Thursday, July 10, 2008

ITIL's Influence Extends Beyond IT Operations to Enhance SOA, Portfolio Management and Change Management

Transcript of BriefingsDirect podcast recorded at the Hewlett-Packard Software Universe Conference in Las Vegas, Nevada the week of June 16, 2008.

Listen to the podcast here. Sponsor: Hewlett-Packard.

Dana Gardner: Hi, this is Dana Gardner, principal analyst at Interarbor Solutions, and you’re listening to a special BriefingsDirect podcast recorded live at the Hewlett-Packard Software Universe Conference in Las Vegas. We are here in the week of June 16, 2008. This sponsored HP Software Universe live podcast is distributed by BriefingsDirect Network.

We now welcome to the show two folks who are dealing with the implementation of the Information Technology Infrastructure Library (ITIL) in enterprises. We are joined by Sean McClean. He is a principal at KatalystNow in Orlando, Florida. Welcome to the show, Sean.

Sean McClean: Hi. Thanks. Pleasure to be here.

Gardner: We are also joined by Hwee Ming Ng, she is a solution architect in the Consulting and Integration (C&I) unit in HP. Welcome to the show.

Hwee Ming Ng: Hi, glad to be here.

Gardner: We've been talking about ITIL quite a bit this week at the conference. For those who might not be familiar with it, why don't you give a quick overview one of what KatalystNow does and also perhaps a very brief primer on ITIL?

McClean: Okay, thank you. KatalystNow handles mentoring and learning and training solutions for ITIL and tools, principally in the HP Service Manager service support space. ITIL itself is a broad set of process concepts, much like many types of businesses. It's about the business of doing IT. It's a set of concepts focused on how do we frame and format the business of doing IT.

Gardner: And Hwee Ming, why don't you tell us a little bit about your role at HP?

Ng: I am a consultant with C&I and I focus primarily on delivering solutions at customer sites, and recently I've been working on updating the HP Reference Model to make sure it's in line with the recommendation in ITIL, version 3.

Gardner: First, let's give our listeners a little bit of history of ITIL. We've basically taken this from a technology-centric to a business-centric capability and focus, from version 2 to version 3. Can you tell us a little bit more about the progression and history of ITIL?

McClean: Sure, ITIL has kind of have an interesting level of development and actually it started out in England with the original organization, the Office of Government Commerce (OGC). In version one, what people started realizing was, whether you're talking about your faxes, your daisy-wheel printers, or your laptops of today, we still have infrastructure elements to support the business. At that point, they were simply focused -- let's make sure that we keep those fax machines or the copiers and the big computers running.

They started saying, "Well, maybe we need to get a process around how to keep them running in a way that's consistent with all of the other businesses." OGC did a great job of looking at the ongoing tasks. No matter what the organization, you do it the same way.

Gardner: The group that handles a lot of the government functions?

McClean: Yes, and essentially they were working with lots of organizations through contract who have IT, and in those engagements they started realizing more-and-more often, we're all doing the same stuff with the same equipment. So, why can't we standardize the processes?

Every other element of business has a set of rules and standards. Financial is the one we all go back to. Mostly, financial has been the same way since the abacus. We follow that set of processes, and we all agree on them.

Now, obviously, there have been some changes in that recently, but the ITIL process is the same kind of growth curve. Initially they were just going to handle the technology. Then, they started saying, "Well, the technology in an organization really supports the business." And then they started saying, "Let's take that a step a further and let's start strategically meeting the IT piece with the business. Instead of how to do the service, how do we do the service to support the business to get the job done?"

Gardner: I suppose in its history, IT sort of created an ongoing dissonance with business, because a lot of times products come out, technologies evolve, and they get adopted. Then you say, "How can we make the best use of this in the business?" It isn't always from, "Here are our business goals. Now let's go find the right processes and the right systems to support that." So, we've had it kind of backwards.

