<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: cmdb]]></title>
    <link>http://securityratty.com/tag/cmdb</link>
    <description></description>
    <pubDate>Tue, 08 Apr 2008 20:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Links List 10.31.08]]></title>
      <link>http://securityratty.com/article/9428945f69b50703993282159a9d8676</link>
      <guid>http://securityratty.com/article/9428945f69b50703993282159a9d8676</guid>
      <description><![CDATA[Happy Halloween

What an interesting time to hold a technology conference. The DLA Piper Global Technology Leaders Summit last week brought together CXOs from Amazon, Walmart.com, Stanford, Safeway,...]]></description>
      <content:encoded><![CDATA[<p><b>Happy Halloween!</b>
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/10/em7-pumpkin.jpg"><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="184" alt="EM7_pumpkin" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/em7-pumpkin-thumb.jpg" width="244" border="0"></a>
<p>What an interesting time to hold a technology conference. The <a href="http://www.eweek.com/c/a/IT-Management/CxOs-Get-Together-for-Candid-OfftheRecord-Chat/?kc=EWKNLNAV10272008STR3" target="_blank">DLA Piper Global Technology Leaders Summit last week</a> brought together CXOs from Amazon, Walmart.com, Stanford, Safeway, Microsoft, Sun, Cisco and others to discuss the state of IT in general and how the economy is impacting it. Some highlights:<br />
<blockquote>
<p>&#8220;Cloud computing for large enterprises is a dead duck, in the opinion of several venture capital firms.&#8221;</p>
</blockquote>
<p>&nbsp;<br />
<blockquote>
<p>&#8220;The current slowdown in the U.S. macroeconomy is definitely going to hurt the IT industry, as it will most of the nation&#8217;s businesses, for at least the next year and most likely into the next two years.&#8221;</p>
</blockquote>
<p>&nbsp;
<p><a href="http://blogs.eweek.com/storage_station/content/general/netapp_cancels_first_user_conference_cites_travel_issues.html" target="_blank">NetApp cancelled its first user conference</a> slated for 2009 citing economy-driven restrictions on <a href="http://www.btnonline.com/businesstravelnews/headlines/frontpage_display.jsp?vnu_content_id=1003875472" target="_blank">business travel</a>.
<p>We recently wrote about the possible <a href="http://blog.sciencelogic.com/are-there-recession-proof-it-products/10/2008" target="_blank">upside for MSPs</a> in this economic downtown. A <a href="http://www.infoworld.com/article/08/10/29/Recession_set_to_boost_outsourcing_1.html?source=NLC-TB&amp;cgd=2008-10-30" target="_blank">survey from EquaTerra</a> of more than 200 outsourcing service suppliers announced that “more than 40 percent of those polled had seen increased demand levels, despite the economic downturn.” The survey suggests that outsourcing projects are changing, with a strong focus on quick return on investment replacing longer-term initiatives to improve end-to-end business processes, according to InfoWorld. So as we saw during <a href="http://blog.sciencelogic.com/interop-ny-survey-top-it-challenges-trends-and-what-it-is-spending-money-on/09/2008" target="_blank">our own surveys</a> this year, it looks like IT will spend time and money against the practical projects that should and could get done and not taking on ITIL and CMDB projects.
<p>Jonathan Schwartz as a puppet talking about open source and his ponytail. The driest Sesame Street take-off you’ll ever see. Check out the <a href="http://www.techcrunchit.com/2008/10/14/continuous-partial-innovation/" target="_blank">video here</a>. For those of you playing a drinking game at home, “ponytail”.
<p>Denise Dubie <a href="http://www.networkworld.com/newsletters/nsm/2008/102708nsm2.html?nlhtnsm=ts_102908&amp;nladname=102908networksystemsmanagemental" target="_blank">posted a follow up</a> to her article <a href="http://www.networkworld.com/community/node/33996" target="_blank">Novell’s Managed Objects buy</a>, and shared insights from different commenters, including <a href="http://www.networkworld.com/community/node/33996#comment-191253" target="_blank">yours truly</a>.
<p>One of our favorites, the IT Skeptic was <a href="http://www.johnmwillis.com/itil/5-questions-for-the-itskeptic/" target="_blank">featured on John Willis’ blog</a> this week, answering some questions about CMDB, ITSMF and more. He also provided his insight into IBM Tivoli, although he “tries to stay non-partisan”.
