Adapting IT Governance
Frameworks to Ensure
Control and Visibility
of Free and Open
Source Software
(FOSS)
Dr Derek W. Keats
http://www.dkeats.comhttp://kengasolutions.com
[email protected]
(Pty) Ltd
Free as inFreedom
"The system by which thecurrent and future use of ICTis directed and controlled. It involves evaluating anddirecting the plans for the useof ICT to support theorganisation and monitoringthis use to achieve plans. Itincludes the strategy andpolicies for using ICT within an organisation."
Australian Standard for Corporate Governance of Information and Communication Technology (ICT)
IT Governance
Oversight & direction
Accountability
Effectiveness & efficiency
Innovate or not
Governance
Frameworks
FOSS
Policy
Formal frameworks
COBIT
AS8015-2005
ISO/IEC 38500:2008
ITIL
CMM
Ecosystem
FOSS
Policy
2007
Use FOSS
Migrate
to FOSS
Develop
in FOSS
Use
FOSS License
Promote
FOSS
Hardware
Knowledge content
Data
APIs
Create a project
Join a project
Sponsor a project
Adapt existing
Use existing
Maximum value
for large organisations
FOSS engagement
Ecological
Complex system with
emergent properties
Vision
People
Process
Technology
Finance
People
Vision
Process
Technology
ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional
intelligenceProblem
solvingAttitudesBeliefsActionsPassionFearsHidden
agendas'Politics'
Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication
ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser
operating
systemUser applications
People
Vision
Process
Technology
Align for success
Align for success
Start here
Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples
People
Vision
Process
Technology
ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional
intelligenceProblem
solvingAttitudesBeliefsActionsPassionFearsHidden
agendas'Politics'
Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication
ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser
operating
systemUser applications
People
Vision
Process
Technology
Align for success
Align for success
Start here
Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples
A committee reporting to the highest level governance structure exists, and FOSS features strongly on its agendaICT forms a standard component of the work of highest level governance structure, it is taken seriously, and FOSS features strongly on its agendaIndependent ICT knowledge, with a deep understanding of FOSS, is available within the highest level governance structureThe implementation of policy with respect to FOSS is audited and the audit taken seriouslyA strategy exists and serves as the basis for estimating value of achievements with respect to FOSS in governmentRegular reports with 'score sheets' received, measured against SMART strategic goals A formalised ICT enterprise governance framework (e.g. COBIT) is used effectively Accountable person for ICT across government as a whole who has FOSS as a key performance indicatorTo what extent do you have governance?
ABCDEFGH
Maturity of selected governance process in relation to FOSS policy in the SA Government (adapted from the approach used in the COBIT 4.1 maturity model):
0 = non-existent
1 = ad hoc
2 = repeatable
3 = defined process
4 = managed and measured
5 = optimised
A committee reporting to the highest level governance structure exists, and FOSS features strongly on its agendaICT forms a standard component of the work of highest level governance structure, it is taken seriously, and FOSS features strongly on its agendaIndependent ICT knowledge, with a deep understanding of FOSS, is available within the highest level governance structureThe implementation of policy with respect to FOSS is audited and the audit taken seriouslyA strategy exists and serves as the basis for estimating value of achievements with respect to FOSS in governmentRegular reports with 'score sheets' received, measured against SMART strategic goals A formalised ICT enterprise governance framework (e.g. COBIT) is used effectively , and includes FOSS as a key elementAccountable person for ICT across government as a whole who has FOSS as a key performance indicatorTo what extent do you have governance?
ABCDEFGH21100000
To what extent do you have governance?
Intervention
Recommendations
To what extent do you have governance?
People
Vision
Process
Technology
ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional
intelligenceProblem
solvingAttitudesBeliefsActionsPassionFearsHidden
agendas'Politics'
Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication
ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser
operating
systemUser applications
People
Vision
Process
Technology
Align for success
Align for success
Start here
Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples
`
Vision exists for FOSS in government and the country as a whole, and is derived from or drives policy or legislationVision articulates well with other policies, visions and strategies that may exist in various areas of governmentVision is clear and easy to understand, stakeholders can explain its meaning and are able to defend it to detractorsVision document, videos, and other media available to all stakeholdersVision well socialised and known, on agendas, discussed, and informs strategies and operational plansThere is widespread acceptance of responsibility for the vision in all areas of government, not just those with a direct ICT responsibilityVision focuses on the role of FOSS in helping government achieve its core objectives Vision draws attention to the need for excellence in administrative and management systems to achieve operational excellenceTo what extent do you have a vision?