McClean: I think it's interesting how that's evolved, because I think there has been some of that. And some of it has been the case of technology is obviously complex, and so a lot of times the translation from "here is the business" to "here is the piece in the business" gets disconnected, because it becomes so involved.

If I could draw it on a map, we tend to look at knowledge evolving in pyramids. It becomes higher and higher, as you reach the apex of that area of knowledge. Maybe we're talking about biology or we're talking about IT. Even within IT, we move to the apex of networking, say, TCP/IP. You have to know all of those pieces.

By the time you get to the top of that, it's a little hard to keep track of what's going on on the other side of the world, which is the business of whatever we're doing. In the presentation we talked about today, I was saying we're in the business of selling.

A company I worked with was in the business of selling shoes. A guy used to walk around the organization, in the IT department specifically, and say, "What's your job?" If the person's answer was, "I do e-mail," they were out of the job, because the real answer is, "I do e-mail, that's supports communication between the organizations, so we can sell shoes." That piece gets disconnected over time, because it gets to higher and higher technology levels.

Gardner: I listened to your presentation earlier today and enjoyed it. One of the things that seems to be recurring theme was this notion of cultural change, and how there is a business culture and there is an IT culture, and ITIL is starting to move towards a sharing of culture or a common ground between these cultures. Why don't we get into a little bit about why and how cultures can shift, even as technologies perhaps stay the same?

Ng: With ITIL v3, there is a lot of emphasis in looking at IT as a strategic partner with business. Instead of having technology drive IT, we are really looking at what value IT delivers to the business. One of the main drivers that we see is the IT organization having to demonstrate the value that they are providing and justifying the investment in IT.

A good way to do that is to ensure that whatever the IT organization is doing aligns very closely with the overall business strategy. When you really look at ITIL v3, they start by managing the full lifecycle of service, managing it through the strategy piece of it, taking it through design, looking at the transitioning, the operation piece of it, and then having a process assuring continuous improvement to the service. So, we are looking at much broader view of the end-to-end lifecycle management of our service.

Gardner: And, when we talk about cultural change, are we talking about having the culture within the IT organization change? Are we talking about having the culture in business change towards IT or both?

Ng: I think it's a combination of both. The business would have to see that value add that is being provided by IT and that the technology that's being provided does drive a lot of the business outcomes. For example, in a bank, the technology or the infrastructure that is needed to support the bank is quite complex, and a new innovation in the IT department could generate a lot of new revenue streams. So, you want to make sure that there is that alignment between business and IT. The whole planning and strategy pieces need to come together. It's really a combination of both sides.

Gardner: Okay, we also heard you talking a little about services-oriented architecture (SOA). Now, that also requires cultural change. I have seen some studies, particularly Summit Strategies did a study, that showed the folks who had embarked upon ITIL methods and appreciate IT as a managed and matured business function were seemingly better off when it came to implementing SOA methodologies and concepts. Why do you think that's the case?

McClean: Hwee Ming and I just talked about this yesterday, and I want to have her opinion first, because I think it was one of those areas where she's got more of an understanding than I do.

Gardner: Okay, Hwee Ming?

Ng: When you talk about SOA or the infrastructure, you really need to view it not as individual IT components that you're working with or individual components that you're trying to piece together, but from the end user point of view. They want to view it as a service. So, that kind of mindset is quite important, if you are moving from an infrastructure-centric or technology-centric to a more open interface, providing value, and aligning that to a service, and that's why there is a lot of alignment in the two.

McClean: So, if you perceive IT as supporting a bunch of products, SOA may become a little bit more difficult, maybe it'll be a little bit counter-intuitive, but if you think of IT as delivering services, then SOA perhaps has a bit more continuity and alignment.

Ng: And, you also come down to the fact that when IT organization or the technical people are talking about interfacing with each other, they are no longer looking at it as point-to-point connection or an interface protocol level. They look at it as wrapping the technology in an open interface as a service, and they provide that to another organization in the same IT organization. So, it really does drive that.

