Benefits to the Quality Management System in implementing an IT Service Management Standard ISO/IEC

Transcription

1 Benefits to the Quality System in implementing an IT Standard ISO/IEC Presentation to: ASQ North Jersey September 15, 2010 Subrata Guha Director IT s UL DQS Inc. A New Global Alliance for Systems Solutions

2 Introduction Over 25 years experience in the areas of Information Security, Risk Assessment, IT, Software Engineering, Project Consultant to fortune 500 companies in USA, Japan and South Korea Authorized Lead Auditor Industrial scholar at Carnegie Mellon University. A New Global Alliance for Systems Solutions 2

3 Agenda ISO/IEC overview management context Impact of service quality on product quality requirements A New Global Alliance for Systems Solutions 3

4 ISO IEC ISO IEC : Information Technology - Specification ISO IEC : Information Technology - Code of Practice Released in 2005 Fast track adoption of BS Certification standard for ITIL (IT Infrastructure Library) Currently under revision A New Global Alliance for Systems Solutions 4

5 Hierarchy of Documents ISO/IEC Specification ISO/IEC Guideline ITIL / MOF Best Practices Organization s policies, procedures, work instructions QMS A New Global Alliance for Systems Solutions 5

6 Introduction to Economics Goods Goods Value add Product Package A New Global Alliance for Systems Solutions 6

7 Characteristics are Complex Highly intangible s are produced and consumed at the same time High variability of service quality User is often involved in the delivery of service Satisfaction is subjective A New Global Alliance for Systems Solutions 7

8 Business Requirements Strategy Improvement Lifecycle Design Operation Transition A New Global Alliance for Systems Solutions 8

9 Delivery Key Process in Capacity Level Continuity & Availability Security Budgeting & Accounting Support Business Incident Problem Business Relation Control Configuration Change Design Transition Initiation Reporting Release Suppliers / Subcontractors Supplier A New Global Alliance for Systems Solutions 9

10 ISO Requirements 3. Requirements for a management system Responsibility Responsibility Documentation Documentation Requirements Requirements Competency, Competency, Awareness, Awareness, & training & training Release Release 9. Control Processes Change Change Configuration Configuration 4. Planning & implementing SM Plan SM Plan SM Monitoring, Monitoring, Measuring Measuring & reviewing & reviewing Implement SM Implement SM & provide & provide services services Continual Continual Improvement Improvement 8. Resolution processes Background Background Incident Incident Problem Problem 5 5 Planning & Planning & Implementing Implementing New or New or changed changed s s 7. Relationship Processes General General Business Business Relationship Relationship Supplier Supplier 6. delivery process Level Level Reporting Reporting Continuity & Continuity & Availability Availability Budgeting & Budgeting & Accounting Accounting For IT services For IT services Capacity Capacity Information Information Security Security A New Global Alliance for Systems Solutions 10

11 ISO Requirements 3. Requirements for a management system Responsibility Responsibility Documentation Documentation Requirements Requirements Competency, Competency, Awareness, Awareness, & training & training Release Release ISO Control Processes Change Change Configuration Configuration 4. Planning & implementing SM Plan SM Plan SM Monitoring, Monitoring, Measuring Measuring & reviewing & reviewing Implement SM Implement SM & provide & provide services services Continual Continual Improvement Improvement 8. Resolution processes Background Background Incident Incident Problem Problem 5 5 Planning & Planning & Implementing Implementing New or New or changed changed s s 7. Relationship Processes General General Business Business Relationship Relationship Supplier Supplier 6. delivery process Level Level Reporting Reporting Continuity & Continuity & Availability Availability Budgeting & Budgeting & Accounting Accounting For IT services For IT services Capacity Capacity Information Information Security Security A New Global Alliance for Systems Solutions 11

12 ISO Requirements 3. Requirements for a management system Strategy Strategy Responsibility Responsibility Documentation Documentation Requirements Requirements Improvement Improvement Competency, Competency, Awareness, Awareness, & training & training Release Release Control Control 9. Control Processes Change Change Configuration Configuration 4. Planning & implementing SM Plan SM Plan SM Monitoring, Monitoring, Measuring Measuring & reviewing & reviewing Implement SM Implement SM & provide & provide services services Continual Continual Improvement Improvement 8. Resolution processes Background Background Support Support Incident Incident Problem Problem Initiation Initiation 5 5 Planning & Planning & Implementing Implementing New or New or changed changed s s Delivery Delivery 7. Relationship Processes General General Business Business Relationship Relationship Supplier Supplier 6. delivery process Relationship Relationship Level Level Reporting Reporting Continuity & Continuity & Availability Availability Budgeting & Budgeting & Accounting Accounting For IT services For IT services Capacity Capacity Information Information Security Security A New Global Alliance for Systems Solutions 12

