ISO 17799 Information Aggregator

ABCs for Audit Collection – Windows Live

Posted: June 20th, 2010 | Author: | Filed under: Live! Search | Tags: , , , , , , , , , , , , , , | No Comments »

Current support for CoBITs, DS484, ISO 17799, FISMA, PCI and SOX. Syslog Gateway – Enables organizations to forward any syslog message to a central server for integration with the …

Read more here: ABCs for Audit Collection – Windows Live


How to Kickstart Improvement in Service

Posted: June 20th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , , , | No Comments »

A lot of the business our organisation manages is concentrated on the product generation aspects of our clients business. For a manufacturer this means the shop floor procedures where parts are put together in a sequence to build a saleable product. When we talk to a potential client concerning improvement programs or processes the client instantly assumes we are talking of improvement within the manufacturing area, and that improvement – we are told – needs to be centred on workforce concerns, which are centred on pay and benefits!

This is in no sense an overstatement of the way company managers view their employees.

While improvements are clearly possible inside such an environment, it’s also true that a significant percentage of the staff isn’t directly involved with producing saleable products, but with administrative service support. These employees are frequently seen in a different light to the manufacturing group, and it is apparent to us that any improvement process that bypasses administrative functions also misses the opportunity to achieve significant efficiency savings for the employer. However, an improvement program has to capture the imagination of the participants, while providing a mechanism for individuals and work groups to participate and be successful. It is also necessary for managers to encourage individual contributions and contribute their managerial ‘weight’ to the achievement of any improvement. All of this while not seeking to highjack the credit for any performance gain.

While considering the differences of work pattern and culture that is the norm for the administrative and support functions in these businesses, the similarity of work to staff working in service industries became apparent, where much of the activity is clerical and administrative. Whatever solution could be found to enable us to engage with these people would probably work regardless of the nature of the business. We were clear in our minds that long term improvement programs typical of manufacturing facilities would not be appropriate for administrative functions.

For many years we were attracted by the pragmatic teachings of the late Philip Crosby, author of Quality is Free and many similar books. The program defined in that book has been adapted world-wide to the benefit of countless organisations and individuals. Less well know within the same tome is a program he chose to call ‘Make Certain.’ With some effort we adapted Make Certain to a 21st century European culture and sought an opportunity to trial the outcome.

A current client allowed us the opportunity to show its worth within an administrative workforce of 120 staff. Working with groups of around 20 individuals, each with a mixture of skills and department affiliation, we spent time explaining the process and encouraging their involvement and contribution to improve both overall and specific efficiencies and effectiveness. We too learned from this experience and were able to develop the program further.

For our client’s organisation the trial run was a success because for possibly the first time each person understood the nature of their own individual work process, and how this related to – and effected, all of the surrounding processes. This understanding led to a desire to improve, and because local managers and supervisors were participants measurable performance improvements were achived. This initial trial of the ‘Make Certain’ program was a phenomenal success. An estimated 10% increase in efficiency, as measured by the ‘work units’ produced by the staff involved, only 9 months from program implementation.

The up-front cost to the organisation – for training – was equivalent to a loss of 360 hours employed time – probably somewhat less working time! This along with a support expense estimated to be around 20 man-days of management time.

Overall it cost the organisation 65 days of lost time to achieve a saving in the first year of 2700 hours ( 10% of 27000 hours, based on 120 staff and 230 working days per year.) What to do with 10% additional work capacity is a problem that would delight any business manager.

The entire process was initiated with minimum investment, employed no high profile specialists or techniques, and succeeded because the participants had the freedom to believe in themselves and test their own solutions.

Truly, as Phil Crosby said, Quality is Free.

Retrieved from “http://www.articlesbase.com/business-articles/how-to-kickstart-improvement-in-service-898099.html”

Excerpt from: How to Kickstart Improvement in Service


ITIL – Understanding and Using IT Service Management

Posted: June 17th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , | No Comments »

‘ITIL’ is a term that is fast gaining currency around the IT world. It is often wrongly described as ‘IT governance’ – in fact, on its own, it certainly isn’t this. ITIL is a collection of best practices that helps companies implement an IT Service Management culture. However, its growing popularity reflects the substantial impact it can make on a company’s IT and business performance and the fact that, in combination with other frameworks, it is a vital ingredient in creating true IT governance.

What is IT Service Management?

Today’s businesses are increasingly delivered or enabled using information technology. Business and IT management need guidance and support on how to manage the IT infrastructure in order to cost-effectively improve functionality and quality. IT Service Management is a concept that deals with how to define and deliver that guidance and support. In common with other modern management practice, it views things from the customer’s perspective, i.e. IT is a service that the customer or consumer receives. It can be made up of hardware, software and communications facilities, but the customer perceives it as a self-contained, coherent entity.

So what is ITIL?