McClean: In my mind, it's kind of interesting as well, because I think at this point, we transition to the idea of looking at IT as providing services. A moment ago, Hwee Ming talked about the idea that we're moving into that concept of IT providing the services. You can almost put it in the front and say that potentially now you create a technology service, which used to be simply to support the business.

Nowadays, if you look strategically, you can create new IT services that help drive the business. We're looking at, as Hwee Ming mentioned, interfaces for things that we are doing on the Web. So, we start architecting new things, which creates new business opportunities in the business of whatever you are in business of. And, you look at all the different interfaces to drive new business that wasn't there before.

Gardner: Okay, we talked about services, but there are still products out there and underneath there that allow a lot of this to take place. You brought HP Service Manager to market. I believe it's been updated this week. Can you tell us a little bit about how HP Service Manager fits into this progression and the shifts going on in IT?

Ng: With Service Manager, one of the big shifts is in closer alignment to the data processes, and we're also looking at some of the SOA piece of it to wrap service interfaces. So, one of the great pushes is to federate the model like a CMS or distributing a process. As IT organizations get more complex, maybe a change management process will not be in one single tool. So, you really look at Service Manager 7 as bringing together configuration management and project and portfolio management (PPM) and things like that.

So you really look at individual products providing the services, the Web-service interface that other products had leveraged. Previously, we were doing a lot of point-to-point integration at the application level or the data level. Now, we are trying to bring it up and integrate it through the other service level.

Gardner: How about you, Sean? Do you have anything to offer on the role of HP Service Manager, particularly the newest edition?

McClean: If you look at HP Service Manager, and also the processes -- as Hwee Ming being the senior architect of the reference model was starting to get to that point -- previously we would provide a tool and we would ask you, "Now what do you need?" and we would architect that tool.

Now we are really driving more and more towards an area where business are saying, "Look, we need to continue doing the business. We don't have time to tell you what we need. Why don't you do it the way you did it in whatever other organizations you gave us this product for?"

If you start combining the ITIL processes, and the more detailed level of ITIL processes you see in ITIL v3 with the Service Manger tool, you are starting to see people saying, "Okay, instead of one piece over here and one piece over here, let's integrate them, even if they are separate tools. Let's look at them and how do they fit into the larger picture of the processes of ITIL v3 and maturation process of that. And, let's make sure that Service Manger matches and aligns with that bigger picture so that the businesses don't have to go through all the detail of bit-by-bit designing something for themselves."

Gardner: In your presentation today here at the Software Universe conference, you said that subscriptions are key for supporting life cycle, what did you mean by that?

Ng: If you really look at it, to be able to manage your service efficiently you really need to know the service that you are offering is adding value to your business. One good way of measuring that is by being able to look at who is using the service and the demand for the service.

Having a subscription managed through the whole lifecycle of a service is key. When you are rolling out new services, subscribers actually subscribe to it, requesting changes to the subscriptions, and managing that all the way to the end of the service lifecycle. They cancel their subscription, when they no longer need the service due to changes in business environment or just changes in the role.

Gardner: I see. So, it's the business model that shifts how IT conceives of itself, and with subscriptions, where people can opt-in or opt-out, there is even a market force in effect. It's supply and demand, and if you're not offering the value that people think is commensurate with the subscription, then they cancel it. That really creates a whole new dynamic of response and refinement in IT.

Ng: It's actually quite a key communication of management of service from the IT point of view. It also helps in planning services. If you see a pick-up in the subscription, you could actually plan for expansion of the service, having the infrastructure and the capacity to support that. And, the reverse. If you see a service having not enough subscription, you might want to scale down the infrastructure that's behind that supporting it. The other aspect is in planning or budgeting -- which areas you should focus in, where you're seeing demand, and things like that.

