CIO Strategies For Success
CIO Strategies For Success
CIO Strategies For Success
As summarized in a CIO.com1 article, the primary reason why CIOs are fired is ―poor performance.‖
Surprisingly, this charge can apply even when the IT department has successfully rolled out major new
applications on time and on budget2. Such a deployment may be a success from an IT perspective, but if
the application does not provide ROI to business users, it will still be deemed a failure.
In many cases, CIOs may be using different metrics for success than business users, and so are blind-sided
by such "failures." As Laurie Orlov, a principal analyst from Forrester Research notes, "CIOs need the
ability to run their IT departments in a business-like way. Too many can't talk the same metrics as their
colleagues on the business side."
The key to avoiding this trap is to get close to the business users and actively monitor progress. For
example, online surveys can provide insight into their perspectives and warn of pending issues and
frustrations. Subsequent surveys enable the CIO to measure progress and may help top management
recognize improvements.
When a major application fails, the IT department takes the blame, even if the cause is some
unanticipated circumstance, such as an exceptionally high load. Systems must therefore be scalable to
several multiples of the anticipated loads and fully redundant. Additional recommendations are detailed
in the ―Vendor Checklist‖ section of this document.
Since the advent of Sarbanes-Oxley, failures in this area can mean not just dismissal, but lawsuits and
even jail time for top executives. It is not enough to demonstrate that appropriate procedures exist; it
must be possible to show an auditor how they were followed in any particular instance.
Tracking compliance manually is a costly and unreliable endeavor. A more solid approach is to build
compliance into relevant business processes and the software tools used to automate and manage them.
As a practical matter, this requires software that incorporates compliance as core, not bolted-on,
functionality. The goal should be to build systems that are fully audit-capable because all relevant user
actions are tracked and recorded automatically. Depending upon users to enter audit information is
costly and error prone.
___________________________
1 KimNash, ―One in Four CIOs Fired for Performance,‖ CIO.com, March 11, 2009, www.cio.com/article/484008/
One_in_Four_CIOs_Fired_for_Performance
2 Renee Oricchio, ―Leading Reasons Why CIOs Get Fired,‖ CIO Strategy Center, www.ciostrategycenter.com/wjz/
Board/peers/leading_reasons_why_cios_get_fired/index.html
The key to eliminating such problems is to remove unknowns as far upstream as possible. While it may not be
possible to nail down every detail of a large deployment in advance, it is possible to structure spec
development and implementation milestones so that they are uncovered and resolved before significant
resources are committed. The ―Innovative Development Methodologies‖ section of this document describes
approaches by which development time frames can be reduced and unknowns eliminated for many projects.
Where third parties are involved, it is also desirable to structure the relationship so that the contractor bears
full responsibility for cost containment and delivery time-frames. The ―Vendor Checklist for a Responsive BPM
Solution‖ section of this document describes the attributes of a software system and vendor relationship that
make this possible.
In many cases, a major source of frustration for business managers is that they and IT departments have
completely different time scales. When business managers request a change to an application that supports
their business processes, such as a change in the workflow, they believe it should take no more than a few
days. On the other hand, IT departments typically regard a turnaround time of two months as fast. When a
new software package is being deployed, business managers would like to see it up and running in a matter
of weeks. However, in reality, Business Process Management (BPM) projects often have timelines exceeding
nine months, even in standard areas, such as customer support or change management.
This is so fundamental a difference that CIOs are often shocked to find out how much the IT department’s
deployment schedules are resented. As a result, they’re blind-sided by charges of poor performance.
This really came home during a presentation on ―Software as a Service‖ (SaaS) BPM technologies to a group
of MBAs. During the talk, the presenter said he suspected ―one of the reasons they were choosing SaaS
vendors [as opposed to their in-house IT department] was that the people who caused them the greatest
frustration were not their external competitors or their customers, but rather...‖
Before he even had a chance to finish the sentence, the entire class yelled "The IT Department!" Well, the
entire class apart from two startled IT guys. In his department’s defense, one of these guys remarked that his
users must be happy because they rolled out a new iteration of a certain system every three months. The
MBAs crucified him: "Three months! Don't you understand anything? When I need a change, I need it the next
week. Maybe I can live with two weeks, but three months?! And you're proud of that?"
