Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS)

Adapting IT Governance
Frameworks to Ensure
Control and Visibility
of Free and Open
Source Software
(FOSS)

Dr Derek W. Keats

http://www.dkeats.comhttp://kengasolutions.com
[email protected]

(Pty) Ltd

Free as inFreedom

"The system by which thecurrent and future use of ICTis directed and controlled. It involves evaluating anddirecting the plans for the useof ICT to support theorganisation and monitoringthis use to achieve plans. Itincludes the strategy andpolicies for using ICT within an organisation."

Australian Standard for Corporate Governance of Information and Communication Technology (ICT)

IT Governance

Oversight & direction

Accountability

Effectiveness & efficiency

Innovate or not

Governance
Frameworks

FOSS
Policy

Formal frameworks

COBIT
AS8015-2005
ISO/IEC 38500:2008
ITIL
CMM

Ecosystem

FOSS
Policy
2007

Use FOSS

Migrate
to FOSS

Develop
in FOSS

Use
FOSS License

Promote
FOSS

Hardware

Knowledge content

Data

APIs

Create a project

Join a project

Sponsor a project

Adapt existing

Use existing

Maximum value
for large organisations

FOSS engagement

Ecological

Complex system with
emergent properties

Vision

People

Process

Technology

Finance

People

Vision

Process

Technology

ClearSocialisedKnown
DiscussedOn agendasStrategyAligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision

Organization
SkillsCommitmentKnowledgeCompetenciesConnectednessEmotional intelligenceProblem solvingAttitudesBeliefsActionsPassionFearsHidden agendas'Politics'

Governance
Leadership
Management
CreationDeploymentOperationSupportEnhancementInnovationProject
management
Change
managementCommunication

ApplicationSupporting
applicationsOperating systemHardwareNetworkInternetUser devicesUser operating
systemUser applications

People

Vision

Process

Technology

Align for success

Align for success

Start here

Do these together

Underpinned by: appropriate and sustainable finance

(unless you are a start-up)

examples

People

Vision

Process

Technology

other visions
Aligned to
other strategies
Other strategies
aligned to
vision

Organization

Governance
Leadership
Management
management
Change


People

Vision

Process

Technology

Align for success

Align for success

Start here

Do these together



examples

A committee reporting to the highest level governance structure exists, and FOSS features strongly on its agendaICT forms a standard component of the work of highest level governance structure, it is taken seriously, and FOSS features strongly on its agendaIndependent ICT knowledge, with a deep understanding of FOSS, is available within the highest level governance structureThe implementation of policy with respect to FOSS is audited and the audit taken seriouslyA strategy exists and serves as the basis for estimating value of achievements with respect to FOSS in governmentRegular reports with 'score sheets' received, measured against SMART strategic goals A formalised ICT enterprise governance framework (e.g. COBIT) is used effectively Accountable person for ICT across government as a whole who has FOSS as a key performance indicatorTo what extent do you have governance?

ABCDEFGH

Maturity of selected governance process in relation to FOSS policy in the SA Government (adapted from the approach used in the COBIT 4.1 maturity model):

0 = non-existent

1 = ad hoc

2 = repeatable

3 = defined process

4 = managed and measured

5 = optimised

A committee reporting to the highest level governance structure exists, and FOSS features strongly on its agendaICT forms a standard component of the work of highest level governance structure, it is taken seriously, and FOSS features strongly on its agendaIndependent ICT knowledge, with a deep understanding of FOSS, is available within the highest level governance structureThe implementation of policy with respect to FOSS is audited and the audit taken seriouslyA strategy exists and serves as the basis for estimating value of achievements with respect to FOSS in governmentRegular reports with 'score sheets' received, measured against SMART strategic goals A formalised ICT enterprise governance framework (e.g. COBIT) is used effectively , and includes FOSS as a key elementAccountable person for ICT across government as a whole who has FOSS as a key performance indicatorTo what extent do you have governance?

ABCDEFGH21100000

To what extent do you have governance?

Intervention

Recommendations

To what extent do you have governance?

People

Vision

Process

Technology

other visions
Aligned to
other strategies
Other strategies
aligned to
vision

Organization

Governance
Leadership
Management
management
Change


People

Vision

Process

Technology

Align for success

Align for success

Start here

Do these together



examples

`

Vision exists for FOSS in government and the country as a whole, and is derived from or drives policy or legislationVision articulates well with other policies, visions and strategies that may exist in various areas of governmentVision is clear and easy to understand, stakeholders can explain its meaning and are able to defend it to detractorsVision document, videos, and other media available to all stakeholdersVision well socialised and known, on agendas, discussed, and informs strategies and operational plansThere is widespread acceptance of responsibility for the vision in all areas of government, not just those with a direct ICT responsibilityVision focuses on the role of FOSS in helping government achieve its core objectives Vision draws attention to the need for excellence in administrative and management systems to achieve operational excellenceTo what extent do you have a vision?