Gardner: And, that's little different from a customer perspective, as well, instead of just having an application or a set of applications thrown at them, saying "Here, use it, you are going to get charged for it no matter what." That might even leave people with a little sour taste from the start, when it comes to IT.

McClean: I always find it interesting. IT has grown and matured. We always looked at the IT department as a black box. Someone wanders into the organization and says, "We need 'X' amount of dollars for a server that does this." And, you go, "Uh-oh. They are IT. I don't know what they do, but it must be important."

When you start move into this model, as Hwee Ming explained, where we are going through subscriptions, we're just trying to get to people being able to focus on, "Oh, they do work just like the rest of the business." And, that has to happen, because it helps the businesses embrace IT as well. Once everybody starts realizing it's an aspect of business, that makes more sense to everybody.

Gardner: It's a more natural relationship. This is how most people actually do business?

McClean: Yeah.

Gardner: You also mentioned that knowledge management (KM), in the context of ITIL, is important. I didn't know what you meant by KM. Are you talking about KM like we need to know who is good at what in our company, or we need to take both structured and unstructured content and data and make it available for people when they are doing research, or is this KM in the context of IT something else?

Ng: A quote we have been using quite often is that the focus on KM is really to be able to get the right content to the right people at the right time. This is what we are trying to do. We're trying to provide the information that is needed by the service desk to perform their work, or provide the information via Web to the end user, so that they can troubleshoot their own problem. It's about providing the right information to the right people.

Gardner: I see. So, it's the knowledge for more self-help, which takes the burden off the help desk, and then it's more knowledge in the right context to the help desk, so that they can better provide services to the people when they call in.

McClean: Yeah, I think it's interesting, because people will say "Well, we're in the information age." Then, you go forward with that and say, "Okay, if information were moving a little bit faster, then knowledge is becoming more of a commodity." What do you do with a commodity? You have to organize it and make it easily distributable, because you've got to get it to everybody that wants it.

Gardner: It's the information age, where I still can't get my VPN to work.

McClean: Right. So, we need to be able to put that in such a way in an organizational structure that you can get it as quickly as possible when you need it.

Gardner: Okay. I guess we should close up our discussion of ITIL, where we look at what's to come next? Obviously, there is a lot of adoption going on, different companies and regions and industries, and verticals adopting these things at different rates. We hear a lot about version 3 of ITIL, what should we expect with something around version 4 and when?

McClean: I think whether we are talking ancillary tools. In ITIL version 2, the thing that people constantly would drive back in training classes was, "Okay, this all makes sense to me." Some people would even say, "Well, this is common sense. So how do I do it? I get that it's important to do these certain aspects of a process, and it makes sense, but how."

Now, in ITIL version 3, we're saying, "Here's how we need to apply it more to the business." Now we're going to start seeing the design of those concepts and processes and alignment of those to the tools, so that when you look at a tool and you go to use this tool, you can quickly check here's how and here's why. We'll see that with the solutions like the blueprint and solutions like the Reference Model, where we're diving down into the ITIL process and getting more in depth. Other architects are looking at the tools and saying, "Here is where that tool connects to this process." So, the business can see those connections as well.

Gardner: Hwee Ming, where do you see the next advances in ITIL coming?

Ng: I see v3 is still relatively new in the adoption phase, and we are seeing a lot more customers wanting to go to ITIL and adopt v3. The next iteration, if we want to do it, will be driven from the field experience, collaboration, and leveraging the best practices that people see in the field. So, I see that as a more collaborative effort in the next revision.

Gardner: I see, so more toward how to manage the teams that you've already put in place that are more business-oriented and more process-oriented?

Ng: I think the next revision of ITIL probably would get a lot of content from consultants or the organization, looking at how ITIL v3 has been used in the organization and what are the best practices and improvements, and driving that back to the business model.

McClean: It's new to me, because that again drives you back to the business model where you say, "We have to figure out what our constituents want so we can continue to provide it to them." When you start researching, the business needs drive more of that.