<p>Inexplicable. HP posted <a href="http://blogs.wsj.com/biztech/2008/10/27/h-p-commercializes-halloween-with-monsters-that-speak-technobabble/" target="_blank">Halloween-themed videos about datacenters</a> on YouTube this week. Unlike the great <a href="http://www.youtube.com/watch?v=MSqXKp-00hM" target="_blank">IBM videos about the mainframe</a>, these videos speak techno-babble without tempering the lingo with being funny or tongue-in-cheek. Various frightening creatures share information on service management processes and discuss virtualization techniques to help consolidate hardware. Scary.</p>
]]></content:encoded>
      <pubDate>Fri, 31 Oct 2008 18:10:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/projects">projects</category>
      <category domain="http://securityratty.com/tag/practical projects">practical projects</category>
      <category domain="http://securityratty.com/tag/discuss virtualization techniques">discuss virtualization techniques</category>
      <category domain="http://securityratty.com/tag/discuss">discuss</category>
      <category domain="http://securityratty.com/tag/cmdb projects">cmdb projects</category>
      <category domain="http://securityratty.com/tag/cmdb">cmdb</category>
      <category domain="http://securityratty.com/tag/ibm videos">ibm videos</category>
      <category domain="http://securityratty.com/tag/videos">videos</category>
      <category domain="http://securityratty.com/tag/survey suggests">survey suggests</category>
      <source url="http://blog.sciencelogic.com/links-list-103108/10/2008">Links List 10.31.08</source>
    </item>
    <item>
      <title><![CDATA[Links List 10.10.08]]></title>
      <link>http://securityratty.com/article/e68ccc27eb670a14c5008d0e963a10e2</link>
      <guid>http://securityratty.com/article/e68ccc27eb670a14c5008d0e963a10e2</guid>
      <description><![CDATA[You cannot turn around without bumping into another bad news story about the economy. From layoffs (10% of eBays workforce, 7.5% of HPs ) to the bailouts to the $7 billion loan the state of California...]]></description>
      <content:encoded><![CDATA[<p>You cannot turn around without bumping into another bad news story about the economy. From layoffs (10% of <a href="http://www.webguild.org/2008/10/ebay-layoffs-announced.php" target="_blank">eBay&#8217;s</a> workforce, 7.5% of <a href="http://www.pcworld.com/businesscenter/article/151102/hp_announces_24600_layoffs_in_wake_of_eds_acquisition.html" target="_blank">HP&#8217;s</a>) to the bailouts to the <a href="http://www.businessweek.com/bwdaily/dnflash/content/oct2008/db2008103_878150.htm?chan=top+news_top+news+index+-+temp_news+%2B+analysis" target="_blank">$7 billion loan</a> the state of California needs to make payroll this month. Really, 7 beeeellllyon dollars? How many people shook their heads and felt sorry for the people working at financial services companies, all the while thinking that the tech sector was a pretty secure place to be (as long as you weren&#8217;t in the IT department at a financial services company)? Well, now apparently comes the wake up call for tech. Oh yeah, a bunch of those startups and not-so-young-anymore startups are FUNDED. They&#8217;re not making MONEY &#8211; or at least certainly not enough to actually be PROFITABLE, given the way they&#8217;ve been spending on payroll, sales and marketing to grow as quickly as possible. To get to that visibility and magic number of customers which means a big payoff for the investors and the founders. From the reports, it&#8217;s back to basics time, or at least that&#8217;s what the <a href="http://valleywag.com/5061391/its-always-darkest-before-its-pitch-black" target="_blank">VCs are telling their portfolio companies</a>. Cut costs. Layoff people. Focus on selling. And get profitable. Duh.</p>
<p>So can <a href="http://blogs.zdnet.com/open-source/?p=2972" target="_blank">open source weather out the economic storm</a>? Emerging from the dot-com bust, open source has matured, its legal framework and values are established, and serious players are in the game. But as this post on ZDNet points out, consolidation is on the way. &#8220;IDC renamed its LinuxWorld Show in San Francisco next year Open Source World &#8211; a clear shot across the bow at O&#8217;Reilly&#8217;s OSCON.&#8221; Will open source (from free to lower-cost alternatives to commercial software) flourish in a time of tightening budgets or will projects quietly go away for lack of funding (VC and that pesky business model thing) and, let&#8217;s face it, the &#8220;extra time&#8221; of IT pros tasked yet again to do more with less?</p>
<p>It&#8217;s October 2008 and Charles Babcock writes, &#8220;<a href="http://www.informationweek.com/news/software/server_virtualization/showArticle.jhtml?articleID=210800267" target="_blank">CA Embraces Virtualization As Future of Data Center Management</a>&#8221;. Beyond keeping up with what competitors are doing, I enjoy this article for the masterful way it depicts the nightmare that is working with traditional frameworks. Too slow, too expensive, too complex, too many modules &#8211; it&#8217;s all in here. And somehow, I don&#8217;t think that was the point of it. So, $154,000 for CA Data Center Automation Manager &#8211; which can &#8220;consult&#8221; the CA CMDB (pricing starting at what do you think, something like $500K to a million &#8211; don&#8217;t forget those services) plus CA Wily APM (Introscope 8 and Wily Customer Experience Manager 4.2; pricing anyone?) metrics that get fed back into Data Center Automation Manager to help determine the virtual machine resources that are needed. Plus can also integrate info from CA Endeavor&#8217;s software change management tracking and CA SysView and in future with CA Management Suite for Mainframe Linux, potentially. I am not kidding about this list. And, we&#8217;ve been hearing this for a while &#8211; &#8220;Unicenter&#8221; the brand goes away and is replaced by &#8220;CA NSM&#8221;. The brand goes away. Why retire a successful brand? Ah.</p>
<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" height="110" alt="joe_tucci" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/joe-tucci1.jpg" width="170" align="left" border="0" />I love this post on EMC, &#8220;<a href="http://www.eweek.com/c/c/Data-Storage/Eleven-Things-You-Didnt-Know-about-the-Worlds-Largest-External-Disk-Storage-Company/?kc=EWKNLNAV10102008STR2" target="_blank">Eleven Things You Didn&#8217;t Know About the World&#8217;s Largest External Disk Storage Company</a>.&#8221; Although I guess I really don&#8217;t know much about Joe Tucci, since #11 says:</p>