ABCDEFGH

Vision exists for FOSS in government and the country as a whole, and is derived from or drives policy or legislationVision articulates well with other policies, visions and strategies that may exist in various areas of governmentVision is clear and easy to understand, stakeholders can explain its meaning and are able to defend it to detractorsVision document, videos, and other media available to all stakeholdersVision well socialised and known, on agendas, discussed, and informs strategies and operational plansThere is widespread acceptance of responsibility for the vision in all areas of government, not just those with a direct ICT responsibilityVision focuses on the role of FOSS in helping government achieve its core objectives Vision draws attention to the potential for FOSS to help drive excellence in administrative and management systems to achieve operational excellence & delivery of servicesTo what extent do you have a vision?

ABCDEFGH21100000

To what extent do you have a vision?

People

Vision

Process

Technology

other visions
Aligned to
other strategies
Other strategies
aligned to
vision

Organization

Governance
Leadership
Management
management
Change


People

Process

Technology

Align for success

Align for success

Start here

Do these together



examples

Strategy

A strategy for bringing FOSS to bear on government ICT and processes existsStrategy gives life to the vision statementStrategy is derived from broader government strategy or embedded within itStrategy is specific, measurable, aggressive, realistic and has time-bound goalsThere was active participation of stakeholders in strategy developmentStrategy is known and socialisedStrategy is used for decision makingStrategy is owned by all IT leadership and other relevant leaders within governmentTo what extent do you have a strategy?

ABCDEFGH

A strategy for bringing FOSS to bear on government ICT and processes existsStrategy gives life to the vision statementStrategy is derived from broader government strategy or embedded within itStrategy is specific, measurable, aggressive, realistic and has time-bound goalsThere was active participation of stakeholders in strategy developmentStrategy is known and socialisedStrategy is used for decision makingStrategy is owned by all IT leadership and other relevant leaders within governmentTo what extent do you have a strategy?

ABCDEFGH21200010

To what extent do you have a strategy?

strategy a
co-created
plan of
action arising
out of a vision, with
aims, objectives and goals;
sometimes with an operational plan

aims high level, conceptual things to be done or achieved

The South African Government will implement FOSS unless proprietary software is demonstrated to be significantly superior

FOSS

objectives stated targets, the achievement of which can be estimated through an aggregation of measurable goals that collectively contribute to achieving an aim

Create project governance with government wide oversight that ensures that projects implemented within all spheres of government would have to justify the implementation or development of proprietary software, and ensures that FOSS client applications are not disadvantaged even where proproprietary sofware is implemented

Create broad improvements to procurement so that FOSS is recognised and favoured

goals specific, observable and measurable results that collectively contribute to achieving an objective and which are SMART in their formulation

SMARTSpecific

Measurable

Aggressive

Realistic

Time-bound

StrategyAimAimAimObjective

ObjectiveObjectiveObjectiveObjectiveObjective

Goal

GoalGoalGoalGoal

Vision

AimObjectiveGoalGoalSouth African Government will migrate current proprietary software to FOSS whenever comparable software exists

Migrate office software to FOSS throughout the South African Government, starting within DPSA

By December, 2008, training and support will be available for Open Office (LibreOffice) to enable office migration to proceed

By April 2009, the offices of the Minister and Directors General will be migrated to Open Office (LibreOffice)

GoalBy March 2010, DPSA will be completely migrated to Open Office
(LibreOffice)

A trivial example

Governance
Frameworks

Governance

Vision

Strategy

Passion of individuals

Ad hoc

Path of least resistance

Fluctuating value

Win and lose cycle

FUD abundant

2007

2011

2013

People

Vision

Process

Technology

other visions
Aligned to
other strategies
Other strategies
aligned to
vision

Organization

Governance
Leadership
Management
management
Change


People

Process

Technology

Align for success

Align for success

Start here

Do these together



examples

Leadershipmatters

The
ecological
view

Derek Keats, [email protected]
+27 82 787 0169
www.dkeats.com kengasolutions.com

Thank you

Derek Keats, [email protected]
+27 82 787 0169
www.dkeats.com kengasolutions.com

Thank you

This presentation
was made
entirely using
Free Software

Creative Commons
Attribution License