Gardner: And, that makes sense, rather than "We'll figure out what you are supposed to do and tell you what to do. Maybe we'll have a discussion about it and come up with the best solution."

McClean: Right, and we'll take the information that you provide us in terms of the business and start applying it to what we do on our side to support that.

Gardner: Well great, we've been looking at ITIL through the lens of people who are in the field implementing it and some of the issues that customers for HP and KatalystNow are adjusting to ITIL and perhaps what they'll be doing with their future IT departments culturally and in terms of process.

Well, I want thank Sean McClean, he is a principal at KatalystNow. Thank you for joining and sharing your insights.

McClean: Thanks very much. It was a pleasure.

Gardner: We've also been talking with Hwee Ming Ng, a solution architect in the Consulting and Integration Group at HP in San Francisco. Thanks.

Ng: Thanks a lot. Glad to be here.

Gardner: This comes to you as a sponsored HP Software Universe live podcast recorded at the Venetian Resort in Las Vegas. Look for other podcast from this HP event at hp.com website, under "Software Universe Live Podcasts," as well as, through the BriefingsDirect Network. I would like to thank our producers on today’s show, Fred Bals and Kate Whalen, and also our sponsor Hewlett-Packard.

I'm Dana Gardner, principal analyst at Interarbor Solutions. Thanks for listening, and come back next time for more in-depth podcasts on enterprise software infrastructure and strategies. Bye for now.

Listen to the podcast. Sponsor: Hewlett-Packard.

Transcript of BriefingsDirect podcast recorded at the Hewlett-Packard Software Universe Conference, in Las Vegas, Nevada. Copyright Interarbor Solutions, LLC, 2005-2008. All rights reserved.

Tuesday, July 08, 2008

Dan Rueckert of HP Consulting Digs into ITIL's Role in Accelerating SOA, IT Service Management

Transcript of BriefingsDirect podcast recorded at the Hewlett-Packard Software Universe Conference in Las Vegas, Nevada the week of June 16, 2008.

Listen to the podcast here. Sponsor: Hewlett-Packard.

Dana Gardner: Hi, this is Dana Gardner, principal analyst at Interarbor Solutions, and you're listening to a special BriefingsDirect podcast recorded live at the Hewlett-Packard Software Universe Conference in Las Vegas. We are here in the week of June 16, 2008. This sponsored HP Software Universe Live podcast is distributed by BriefingsDirect Network.

We now welcome to the show, Dan Rueckert. He is the worldwide practice director for service management and security practices in HP's Consulting Integration Group. Welcome to the show, Dan.

Dan Rueckert: Thanks, Dana, it's good to be here.

Gardner: We're going to talk about the Information Technology Infrastructure Library (ITIL) version 3 and the methodologies used for managing the IT function. One thing that struck me as I have been reading about ITIL and how people are using it, is this notion of "what is IT?"

ITIL almost fundamentally rechecks that, and it begs the question of whether IT is a product or a service within an enterprise and to its constituents and users. How do you react that? What's your answer to that question?

Rueckert: It's really emerged now as a service, as far as how you provide services from an IT function to a business as a service provider. You start to get into internal, external, and shared services as a whole. The other thing is that a year later with v3, you are starting to break out of the data center. That's one of these key drivers of the service lifecycle, which is a key concept that has come out of ITIL v3. Also, the involvement of strategy is involved with the true operation side. So, you really start to look at how to align business with IT on an ongoing basis.

Gardner: For those of our listeners who might not be familiar with ITIL, why don’t you give us a quick overview of what it is and where the state of ITIL's evolution is?

Rueckert: ITIL is a standard best practices out of the Office of Government and Commerce (OGC) in the U.K., and has been around almost 20 years now. As of May 27, 2007, v3 was released, but it's one of these standards that has really been accepted from a customer user base globally.