Within companies, business managers are the customers – and a three-month turnaround time for changes is
not ―quick‖ in their terms, even though it may be positively heroic with certain systems. When IT fails to meet
business requirements, the CIO takes the heat. This happens so often that some joke that the acronym ―CIO‖
has come to mean "Career Is Over.‖
_______________________________________
3 Renee Oricchio, ―Leading Reasons Why CIOs Get Fired,‖ CIO Strategy Center, www.ciostrategycenter.com/wjz/
Board/peers/leading_reasons_why_cios_get_fired/index.html
4 Paul McDougall, ―Virginia Probes Outsourcing Deal, CIO Fired,‖ Information Week, June 2009,
www.informationweek.com/news/government/state-local/showArticle.jhtml?articleID=218100342
Now, let’s look at some solutions to these challenges. Two key strategies involve using effective manage-
ment approaches to stay ahead of the curve while making the right software decisions to ensure the com-
pany’s success.
A successful CIO must move beyond putting out fires to become a key contributor to the business. This
requires specific people and communication skills as well as an understanding of how to gain the respect
and cooperation of the other high level business managers. Let’s examine these skills more closely.
"A CIO has to demonstrate the right level of sophistication for the job. A lack of leadership will be the
first thing to expose a CIO’s incompetence," says John Stevenson, a former president of the Society for
Information Management, a professional organization for IT leaders.5
As Gartner points out, "Leadership and management are different, but complementary. Management is
about execution. Leadership is about change." CIOs must "influence and lead their business colleagues by
influencing their view of IT.‖6
This task is a lot easier if the changes being proposed are clearly desirable from a business perspective.
For example, if the CIO can propose changes that shorten application deployment times, reduce com-
plexity, and improve IT responsiveness, buy-in will be immediate and enthusiastic. Demonstrable success in
achieving such goals will give the CIO the credibility and political capital necessary to institute other
changes whose benefits may not be so immediately apparent. The ―Reducing Project Development Times
and Risks‖ section of this paper describes a methodology for achieving such goals.
______________________________________
5 Renee Oricchio, ―Leading Reasons Why CIOs Get Fired,‖ CIO Strategy Center, www.ciostrategycenter.com/wjz/
Board/peers/leading_reasons_why_cios_get_fired/index.html
6 Marianne Broadbent and Ellen Kitzis, ―The New CIO Leader: Setting an Agenda and Delivering Results,‖ Gartner
Group, www.gartner.com/5_about/news/gartner_press/NewCIO2.jsp
"It's essential today that a CIO knows how to fit like a glove with the other C-level executives and other
influential leaders within the organization," says John Stevenson.8
Simply making sure that the servers stay up is not enough. The IT department must provide a tangible
competitive edge from the perspective of the business users. This requires the ability to respond to chang-
ing market conditions, implement management initiatives fast enough to be seen as responsive, and ex-
ploit opportunities while they are still available. In brief, it means agility.
This kind of agility is probably the single most important characteristic that distinguishes embattled CIOs
from their more respected and successful colleagues. How can it be achieved? By ensuring that the soft-
ware used to manage the major business processes of the company is agile -- that is, easy to modify as
needs change, and quick to deploy.
Business Process Management (BPM) software solutions manage and automate a wide range of business
processes - everything from internal and external customer support to sales, marketing, change control,
RMAs, assets, employee expense reimbursement, hiring, HR requests, time keeping, billing, contracts, pro-
jects, and so on. Process automation improves efficiency, reduces manual error, ensures compliance, and
increases reliability, but processes change frequently as the business environment changes. Thus the need
for agility.
To be perceived as responsive to business needs, a BPM solution should enable significant projects to be
built and deployed in weeks and modified in hours or days – a timeline to please even the most demand-
ing CEOs.
______________________________________
7 Carter McNamara, ―Basics in Internal Organization Communications,‖ Field Guide to Leadership and Supervision,
http://managementhelp.org/mrktng/org_cmm.htm
8 Renee Oricchio, ―Leading Reasons Why CIOs Get Fired,‖ CIO Strategy Center, www.ciostrategycenter.com/wjz/
Board/peers/leading_reasons_why_cios_get_fired/index.html
The system must be auditable in multiple senses to ensure compliance with Sarbanes-Oxley and other
regulations. It must make it easy to show an auditor what a defined business process is, how the system
enforces the process, and how the process has been followed in any particular instance. Further, the solu-
tion should make it possible to capture and collate data, such as who logged in, what IP address they
came from, what records they viewed, edited, etc.
The solution should include prebuilt integration with standard technologies, such as LDAP/Active Directory
and MS Exchange. It should also support a robust set of APIs and scripting options, including Web Ser-
vices. Ideally, even the source code should be accessible – not that you’d want to change it any more
than you’d want to use an emergency parachute, but it is nice to have the option.