<blockquote><p>&#8220;Contrary to conventional thought, it is not true that the EMC President/CEO is the older, gentler brother of the fictional patriarch of HBO&#8217;s hit television series.&#8221; Hunh. I just googled him, thinking maybe it was a resemblance thing. Nope.&quot;</p>
</blockquote>
<p> And on a much lighter note. A funny from Dell. 2 years later, I just stumbled across this Proprietaryville , Jibjab-ish video, called <a href="http://www.youtube.com/watch?v=LOAunpk54PA&amp;eurl" target="_blank">Dell the Journey</a>. Legacy systems being escorted onto the Retirement Home bus. Michael Dell as knight in shining armor, singing no less. Joe Tucci and Larry Ellison showing up as heroes leading the charge against Proprietaryville (yes, funny in and of itself). And my favorite, &#8220;Now let&#8217;s go kick some proprietary apps.&#8221;</p>
<p> <img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="146" alt="delljibjab" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/delljibjab1.jpg" width="240" border="0" /></p>
]]></content:encoded>
      <pubDate>Fri, 10 Oct 2008 17:15:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/financial services company">financial services company</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/source weather">source weather</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/extra time">extra time</category>
      <category domain="http://securityratty.com/tag/successful brand">successful brand</category>
      <category domain="http://securityratty.com/tag/joe tucci">joe tucci</category>
      <category domain="http://securityratty.com/tag/dell">dell</category>
      <source url="http://blog.sciencelogic.com/links-list-101008/10/2008">Links List 10.10.08</source>
    </item>
    <item>
      <title><![CDATA[Interop NY Survey Top IT Challenges, Trends and What IT is Spending Money On]]></title>
      <link>http://securityratty.com/article/c1238f65d5c0144adeaaf578e8e7de08</link>
      <guid>http://securityratty.com/article/c1238f65d5c0144adeaaf578e8e7de08</guid>
      <description><![CDATA[I wont belabor the point again but just mention it as context for the 2nd annual survey we conducted at Interop NY this year. As I was dragging myself to the very early keynotes at VMworld , things...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/09/survey-poll.jpg" border="0" alt="survey_poll" width="240" height="240" align="left" /> I won’t belabor the point again but just mention it as context for the <a href="http://www.sciencelogic.com/pressrelease_20080925.htm" target="_blank">2nd annual survey</a> we conducted at <a href="http://www.interop.com/" target="_blank">Interop NY</a> this year. As I was dragging myself to the very early keynotes at <a href="http://www.vmworld.com/vmworld/index.jspa" target="_blank">VMworld</a>, things were <a href="http://www.dailyreckoning.com.au/bailout-debate-rages-on/2008/09/25/" target="_blank">falling apart on Wall Street</a>, entire departments at <a href="http://www.doctorhousingbubble.com/lehman-brothers-the-rise-and-fall-of-lehman-brothers-a-history-that-goes-beyond-the-great-depression/" target="_blank">Lehman were being let go</a>, and the boys were in NYC getting the <a href="http://www.interop.com/lasvegas/exhibition/interopnet/" target="_blank">InteropNet</a> show network up and running.</p>
<p>By all accounts the show did go on, and we have some very interesting results to share with you all.</p>
<p>Take the Top Challenges question. Once again, “Supporting New Technologies/Enabling Innovation” was most popular. But that’s a no-brainer and as one memorable respondent told me, “the definition of what I do”. What was more important was seeing the big jump that “Reducing Management Costs” made on the list, from #5 last year to #2 this year and only 1 percentage point behind #1. Tightening the belt is top of mind for everyone. (<em>As I write, the <a href="http://eddriscoll.com/archives/014056.php" target="_blank">Dow closed down today over 700 points</a></em>)</p>
<p>Overall, IT professionals told us they were tackling the practical projects that should and could get done – from deploying Security Information Management solutions to getting Asset Management and Inventory Tools in place. For the first time, we saw a close correlation between what people said was important and what actually got done. Of low importance and even lower actual deployments – <a href="http://www.processor.com/editorial/article.asp?article=articles%2Fp2931%2F33p31%2F33p31.asp" target="_blank">ITIL</a> and <a href="http://www.processor.com/editorial/article.asp?article=articles%2Fp2931%2F33p31%2F33p31.asp" target="_blank">CMDB</a>, <a href="http://www.pcmag.com/article2/0,2817,2325880,00.asp" target="_blank">IPv6</a>, <a href="http://www.greenm3.com/2008/09/state-cios-driv.html" target="_blank">Green IT</a> and <a href="http://www.techlinks.net/blogs/publishing/archive/2008/09/22/is-the-internet-ready-for-cloud-computing.aspx" target="_blank">Cloud Computing</a>.</p>
<p>And perhaps people “fessed” up about virtualization. Instead of the usual “high importance, not so many deployments now, but more deployments planned” theme we’ve been seeing around virtualization adoption, this year the very hot trend seemed to lose a bit of steam. Across the board, the numbers were down for <a href="http://www.echannelline.com/usa/story.cfm?item=23739" target="_blank">virtualization management</a>, with close to 50% of respondents telling us that their businesses were less than 10% virtualized (4% of that with no virtualization at all).</p>
<p>2008 Detailed Results – <a href="http://www.sciencelogic.com/pdf/InteropNY2008_Survey_Trends.pdf" target="_blank">showing trends year over year</a></p>
<p>Comparison of <a href="http://www.sciencelogic.com/pdf/FOSE2008_vs_2008InteropNY.pdf" target="_blank">Results from Interop NY 2008 vs FOSE 2008</a> (government IT)</p>
]]></content:encoded>
      <pubDate>Mon, 29 Sep 2008 23:00:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/top">top</category>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization management">virtualization management</category>
      <category domain="http://securityratty.com/tag/interop">interop</category>
      <category domain="http://securityratty.com/tag/top challenges question">top challenges question</category>