It made lot of sense in the fact that it truly reflects best practices, from a customer perspective, in what has been going on over the years. Version 3 really is working with how the evolution of IT has gone. If you go to v2, it was very service centric around the data center, but v3 has now taken on the business alignment piece -- how does IT provide value to the business on an ongoing basis?

For me, it has been exciting in the fact that it's breaking down these barriers or silos across IT and within the businesses. We've have seen that a lot. Also, acceptance of v3 is far greater, because it has reached out from the traditional IT-centric view to the business.

Gardner: And so, a lot of IT organizations are siloed functionally and technologically, in many cases. If the end goal becomes customer satisfaction and being able to represent the business goals of the organization better through IT -- be it as a product or a service -- how does an organization start on this path of bringing these silos inside their organizations into more of a concerted effort toward a common services goal?

Rueckert: Actually, one of the new areas, as far as the v3 goes, is around service strategy. It's truly driven how to bring together and look at the business values or metrics that are needed in aligning from a service perspective.

It brings together the key metrics and values that need to come out of that, taking a customer through this service lifecycle from strategy to design, transition, operations, and a continuous service improvement cycle. In a lot of cases over the years, that's made sense. A lot of people worked with Deming and some other methodologies and have been getting into these lifecycles that now have been adopted, and it just makes good business sense. It isn't something that is to me IT centric, but it just makes good business sense.

And the neat thing about ITIL v3 is that it isn't just about IT. Business people could take up service strategy and use that in other ways in their business as a whole. It's truly one of the more exciting books coming out.

Gardner: I've also heard it said, when it comes to IT services, that these services have a lifecycle, and that organization should think of them in the context of a lifecycle. Software Universe relates to the notion of IT operation's lifecycle and data center modernization and transformation. It seems like an awful lot going on, a lot of moving parts. Do you need to do the data center first and then do ITIL, or you do ITIL and then the data center and other transformation? What's the right order, do you have any sense for this?

Rueckert: What started to happen within HP is using the processes or the ITIL as a foundation, meaning, as you start to grow, ITIL and service management become enablers for data center transformation, as a whole. You can take those components, and say, "I am working on core things around provisioning, or incident problem," start to build that around those areas, and grow from there.

Within our key initiatives, service management becomes an enabler for data center transformation, consolidation, and some virtualization. Also, the processes become a baseline to say, “How am I doing from the point of view of that business outcome?” If I know what I am doing today, and how I automate or virtualize things, I know I can measure that delta on an ongoing basis to provide value back to the business.

Gardner: Okay, we also spoke today with Ben Horowitz in the Business Technology Optimization group. How does the design develop requirement phase of IT relate to ITIL? Is ITIL more focused on operations, or how does application development, as a set of functions, fit in?

Rueckert: That really gets into the design and transition pieces now within design -- how requirements are accumulated by working with your customers or the business itself -- compiling those, understanding not just about pure business, but understanding other aspects of where I am going from needed scalability issues or strategy, and then getting into transition as I start to build and implement. What is the back end as far as acceptance and tests? So, it has an immediate applicability from an application perspective.

Gardner: The whole must be greater than sum of the parts.

Rueckert: Correct.

Gardner: I have also been seeing more information on how ITIL can help manage complexity, and, of course, there are many different types of complexity organizations are facing -- virtualization, services-oriented architecture (SOA), and so forth.

A recent study by Summit Strategies found that, for the folks they talked to, having done ITIL early and adopted some of the methodologies and approaches allowed them to then progress into SOA with more success. Tell us a little bit of what you think about SOA and ITIL, and whether ITIL approaches also might ameliorate other complexities?

Rueckert: It's a very good example, Dana. as you start to break down these into components and service lifecycles. When you talk about SOA and some of the aspects there, you are really saying, "How am I defining some type of service?" You start to say, "What are those foundation services that I need," and you start to build off of that.