Once the system has proven itself in the initial deployment, it should be easily extensible to other business
areas. So, the data models, business rules, workflows, access permissions, and data input forms must be
fully and rapidly customizable.
The solution must scale to support thousands of current users, the update of hundreds of thousands of re-
cords per hour, and databases containing tens of millions of records, without requiring non-commodity
hardware.
The product should be 100% Web-based so that no installation or upgrading of client software is re-
quired. It must support the company’s choice of browser.
The system must support a fine-grained security model for precise access control. The software platform
and hosting infrastructure (if SaaS-based) should be subject to regular security audits from an independ-
ent firm, and the vendor should make the results available.
For SaaS-based products, vendors should provide up-time guarantees reflecting their confidence in the
availability of the service. Some vendors just offer a pro-rata refund, while others return the entire cost of
that month’s service if the target up time is not met. If the product is installed in-house, it should support
high availability options so that service can continue even in the event of a motherboard failure.
The system must support dashboards, charts, and reports providing quick insight into business processes.
Since passive access to information is not always enough, it should also support the creation of business
rules providing active notification of any problems.
The vendor should offer a SaaS option so that customers don’t need to provision a server to get going.
Once the solution has proven itself, it should be movable to their choice of in-house Linux or Windows
server to allow full integration with sensitive back-end systems without impacting the firewall.
System backups should be fully automated and include everything necessary to move the entire deploy-
ment to another server or restore in case of disaster.
Upgrades should require little effort and must allow migration from any revision to any later revision
without affecting customizations.
The cost to get started must be reasonable and the product should provide a rapid ROI, ideally within the
first few months of use. Getting a reasonably complex production system up and running should take a
matter of weeks, and extending it to cover new processes must be equally rapid, without impacting exist-
ing production use. The cost structure should be simple and inclusive, without hidden extras or per-module
or per-function charges when the system is extended.
IT staff should be able to extend and maintain the system themselves after training. Customers shouldn’t
be tied to long-term dependence on $200-per-hour consultants. Ideally, the training time should be short.
Systems designed to be maintained by the users may require a week of training to reach proficiency,
whereas those designed without this criterion in mind may require over a month of training and carry in-
creased effort and risks when making changes.
The vendor should have a ten-year or more history of providing enterprise solutions. For CIOs of large
companies, the vendor’s track record with other Fortune 500 companies is most relevant. For start-ups,
experience with small companies is of greater interest. The vendor should be financially sound and profit-
able.
The vendor should be able to describe exactly how the software addresses current business need(s) and
demonstrate it running this exact process prior to purchase. It should also be willing to commit to a fixed-
price implementation for the entire project based on an agreed upon specification.
Different vendors may offer different forms of refund if a project fails, ranging from a credit towards
additional software purchases, to a full cash refund of all software costs and consulting services. The
strength of the warranty indicates the vendor’s confidence in their software and implementation services.
Different CIOs may prioritize their requirements differently from this list, but it should serve as a useful
starting point. The extent to which these requirements are supported varies widely among vendors. The
manner in which all of these requirements are met by EnterpriseWizard is detailed on the Vendor Check-
list page at our website – http://www.enterprisewizard.com/vendor-checklist.htm
The availability of a code-free development environment that supports sophisticated enterprise applica-
tions is a significant development and is examined in more detail in the next section.
IT projects typically go through the phases outlined in the table below, with the nomenclature varying from com-
pany to company. The time taken depends upon the project, but the ratio of time spent in each stage is less vari-
able. So, if one week is spent detailing the user requirements, then between four and 10 weeks are typically
spent implementing them. The IT Effort column shows the typical proportion of work (not elapsed time) time spent
in each phase, whether this is in man-weeks, months, or some other unit.
We have found that the timeline for code-free development is quite different:
The actual time taken in each stage depends upon the size and complexity of the project, but the
overall ratios will remain about the same. In addition to reducing the time required to reach initial
production use by a factor of three, the chance of failure is effectively eliminated.
When it comes to reducing timescales and costs, there are multiple approaches. Where staff re-
sources are limited, the use of consultants or outsourcing may bring faster results. For instance, they
may enable a company to bring new business processes online more quickly than they could do
otherwise.
A 2009 Gartner CIO survey9 reported that CIOs’ top three priorities were implementing business
process improvement measures, reducing enterprise costs, and improving workforce effectiveness.
CIOs typically apply a judicious mix of resources to achieve these goals. Below, we summarize
some of the pros and cons of using internal IT resources, consultants, and outsourcing companies.