      <category domain="http://securityratty.com/tag/virtualization adoption">virtualization adoption</category>
      <category domain="http://securityratty.com/tag/importance">importance</category>
      <category domain="http://securityratty.com/tag/close correlation">close correlation</category>
      <category domain="http://securityratty.com/tag/2nd annual survey">2nd annual survey</category>
      <source url="http://blog.sciencelogic.com/interop-ny-survey-top-it-challenges-trends-and-what-it-is-spending-money-on/09/2008">Interop NY Survey Top IT Challenges, Trends and What IT is Spending Money On</source>
    </item>
    <item>
      <title><![CDATA[Q&A with Doug McClure: What Makes BSM Successful?]]></title>
      <link>http://securityratty.com/article/ac3c26a14f128a8ecb49f7c474cbb36e</link>
      <guid>http://securityratty.com/article/ac3c26a14f128a8ecb49f7c474cbb36e</guid>
      <description><![CDATA[Yesterday we featured our initial Q&amp;A with Doug McClure , who took some time to answer some strategic questions on BSM Lite. Today, Doug shares his thoughts on BSM and CMDB strategies for companies...]]></description>
      <content:encoded><![CDATA[<p>Yesterday we featured <a href="http://blog.sciencelogic.com/qa-with-doug-mcclure-is-bsm-lite-the-answer/07/2008" target="_blank">our initial Q&amp;A</a> with <a href="http://dougmcclure.net/blog/" target="_blank">Doug McClure</a>, who took some time to answer some strategic questions on BSM Lite. Today, Doug shares his thoughts on BSM and CMDB strategies for companies and how his stint in the U.S. Navy helped shape his future passion for BSM.</p>
<p><strong><em>ScienceLogic:</em></strong> Can you share any of the strategies/advice that you give to companies embarking on their BSM journeys?</p>
<p><strong><em>Doug McClure:</em></strong> Well, first they&#8217;ve got to have a BSM strategy. Nearly all the clients I talk to or hear about wanting to do BSM do not have a BSM strategy. I talk a lot about this on my blog and with clients and it is relevant whether you&#8217;re going to think about &#8220;BSM Lite&#8221; or &#8220;BSM Heavy&#8221; approaches.</p>
<p>Once we have a BSM strategy, we need to establish a BSM roadmap that guides us in how we’ll implement the BSM strategy in a more tactical manner, focusing on short term iterative quick wins and 30-60-90 day projects. For more of my thoughts on BSM strategy and roadmapping, see the following blog posts.</p>
<ul>
<li>
<h3><a href="http://dougmcclure.net/blog/2007/03/elements-of-business-service-management-part-3-getting-business-service-management-on-the-radar-screen/" target="_blank">Elements of Business Service Management Part 3: Getting Business Service Management on the Radar Screen</a></h3>
</li>
<li>
<h3><a href="http://dougmcclure.net/blog/2007/09/elements-of-business-service-management-part-4-what%e2%80%99s-your-business-service-management-strategy/" target="_blank">Elements of Business Service Management Part 4: What’s your Business Service Management Strategy?</a></h3>
</li>
</ul>
<p>As I&#8217;ve alluded to previously, a client first must define and understand what &#8220;BSM Lite&#8221; may mean to them. Don&#8217;t take what the analysts or the vendors pitch for what you should do to achieve BSM or what value you should get from it.</p>
<p>For any type of BSM to be successful, each client must define what BSM means to them and state what they expect to get from BSM. They must make it personal, make it a part of their company culture and elevate it to be as an important initiative as compliance, risk management, SOA, ITIL, or other initiatives may be within the company.</p>
<p>Please don&#8217;t get scared off from this strategy thing. Please don&#8217;t blow this off as something that the secret enterprise architecture council should be doing. If you&#8217;re unable to get an audience in these areas within your company, start within your own sphere of influence.</p>
<p>Your strategy could be as simple as enabling the local operations center to more efficiently classify, triage and resolve problems based on a simple business service or application contextual understanding. Focus on how this changes the game within your environment. Come up with your own metrics and measures to assess the value this has to this organizational use. Trust me, you&#8217;ll need to justify your investment some time in the future.</p>
<p>Another trait of successful BSM implementations is that of the formal monitoring and management tools group has established some sort of database or knowledge repository that enables them to &#8220;manage the business of IT management and monitoring&#8221; if you will. In my opinion, the vendor community has let their clients down significantly in this area. The CMDB may be the correct answer, but most companies just don’t value monitoring enough to demand that this be included in their formal CMDB initiatives.</p>
<p>In my last job, we developed an application that I referred to as the &#8220;Service Management Database&#8221; or &#8220;SMDB&#8221;. Others may call it something else, but in essence, it was the database that captured what was monitored, how it was monitored, who owned it, what business services and applications it supported, the impact an outage or event from it had on the business services or applications, etc.</p>
<p>One key component of this “SMDB” was establishing the relationships of real and synthetic user and transaction monitoring steps to associated servers and applications. This is a significant gap area in many tools and vendor CMDBs.</p>
<p>Clients who have instituted something formal such as this generally have a very good handle on management and monitoring within their environment. Far too many clients do not have adequate monitoring (read visibility) in place to begin their BSM journey.</p>
<p>I&#8217;d strongly recommend a good hard look at how well the client&#8217;s monitoring and management practices are implemented and managed. Simply put, if they don&#8217;t have adequate visibility into how well those business services and applications are performing, you can&#8217;t expect to manage what you can&#8217;t “see” that may be impacting the business, clients, revenue, etc.</p>