ABCDEFGH
Vision exists for FOSS in government and the country as a whole, and is derived from or drives policy or legislationVision articulates well with other policies, visions and strategies that may exist in various areas of governmentVision is clear and easy to understand, stakeholders can explain its meaning and are able to defend it to detractorsVision document, videos, and other media available to all stakeholdersVision well socialised and known, on agendas, discussed, and informs strategies and operational plansThere is widespread acceptance of responsibility for the vision in all areas of government, not just those with a direct ICT responsibilityVision focuses on the role of FOSS in helping government achieve its core objectives Vision draws attention to the potential for FOSS to help drive excellence in administrative and management systems to achieve operational excellence & delivery of servicesTo what extent do you have a vision?
ABCDEFGH21100000
To what extent do you have a vision?
People
Vision
Process
Technology
ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional
intelligenceProblem
solvingAttitudesBeliefsActionsPassionFearsHidden
agendas'Politics'
Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication
ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser
operating
systemUser applications
People
Process
Technology
Align for success
Align for success
Start here
Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples
Strategy
A strategy for bringing FOSS to bear on government ICT and processes existsStrategy gives life to the vision statementStrategy is derived from broader government strategy or embedded within itStrategy is specific, measurable, aggressive, realistic and has time-bound goalsThere was active participation of stakeholders in strategy developmentStrategy is known and socialisedStrategy is used for decision makingStrategy is owned by all IT leadership and other relevant leaders within governmentTo what extent do you have a strategy?
ABCDEFGH
A strategy for bringing FOSS to bear on government ICT and processes existsStrategy gives life to the vision statementStrategy is derived from broader government strategy or embedded within itStrategy is specific, measurable, aggressive, realistic and has time-bound goalsThere was active participation of stakeholders in strategy developmentStrategy is known and socialisedStrategy is used for decision makingStrategy is owned by all IT leadership and other relevant leaders within governmentTo what extent do you have a strategy?
ABCDEFGH21200010
To what extent do you have a strategy?
strategy a
co-created
plan of
action arising
out of a vision, with
aims, objectives and goals;
sometimes with an operational plan
aims high level, conceptual things to be done or achieved
The South African Government will implement FOSS unless proprietary software is demonstrated to be significantly superior
FOSS
objectives stated targets, the achievement of which can be estimated through an aggregation of measurable goals that collectively contribute to achieving an aim
Create project governance with government wide oversight that ensures that projects implemented within all spheres of government would have to justify the implementation or development of proprietary software, and ensures that FOSS client applications are not disadvantaged even where proproprietary sofware is implemented
Create broad improvements to procurement so that FOSS is recognised and favoured
goals specific, observable and measurable results that collectively contribute to achieving an objective and which are SMART in their formulation
SMARTSpecific
Measurable
Aggressive
Realistic
Time-bound
StrategyAimAimAimObjective
ObjectiveObjectiveObjectiveObjectiveObjective
Goal
GoalGoalGoalGoal
Vision
AimObjectiveGoalGoalSouth African Government will migrate current proprietary software to FOSS whenever comparable software exists
Migrate office software to FOSS throughout the South African Government, starting within DPSA
By December, 2008, training and support will be available for Open Office (LibreOffice) to enable office migration to proceed
By April 2009, the offices of the Minister and Directors General will be migrated to Open Office (LibreOffice)
GoalBy March 2010, DPSA will be completely migrated to Open
Office
(LibreOffice)
A trivial example
Governance
Frameworks
Governance
Vision
Strategy
Passion of individuals
Ad hoc
Path of least resistance
Fluctuating value
Win and lose cycle
FUD abundant
2007
2011
2013
People
Vision
Process
Technology
ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional
intelligenceProblem
solvingAttitudesBeliefsActionsPassionFearsHidden
agendas'Politics'
Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication
ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser
operating
systemUser applications
People
Process
Technology
Align for success
Align for success
Start here
Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples
Leadershipmatters
The
ecological
view
Derek Keats, [email protected]
+27 82 787 0169
www.dkeats.com kengasolutions.com
Thank you
Derek Keats, [email protected]
+27 82 787 0169
www.dkeats.com kengasolutions.com
Thank you
This presentation
was made
entirely using
Free Software
Creative Commons
Attribution License