13 Integrated View of Development and Business Performance Improvement Resource Project/Program S D L C Requirement Design Build Test Verification Validation Quality Assurance Configuration Release Incident Problem Change Config. Level Capacity Availability Training Supplier Internal Audit A New Global Alliance for Systems Solutions 13

14 Impact of Quality on Product Requirement Derived Requirements Expectations Development Team Team Quality, Reliability, Maintainability Requirements Design Design Build Build Test Test Deploy Deploy Operate Operate Optimise Optimise Retire Retire Requirement traceability Change requests Verifications & Validations A New Global Alliance for Systems Solutions 14

15 Plan OBJECTIVE: To plan the implementation and delivery of service management Scope of service Objectives & requirements Workflow framework Interface with other functions Resource requirement Measurement A New Global Alliance for Systems Solutions 15

16 Implementing New or Changed s OBJECTIVE: To ensure new/changed services can be delivered and managed Proposal for new or changed services o Impact analysis o Business case Plan for service implementation o Roles and responsibilities o Description of changes o Changes in contract o Resource o Training o Budget and schedule o acceptance criteria Post implementation review A New Global Alliance for Systems Solutions 16

17 Level OBJECTIVE: To define, agree, record and manage levels of service Full definition of service o characteristics o Target customers o Workload o level targets level agreement (SLA) Supplier contract SLA monitoring A New Global Alliance for Systems Solutions 17

18 Reporting OBJECTIVE: To produce accurate reports for informed decision making Performance against service level targets Non compliance and issues Workload Performance trend Satisfaction analysis A New Global Alliance for Systems Solutions 18

19 Continuity & Availability OBJECTIVE: To ensure agreed service levels are maintained in all circumstances Business impact analysis continuity plan Plan testing Impact of changes Measurement of availability A New Global Alliance for Systems Solutions 19

20 Budgeting & Accounting OBJECTIVE: To budget and account for the costs of service provision Budgeting and accounting for all components of service Direct and indirect costs Financial control and authorization Monitoring and reporting of cost against budget Cost of service changes A New Global Alliance for Systems Solutions 20

21 Capacity OBJECTIVE: To ensure sufficient capacity to meet current and future business demand Capacity Planning o Current capacity o Future capacity requirements o Capacity threshold o Predicted impact of external changes Predictive analysis Monitoring of capacity utilization Tuning of service performance A New Global Alliance for Systems Solutions 21

22 Information Security OBJECTIVE: To manage information security effectively Information security policy Risk assessment Security controls o Implement requirements of policy o Manage associated risks Security incidents Measure effectiveness of security controls A New Global Alliance for Systems Solutions 22

23 Business Relationship OBJECTIVE: To establish and maintain good relationship between business and service provider Customer account managers Identify customers and end users of service Joint service review meetings Changes to SLA and contract Customer complain process A New Global Alliance for Systems Solutions 23

24 Supplier OBJECTIVE: To manage supplier relationship to ensure seamless quality of service Vendor contract managers Alignment of supplier SLAs with customer SLAs Defined relationship between lead and subcontracted suppliers Supplier performance review A New Global Alliance for Systems Solutions 24

25 Incident OBJECTIVE: To restore services as soon as possible Recording of Incidents Incident classification o Severity o Priority Incident resolution Escalation Customer communication THIS IS A REACTIVE MEASURE A New Global Alliance for Systems Solutions 25

26 Problem OBJECTIVE: Proactive identification of the cause of incidents to minimize incidents Recording of problems Analysis and identification of the root cause of incidents Problem resolution often requires change management Review effectiveness THIS IS A PROACTIVE MEASURE A New Global Alliance for Systems Solutions 26

27 Configuration OBJECTIVE: To define and control the components of services and infrastructure Configuration identification Configuration baseline Configuration audits Configuration status accounting CMDB A New Global Alliance for Systems Solutions 27

28 Change OBJECTIVE: To ensure all changes are implemented in a controlled manner Change request Types of change (e.g. emergency change) Change approval Implementation of change Verification of change A New Global Alliance for Systems Solutions 28

29 Release OBJECTIVE: To control release of new and/or changed services to live environment Release policy Release plan Rollback mechanism Acceptance test environment Measurement of success and failure of releases A New Global Alliance for Systems Solutions 29

30 Thank You Subrata Guha A New Global Alliance for Systems Solutions