<p>Just ask yourself this – can you explicitly state what monitoring is in place for a given business service or application? Can you quantify the impact of a simple event to a business service or application? Can you explain why something is red, yellow, purple or green and what causes it to change from one color to another? If you can’t, your BSM journey will be challenging.</p>
<p>Those with formal CMDB initiatives have their hands full with high risk, long time to value projects to just get a handle with traditional configuration management models. Taking these low level configuration items (CI&#8217;s) and establishing application and service dependencies comes after a lot of work getting through the organizational challenges of getting systems access to populate the CMDB.</p>
<p>I strongly recommend that the formal monitoring and management tools group create an authoritative database that enables them to establish end-to-end visibility into the service and application delivery chain and the impacts it has on the business, customer, etc. This ultimately becomes part of a more realistic federated CMDB within the business.</p>
<p><strong>ScienceLogic:</strong> Can you provide an example of a successful implementation of BSM? Were there specific factors that especially contributed to its success?</p>
<p><strong><em>Doug McClure:</em></strong> I&#8217;ve touched on the highlights of the most successful BSM implementations throughout my previous answers. Clients that have rallied around an organizational change or transformation focusing every team member’s efforts and energy towards ensuring that the business goals and objectives are being met through the delivery of highly available business services and applications.</p>
<p>Far too often the “change” never happens and it’s the “talking heads” that are preaching to the choir about what should be done. Every person on the front line, in the support teams, at the help desk, etc. must understand how they support or impact the business in business terms. Try putting this simple phrase after job titles “Hi, my name is Doug. I’m a Systems Administrator, Supporting the Business”.</p>
<p>That was a mouthful, but simply put, these clients have an impressively instrumented business and IT environment with the right amount of visibility into each area, joined together with an organization that thinks, operates and responds based on their understanding of the business goals and objectives and how these business services and applications enable business success.</p>
<p>The operational model for an organization fully adopting BSM identifies ways to establish a service management mentality across the entire business service and application delivery and support chain. The delivery, operations and support organizations must be incented to manage the services and applications being delivered with this end-to-end context.</p>
<p>A leading, outside the box “service management organization” may include the traditional IT silos but within a matrixed fashion focused on one or more key business services and applications. The &#8220;service management organization&#8221; is then incented to work together, as a team, for the end-to-end delivery and support of these services or applications.</p>
<p>It’s no longer one’s job to just be the systems administrator, database administrator or network engineer, their job is now to support specific business services and applications. They provide the subject matter expertise needed to support the services and applications together, as a team, eliminating the finger pointing or “not my problem” attitudes that exist in the majority of IT organizations today.</p>
<p>Overall, the KISS approach is what will enable BSM of any type (lite, heavy) to be the most successful. If it just feels natural, doesn&#8217;t take any additional effort, clicks or tasks to do then it&#8217;s going to work. BSM should be transparent and not just another buzz word. It&#8217;s not a form that gets filled out or a special process to follow in the run book. It&#8217;s doing the right thing for the business, no matter what the situation, crisis, buzz word or technology initiative of the day is.</p>
<p><strong><em>ScienceLogic:</em></strong> How did you get involved in BSM?</p>
<p><strong><em>Doug McClure:</em></strong> I think the foundations of my service management background and passion were initially established during my service in the US Navy. Today, I relate that experience to what I call BSM for the Military or Mission Services Management (MSM).</p>
<p>We had been taught over and over that extreme attention to the details of the mission at hand (aka &#8220;the business&#8221;) was the number one priority and that all of our technology, services, and applications existed for those Sailors and Marines on the other end (the &#8220;customer&#8221;). I can recall countless instances where mission critical communications services (telephony, orderwires, teletypes, command and control systems, etc.) were impacted in one way or another. It was extremely critical that we understood who was impacted and to what degree so that contingency plans could be activated. We weren’t just talking about lost revenue, poor sales or customer experience; we were talking about human lives and the security of the United States.</p>
<p>It is that military bearing, attention to detail and real world experience that drives me with many of my modern day BSM endeavors. That migration from &#8220;Mission Services Management&#8221; to BSM was honed working for over 10 years working in the Internet Service Provider (ISP) and datacenter, hosting and colocation business.</p>
<p>In those rapid growth businesses during the Internet boom, service differentiation was what &#8220;made you millions&#8221; or paved your way to bankruptcy. The companies I worked for had an extreme passion and focus on ensuring that their services, applications and Internet access products were of the highest quality, highly reliable and just plain better than the competition.</p>
<p>Again, the IT infrastructure, service quality and customer experience relationship was ingrained in all of our heads. It was all hands on deck when Webmail, Internet access, DNS, or the network experienced problems. We were measured in terms of how many customers experienced a busy signal or dropped connection or if you couldn’t log in fast enough to read your email. Companies like Keynote Systems and LionBridge/Veritest/Inverse tested the quality of our networks, services and applications and publicly ranked us against our competition. We thought in terms of customer experience and impact every minute of the day, 24&#215;7.</p>
