whose it was) only supported their products. To me that seems odd since SNMP has been around for a long time.

Now the fact that we can manage the entire network as one entity, whether it is wired or wireless, I can see that being unique, but being able to add something like a printer or UPS, seems pretty basic to me.

I'm glad I have these two things but honestly I've gotten so used to having them I can't imagine trying to run a network without them. I almost want to go run a competitors network for a few weeks so I can appreicate how lucky I am.

Almost...



Tuesday, September 6, 2011

How people want to manage networks

I was watching a cool video with Mark Benioff and Eric Schmidt (CEO's of salesforce.com and Google - you may have heard of them) and one thing they highlighted between Microsoft and Apple was Apple focused on the consumer experience more than Microsoft did. Now I'm not about to comment on that but it did get me thinking, how do network managers want to manage networks?

I mean the way it works now managing networks is a lot of work. Typically you have a ton of devices that you need to manually configure, or at least configure separately, using a "command line interface" or CLI. These are usually pretty cryptic commands, though they do usually have a help key, like ?, to make it easier. The problem is though you usually need to do this to every device to make a change or view what's going on.

Imagine a scenario where you get a call from a user in a remote site saying "SAP is slow". Generally that prompts a lot of questions, like:

"What site are you in?"
"Are other applications running slowly?"
"Is anyone else having the same issue?"
and my favorite
"Have you rebooted?"

Now even once you get these questions answered, typically a network engineer will need to find their laptop and boot it up (which can take a few minutes), connect to a network or cellular modem, fire up VPN and then start to look around at the site to see what's going on.

If this is an after hours page, those minutes can seem like a long time (especially at say 3:00AM when you are trying to be quiet so you don't wake the rest of the house). Then you need to start "telnetting" to different routers and switches to figure out what's happening. Many times it's as simple as a bad cable or port and simply changing that can fix it, but it's not always the port the user is plugged into. Sometimes it is a port "upstream" that can take longer to find.

Other times, it's a simple issue of too many people using the link, sometimes appropriately, sometimes not.  With viruses, the users may not even realize that they are using resources.

I spend a lot of time thinking about how to make these problems easier to find. I'd love to say we don't have them at Enterasys but we do to, but when we have them we figure out how to fix them, I mean really fix the underlying issue, like why does it take so long to figure out someone closed a fiber cable in a door in Ireland.

What we came up with is called isaac. With isaac, instead of having to boot up a laptop, connect in through VPN and then start troubleshooting by going to each device, I get to "chat" with my network. In the scenarios above the chat is really simple.
"Are any devices down". I should have already been paged on these of course, but it's good to double check.
"Is the site experiencing any bandwidth issues"
       if so "Who is the biggest user",
       then if I want to I can stop the user from causing problems with a simple command like:
                    "ratelimit <user>", or
                    "blacklist <user>"
"Are any ports showing errors"?
     If so where are they so I can have a local technician replace them.

I can actually do these commands from my smart phone, or anyone else's smart phone that lets me get to Twitter or Chatter

We think this is a better way. What do you think?  I'd love to get comments on how you want to manage networks. What other commands would you want to see?