______________________________________________
9―Gartner EXP Worldwide Survey of More than 1,500 CIOs Shows IT Spending to Be Flat in
2009,‖ Gartner, January 2009, www.gartner.com/it/page.jsp?id=855612
Since each type of resource comes with significant pros and cons, the decision for how to mix them must depend on the
priorities of an organization and the project at hand. For instance, outsourcing a short-term project can minimize costs, but
may not be appropriate for a long-term, mission-critical project that requires ongoing maintenance.
If outsourcing is being used primarily to provide a solution or workaround to the cost and long development times re-
quired for process improvement and automation, it may become unnecessary once an adaptable and quickly implemented
BPM solution is available.
_________________________________________
9‖IT
Benchmarking and Outsourcing – Problem Avoidance‖ by Tom McClure, Carolyn LeVasseur http://
www.gartner.com/4_decision_tools/measurement/measure_it_articles/july01/mit_problem_avoidance1.html
10―The Dark Side of Outsourcing,‖ OffshoreITOutsourcing.com, http://offshoreitoutsourcing.com/documents/
outsourcing_problems.asp
Furthermore:
User adoption is a lot easier with a system that can be rapidly adjusted based on user feedback.
There are no code-compatibility issues with upgrades because there is no custom code.
Business managers no longer need to agree with one another on everything six months in advance.
After all, the system can be changed using just a browser in a few hours. They are also no longer
dependent on the ―common sense‖ of programmers to deliver the system they need.
The system is self-documenting because everything is exposed through the admin’s browser and
graphical workflow editor.
Data integrity is automatically maintained by the system, not by custom code.
Code maintenance accounts for 80% of the cost of the average software project. With no code to
write, there is no code to maintain. As a result, added costs, hassles, and unpredictable delays are
eliminated.
Multiple applications can be consolidated on a single platform.
_______________________________________
11Renee Oricchio, ―Leading Reasons Why CIOs Get Fired,‖ CIO Strategy Center, www.ciostrategycenter.com/wjz/
Board/peers/leading_reasons_why_cios_get_fired/index.html
A wide range of prebuilt EnterpriseWizard applications are available as starting points for custom appli-
cations and can typically be fully configured and deployed in a matter of weeks.
The last section showed how code-free technology reduced the time necessary to customize and deploy an
existing application by an approximate factor of 3. As the above examples illustrates, the time to build an
entirely new application is reduced by a far greater factor. For example, Microsoft CRM represents sev-
eral man-centuries of effort, yet was displaced by an EnterpriseWizard-based application that was devel-
oped in 3 months. For enterprise applications that are highly specialized, the actual time savings will there-
fore be far greater than 3 to 1.
To watch a demonstration of building an application from scratch, visit the following page at our Web site:
www.enterprisewizard.com/flash/Building-a-custom-application.html. This presentation literally walks you
through building a brand new application for managing employee travel expenses in just 25 minutes. It's a
bit boring, since it shows every mouse-click and keystroke involved. But from a technology perspective, it’s
quite interesting. After all, the resulting application includes full Web services support for both .NET and
Java, support for thousands of concurrent users, the generation of over 200,000 records per hour on a
$5,000 server, and more. In fact, it includes everything described in the ―Vendor Checklist‖ section above.
In brief, it is a true enterprise application.
So, how does our technology enable this rapid, code-free development of Web-based enterprise-class
applications? EnterpriseWizard leverages open-source technology stacks, the dynamic capabilities of J2EE,
and the availability of commodity hardware with 12-plus gigabytes of RAM. Of course, if you are the rare
customer who needs some custom scripting, it also supports standards such as JavaBeans, Perl, and Web
Services.
An agile BPM solution can provide the ability to profit from new opportunities as soon as they occur or to
follow new business directives as they are formulated. With EnterpriseWizard’s code-free development
environment and pre-built applications, CIOs can empower their companies to adapt to changing needs
in hours or days, rather than months or years. The result: business managers who award their CIOs an A
for adaptability. Effective BPM means success for the CIO and the rest of the organization.
EnterpriseWizard, Inc. is the leading provider of powerful, easy-to-deploy, and cost-effective Web-
based software solutions for customer support, change management, ITIL, CRM and custom business
process management for organizations with complex products or services. Its adaptable platform has
attracted hundreds of customers, ranging from startups to Fortune 100 companies, such as Chevron,
NEC, and Emerson Electric. Visit us at www.enterprisewizard.com or call us at 1-888-727-2209.