<p>It was in my last job managing a traditional enterprise management and monitoring development group for a nationwide ISP where I was able to work with emerging technology to help get a handle on the complexities of these rapidly growing IT environments filled with emerging technologies and products. Applying this early technology to complex service problems in our environment proved to me that the technology, coupled with the right emphasis on how the technology was implemented and an emphasis on the people and processes within the organization could bring BSM to life.</p>
<p>Where I felt left out in the cold was with my vendor relationship. While their technology gave me the potential, they didn&#8217;t teach me how to work through the organizational and technological problems to successfully implement the BSM strategy. My very first end-to-end BSM pilot was extremely successful and provided visibility into the IT environment and business service impact that have never been available before.</p>
<p>And here I am today, working at a software vendor for the first time. Welcome to the &#8220;dark side&#8221; as they say. The approach and methodology we followed for BSM has become the basis of the core BSM Methodology that I teach IBMers and our clients around the world today.</p>
<p>My personal mission and drive here at IBM Tivoli is to ensure that BSM is something that the typical monitoring tools administrator can actually implement and that our BSM story is something that any of our clients can be successful with. The sales and marketing slicks must be backed up by something like this whomever you are these days. Clients shouldn&#8217;t put up for “marketecture”, me too and gee whiz buzz words.</p>
<p>BSM takes a partnership and commitment to every client&#8217;s success, and I want to be involved in those BSM efforts in every industry or market worldwide. We need more thought leaders collaborating together in an open and public forum to change legacy attitudes about BSM and do what we can to enable client’s to be as successful as they can be.</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Q%26amp%3BA+with+Doug+McClure%3A+What+Makes+BSM+Successful%3F&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fqa-with-doug-mcclure-what-makes-bsm-successful%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 15 Jul 2008 15:02:39 +0000</pubDate>
      <category domain="http://securityratty.com/tag/management">management</category>
      <category domain="http://securityratty.com/tag/service management database">service management database</category>
      <category domain="http://securityratty.com/tag/management tools">management tools</category>
      <category domain="http://securityratty.com/tag/service management mentality">service management mentality</category>
      <category domain="http://securityratty.com/tag/business service management">business service management</category>
      <category domain="http://securityratty.com/tag/business service">business service</category>
      <category domain="http://securityratty.com/tag/business service impact">business service impact</category>
      <category domain="http://securityratty.com/tag/mission services management">mission services management</category>
      <category domain="http://securityratty.com/tag/database">database</category>
      <source url="http://blog.sciencelogic.com/qa-with-doug-mcclure-what-makes-bsm-successful/07/2008">Q&amp;A with Doug McClure: What Makes BSM Successful?</source>
    </item>
    <item>
      <title><![CDATA[Links List 6.27.08]]></title>
      <link>http://securityratty.com/article/8d5a94cb377694fae8da52b080f88521</link>
      <guid>http://securityratty.com/article/8d5a94cb377694fae8da52b080f88521</guid>
      <description><![CDATA[Peanut butter and chocolate. Beavis and Butthead. Social networking and CMDB? Heres a great blog post on the recently released myCMDB from Managed Objects . The IT Skeptic is as funny as ever
We heard...]]></description>
      <content:encoded><![CDATA[<p>Peanut butter and chocolate. Beavis and Butthead. Social networking and CMDB? Here’s a great blog post on the recently released <a href="http://www.itskeptic.org/node/644" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.itskeptic.org');" target="_blank">myCMDB from Managed Objects</a>. The IT Skeptic is as funny as ever.
<p>We heard a lot about cloud computing at the Gartner show this week. You can read a bit about their take on it <a href="http://blog.sciencelogic.com/a-hot-cloudless-computing-day-in-florida/06/2008"  target="_blank">here</a>. While we’ve been musing on the different ways we monitor cloud computing resources, <a href="http://www.webware.com/8301-1_109-9975354-2.html" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.webware.com');" target="_blank">Hyperic is already announcing their solution to monitor Amazon’s cloud computing availability</a>. <a href="http://www.informationweek.com/news/hardware/utility_ondemand/showArticle.jhtml?articleID=208800360" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.informationweek.com');" target="_blank">Hyperic believes</a> that “making use of cloud resources would be more popular if the customers had an independent means to monitor cloud services.” They plan to offer the monitoring service to other cloud companies this year. However, <a href="http://www.johnmwillis.com/amazon/taking-the-hype-out-of-hyperics-new-cloudstatus/" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.johnmwillis.com');" target="_blank">John Willis questions the hype of Hyperic</a>.
<p>Here are some interesting <a href="http://networkinstruments.wordpress.com/2008/06/20/most-companies-fail-to-use-netflow/" onclick="javascript:pageTracker._trackPageview('/outbound/article/networkinstruments.wordpress.com');" target="_blank">NetFlow use stats</a> from our friends at Network Instruments. In a survey they did a few months ago, only 23% of respondents used NetFlow to monitor network performance; 60% didn’t use flow tech and 17% weren’t sure they had anything for it. I have to say we are asked at every Interop show we do if we support NetFlow so the numbers are slightly surprising but useful.
<p>Kuala Lumpur is bullish on <a href="http://www.bladewatch.com/2008/06/23/talking-about-sun-and-virtualization/" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.bladewatch.com');" target="_blank">Sun’s virtualization strategy</a>.