Standing for ‘IT Infrastructure Library’, ITIL is a set of best practices that are at the heart of the IT Service Management approach. It provides guidance on how to manage IT infrastructure so as to streamline IT services in line with business expectations. ITIL is a best practice framework, presenting the consolidated experience of organisations worldwide on how best to manage IT services to meet business expectations.

ITIL was originally developed during the 1980s by the UK’s Central Computer and Technology Agency (CCTA), a government body, which created ITIL version 1 as an approach to incorporating various vendor technologies and serving organisations with differing technical and business needs. CCTA has now become part of the Office of Government Commerce (OGC), which, as official publisher of the ITIL library, updated it, published version 2 and continues to develop and support it.

ITIL has since become widely adopted across the world in both public and private sectors and is recognised as best practice, being deployed in organisations of all shapes and sizes.

What makes up the ITIL Library?

ITIL documentation consists of seven ‘sets’ or ‘volumes’: Service Support, Service Delivery, ICT Infrastructure Management, Security Management, Planning to Implement Service Management, The Business Perspective and Applications Management.

Of these, Service Support, Service Delivery and Security Management are considered the central components of the ITIL framework, covering vital issues such as Incident Management, Configuration Management, Change Management, IT Service Continuity Management, Availability Management and IT Security Management.

Learning about ITIL

The seven ITIL volumes are published by The Stationery Office, the official publisher of the UK government. In addition, to gain an overview and a sense of how to navigate these, it is helpful to consult one of several recommended introductory texts. ‘Foundations of IT Service Management Based on ITIL – An Introduction’ is widely accepted as the best starting point and self-study guide. ‘Implementing Service and Support Management Processes – A Practical Guide’ is a thorough and comprehensive handbook on the subject, while the ‘itSMF Pocket Guides’ provide a good overview of each of the ITIL components.

Getting certified

Part of the reason for the recent growth in ITIL awareness is the publication in December 2005 of a new global standard to which businesses can become certified. ISO 20000 (or ISO/IEC 20000:2005, to give it its correct name) is closely based upon the pre-existing British standard BS15000 – in fact, it is virtually indistinguishable. The standard comprises two parts: ISO/IEC 20000-1 is the specification for IT Service Management against which an organisation’s practices can be certified; ISO/IEC 20000-2 is the ‘code of practice’ that describes best practices and the requirements of Part 1.

BS15000 has become widely used around the world since it was published in 2003 and was adopted virtually unchanged as the national standard in Australia and South Africa. A number of companies across the USA, Europe and Asia have already become certified as BS 15000 compliant. We also recommend several excellent books that provide guidance on achieving BS15000/ISO 20000 compliance.

Upon the publication of ISO 20000, BS15000 was withdrawn and individual standards and certification bodies are drawing up their own formal transition programmes for conversion to the new standard. Companies already holding BS15000 should encounter no difficulty in converting their certification to the new standard, as this should be one of the considerations addressed by the individual certifying bodies.

Practitioners can also pursue a structured programme of ITIL examination and certification, comprising the ITIL Foundation Certificate, ITIL Practitioners Certificate and ITIL Managers Certificate. Examinations and certification in Europe are managed through two independent bodies: EXIN, the European Examination Institute for Information Science; and ISEB, the Information Systems Examination Board. Between them, these two organisations control the entire certification scheme. In the United States, HDI is a principal organiser of examination and certification, and it and similar organisations provide coverage elsewhere around the world. These organisations ensure that personal certification is fair, honest and independent of the organisations that provide the training, and accredit training suppliers to bring about a consistent quality of course delivery.

ITIL and IT Governance

When combined with certain other frameworks, ITIL makes a major contribution to the creation of effective IT governance. ITIL processes can be mapped to CobiT (Control Objectives for Information and Related Technology) processes, and the two frameworks complement each other nicely: if the CobiT control framework tells the organisation ‘what’ to do in the delivery and support areas, ITIL best practices help the organisation define ‘how’ to deliver these requirements. Similarly, ITIL works very effectively with ISO 17799, the international code of best practice for information security, providing guidance on how to manage the various processes that ISO 17799 prescribes.

By drawing upon these three complementary frameworks as appropriate to its needs, an organisation can establish an IT governance regime that delivers real and lasting competitive advantage to its business.

Alan Calder is CEO of IT Governance Limited, an authorised international distributor of ITIL books (published by TSO on behalf of the Office of Government Commerce) and of British and international standards published by BSI. The seven ITIL volumes are available at http://www.itgovernance.co.uk/catalog/23, while introductory books may be accessed at http://www.itgovernance.co.uk/catalog/7. All items may be purchased online for worldwide delivery. For more information visit http://www.itgovernance.co.uk/itil.aspx

Article Source:

http://EzineArticles.com/?expert=Alan_Calder

See more here: ITIL – Understanding and Using IT Service Management