<p>Just like at the Gartner show, one of the tracks at the Burton Group’s conference this week is on virtualization. This post on the Data Center Strategies blog covers Day 1 with some interesting notes on <a href="http://dcsblog.burtongroup.com/data_center_strategies/2008/06/catalyst-day-1.html" onclick="javascript:pageTracker._trackPageview('/outbound/article/dcsblog.burtongroup.com');" target="_blank">where virtualization needs to go</a>, from clarity around software licensing and support to the use of raw storage (connecting VMs directly to LUNs) to improve VM performance, provide better integration with storage and data management solutions, and prevent vendor lock-in.</p>
<p><a href="http://sharethis.com/item?&wp=2.5.1&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Links+List+6.27.08&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Flinks-list-62708%2F06%2F2008" onclick="javascript:pageTracker._trackPageview('/outbound/article/sharethis.com');">ShareThis</a></p>]]></content:encoded>
      <pubDate>Fri, 27 Jun 2008 16:02:04 +0000</pubDate>
      <category domain="http://securityratty.com/tag/monitor cloud services">monitor cloud services</category>
      <category domain="http://securityratty.com/tag/monitor cloud">monitor cloud</category>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/cloud resources">cloud resources</category>
      <category domain="http://securityratty.com/tag/monitor amazons cloud">monitor amazons cloud</category>
      <category domain="http://securityratty.com/tag/cloud companies">cloud companies</category>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/support netflow">support netflow</category>
      <category domain="http://securityratty.com/tag/suns virtualization strategy">suns virtualization strategy</category>
      <source url="http://blog.sciencelogic.com/links-list-62708/06/2008">Links List 6.27.08</source>
    </item>
    <item>
      <title><![CDATA[Happy Birthday Toddler - - CMDB just turned 2]]></title>
      <link>http://securityratty.com/article/d384ca8556c22dee04d790d699bfb99c</link>
      <guid>http://securityratty.com/article/d384ca8556c22dee04d790d699bfb99c</guid>
      <description><![CDATA[I participated in a very interesting Gartner IT Operations Management symposium session titled Ensuring your CMDB Success: Ready, Set, Go
Research Director Patricia Adams and VP and Distinguished...]]></description>
      <content:encoded><![CDATA[<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/06/istock-000002119874small.jpg" ><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/06/istock-000002119874small-thumb.jpg" border="0" alt="iStock_000002119874Small" width="244" height="164" align="left" /></a> I participated in a very interesting Gartner IT Operations Management symposium session titled “<a href="http://agendabuilder.gartner.com/str24/WebPages/SessionDetail.aspx?EventSessionId=805" onclick="javascript:pageTracker._trackPageview('/outbound/article/agendabuilder.gartner.com');" target="_blank">Ensuring your CMDB Success: Ready, Set, Go!&#8221;</a></p>
<p><a href="http://agendabuilder.gartner.com/str24/WebPages/SessionList.aspx?Speaker=77" onclick="javascript:pageTracker._trackPageview('/outbound/article/agendabuilder.gartner.com');" target="_blank">Research Director Patricia Adams</a> and <a href="http://agendabuilder.gartner.com/str24/WebPages/SessionList.aspx?Speaker=208" onclick="javascript:pageTracker._trackPageview('/outbound/article/agendabuilder.gartner.com');" target="_blank">VP and Distinguished Analyst Ronnie Colville</a> presented this thought provoking session. It seemed to echo what ScienceLogic has been talking about regarding our thinking around the practical ways to <em>efficiently </em><a href="http://www.cioupdate.com/trends/article.php/3740731" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.cioupdate.com');" target="_blank">accomplish key tactical gains against your Configuration Management Data Base (CMDB) initiatives</a>.</p>
<p>They started out with, what are the prerequisites to a successful CMDB implementation?</p>
<p><strong>Garbage in = Garbage out</strong></p>
<p>There is no miracle occurring in all of these new fancy framework tools; these complex databases are only as good as the trusted source of information inserted. You have to put a bunch of elbow grease into figuring out what to actually put in the CMDB.</p>
<p><strong>So how do you define the metrics?</strong></p>
<p>First you need to know where you are starting from – you will need to baseline the environment. Then baseline what your state is 3, 6, and 12 months after installing CMDB.</p>
<p>Next: break metrics down to 2 strategic areas:</p>
<ol>
<li>Strategic
<ol>
<li>Operational Costs</li>
<li>Application performance</li>
<li>Compliance - internal auditors doing analysis – keep track of their findings and incorporate into your elements for data gathering</li>
</ol>
</li>
<li>Operational Metrics
<ol>
<li>Changes unplanned (typically 80% unplanned or emergency)</li>
<li>Changes withdrawn (how many changes were withdrawn / roll back)</li>
<li>Application downtime (what did it cost from app being down)</li>
<li>Server downtime (before and after)</li>
<li>Tickets generated (before and after)</li>
</ol>
</li>
</ol>
<p><a href="http://www.wearebsm.com/managed_objects/2008/06/ceo-impressions-cmdb-cult-or-c.html" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.wearebsm.com');" target="_blank">Having the data</a> to show how you are performing makes it much easier to show why you need more budget to improve performance in specific areas. Having metrics allows IT managers to do marketing back to the business units about the value you are delivering.</p>
<p>Gartner said that from their Enterprise customers they often hear “I haven’t quantified the value yet&#8221;&#8230;That is not the right answer.</p>
<p>During the session, Gartner did a real-time wireless poll of the audience with some interesting questions:</p>
<p>What are the tools to build and populate your CMDB with IT services?</p>
<p>Focus of CMDB?</p>
<ul>
<li>Inventory 20%</li>
<li>IT service relationships 68%</li>
<li>Other 6%</li>
<li>Don’t know 6%</li>
</ul>
<p>Interesting to note, a very consistent set of information from year to year polling which equals a mature understanding of the CMDB’s role for analysis and decision process.</p>
<p>Have you heard of <a href="http://www.wearebsm.com/managed_objects/2008/06/ceo-impressions-cmdb-cult-or-c.html" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.wearebsm.com');" target="_blank">ITIL V.2 &amp; V.3 and considered how it impacts this discussion</a>?</p>
<p>ITIL is a process framework, it is not a technology automation framework. Just because something is pink ITIL certified does not mean that it will help at all with the automation of the process framework.</p>
<p>Gartner quantified the market as being about 2 years old this month. So the point here is we are in early days of this technology. The way they see it, the Large Enterprise/Framework vendors selling you is like a lock-in, but the interesting thing about CMDB is that the tools that you need to integrate and federate were only recently acquired, so the entire framework vendor integration and alignment story is mostly incomplete.</p>
<p><strong>Gartner’s Evolution of the CMDB deployment</strong></p>
<p>On average it takes 12 – 18 months to get up and running.</p>
<p>Through 2011 enterprise should recognize that any of the CMDB tools bought today may require significant upgrades to offer near real time service views to support decision support analytics.</p>
<p>Several items from this presentation jump out at me:</p>
<ol>
<li>IT Organizations need to deploy tools that will help to automate the <em>continuous</em> collection of IT asset inventory, configuration and business impact analysis. That is a big gap that exists in the marketplace today… the speed at which information is collected and updated into the CMDB.</li>
<li>Investing too much into this immature market before the official standards are set and then adopted by the industry (estimated 18 months after final adoption) is quite risky.</li>
</ol>
<p>The conclusion that I made from this presentation is that you are better off with our 80 – 20 rule around CMDB’s. Use a tool that will collect 80% of what you need to operate the business in 20% of the time it takes to deploy these heavy, less than automated framework tools!</p>
<p><a href="http://sharethis.com/item?&wp=2.5.1&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Happy+Birthday+Toddler+-+-+CMDB+just+turned+2&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fhappy-birthday-toddler-cmdbs-just-turned%2F06%2F2008" onclick="javascript:pageTracker._trackPageview('/outbound/article/sharethis.com');">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 16:24:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cmdb">cmdb</category>
      <category domain="http://securityratty.com/tag/cmdb success">cmdb success</category>
      <category domain="http://securityratty.com/tag/cmdb tools">cmdb tools</category>
      <category domain="http://securityratty.com/tag/framework tools">framework tools</category>
      <category domain="http://securityratty.com/tag/fancy framework tools">fancy framework tools</category>
      <category domain="http://securityratty.com/tag/successful cmdb implementation">successful cmdb implementation</category>
      <category domain="http://securityratty.com/tag/deploy">deploy</category>
      <category domain="http://securityratty.com/tag/deploy tools">deploy tools</category>
      <category domain="http://securityratty.com/tag/tools">tools</category>
      <source url="http://blog.sciencelogic.com/happy-birthday-toddler-cmdbs-just-turned/06/2008">Happy Birthday Toddler - - CMDB just turned 2</source>
    </item>
    <item>
      <title><![CDATA[U.S. cyber readiness lagging, panel says]]></title>
      <link>http://securityratty.com/article/a3f50b6a3f2d28d930e81d1fdfa50f95</link>
      <guid>http://securityratty.com/article/a3f50b6a3f2d28d930e81d1fdfa50f95</guid>
      <description><![CDATA[Cybercriminals are becoming more sophisticated, more organized and more dangerous, according to security experts at this week's RSA show



Why a CMDB

Advertisement

IT best practices (ITIL) have...]]></description>
      <content:encoded><![CDATA[Cybercriminals are becoming more sophisticated, more organized and more dangerous, according to security experts at this week's RSA show.
			
			<div style="margin-top:20" />
			<table border="1" BORDERCOLOR="#0033CC" cellspacing="0" cellpadding="2">
				<tr valign="top" align="left">
					<td>
						<table border="0" cellspacing="3" cellpadding="2" width="100%">
			
			
		  
		<tr> 
		<tr>
      <td width="*">
				<font face="Arial,Helvetica,Geneva,Sans-serif,sans-serif" size="-1">
				<p>	
			
			<a href="http://rsslinks.industrybrains.com/click?sid=93&scid=10069&rqctid=589&lid=477839&cid=134623&pr=2&tstamp=20080409000000&url=http://www.belarc.com/try/ib.networldsec.enterprise.cgi" target=_blank><strong>Why a CMDB?</strong></a></p>
				<td align="right">
					<font face="Arial,Helvetica,Geneva,Sans-serif,sans-serif" COLOR="#0033CC" size="-1"><p>Advertisement</p></font>
				</td>
				</tr>
				<tr><td colspan="2"><font face="Arial,Helvetica,Geneva,Sans-serif,sans-serif" size="-1"><p>IT best practices (ITIL) have shown the benefits of a CMDB. Click for whitepapers.
			
				</p>
				</font>
		 	</td>
     </tr>
		 
		 
			
						</table>
					</td>
				</tr>
			</table>
			<div style="margin-top:20" />
			
			]]></content:encoded>
      <pubDate>Tue, 08 Apr 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security experts">security experts</category>
      <category domain="http://securityratty.com/tag/cmdb">cmdb</category>
      <category domain="http://securityratty.com/tag/whitepapers">whitepapers</category>
      <category domain="http://securityratty.com/tag/shown">shown</category>
      <category domain="http://securityratty.com/tag/advertisement">advertisement</category>
      <category domain="http://securityratty.com/tag/benefits">benefits</category>
      <category domain="http://securityratty.com/tag/itil">itil</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/dangerous">dangerous</category>
      <source url="http://www.networkworld.com/news/2008/040908-rsa-cyber-crime.html?fsrc=rss-security">U.S. cyber readiness lagging, panel says</source>
    </item>
  </channel>
</rss>