It's just like concepts around configuration management services, or the configuration management database (CMDB) as far as that. You want to start wide and shallow to get a good feel, and then build into these areas that are pain points, as you move forward. You don't want to try to automate or design the world, really just align it with your business as a whole.

Gardner: How do companies and IT departments more specifically rationalize this from a business case? Are there financial paybacks? Are there qualitative paybacks? When an organization is evaluating ITIL, and they need to make a business case for it, what do you usually tell them?

Rueckert: We are really seeing maturity. The nice thing about going from v2 to v3 is that we have lot of historical basis now as far as the core IT skills and the building of ROI off of that. We are really expanding that into greater cost-benefit analysis upfront.

We don't just wait until the end to define the metrics of our values for success. It's really being done upfront, and saying, "Here is our vision and here are the metrics we are going measure as we move towards going into production on end state," and seeing those things as far as a continuous service improvement cycle.

Gardner: Are there any aspects to ITIL that reflect compliance or regulatory impacts? Are there certain verticals or companies that have to do this, in a sense, don't have a choice?

Rueckert: Right now we are seeing the alignment. When v3 came out, this was another exciting part where they really worked with some of the other standards. So, when we talk about the IC or ISO 20001 and 27001 around security, the COBIT, as far as a compliance perspective, they were working together.

They knew that these standards existed and started to incorporate those types of terminology. They hit key points by saying, "You need to be thinking about this as you're designing some of your services as a whole and understanding that moving forward." Then, as you get into more prescriptive methods, like with what we are doing around some of our processes, we are building these controls into defined best-practice processes within some of our reference models. So, it combines both.

Gardner: We've now seen lots of studies and evidence that 70 or 80 percent, certainly the lion's share, of spending on IT goes to maintaining existing systems, and investment and innovative new technologies don't always get the funding that many folks would want. Is there something about ITIL that helps shift that? Is part of it designed to make more efficient the processes that then would reduce the cost around maintenance and upkeep that might, in fact, provide more money for advancing technology?

Rueckert: That's a piece of the strategy, and you start to understand your demand and how you're allocating budgets and priorities against this. As I get more optimized or efficient on current day-to-day processes, and also as I combine technology to automate those, I am seeing the payback that then can fuel that innovation on an ongoing basis.

Gardner: We have seen some product announcements here at Software Universe, change management and problem resolution enhancements to products. Is there is something about those capabilities in the BTO group that dovetails well with ITIL from your perspective?

Rueckert: Definitely. It gets back to further automaton. In some cases -- those areas that might include labor-intensive activities or checks or compliance activities, further automation and audit trails -- efficiencies in the day-to-day operations allow other things to be done from an innovative perspective.

Gardner: Great. We have been discussing ITIL and how IT departments can better organize and manage themselves and provide IT as a set of services to their constituencies and their users inside of large enterprises. We have been speaking with Dan Rueckert, he is a worldwide practice director for service management and security practices, inside of HP's Consulting and Integration (C&I) group. Thanks for your time Dan.

Rueckert: Thank you, Dana.

Gardner: This comes to you as a sponsored HP Software Universe live podcast recorded at the Venetian Resort in Las Vegas. Look for other podcast from this HP event at hp.com website, under "Software Universe Live Podcasts," as well as, through the BriefingsDirect Network. I would like to thank our producers on today’s show, Fred Bals and Kate Whalen, and also our sponsor Hewlett-Packard.

I'm Dana Gardner, principal analyst at Interarbor Solutions. Thanks for listening, and come back next time for more in-depth podcasts on enterprise software infrastructure and strategies. Bye for now.

Listen to the podcast. Sponsor: Hewlett-Packard.

Transcript of BriefingsDirect podcast recorded live at the Hewlett-Packard Software Universe Conference in Las Vegas. Copyright Interarbor Solutions, LLC, 2005-2008. All rights reserved.

HP's BTO Chief Ben Horowitz on How Application Lifecycle Optimization Enhances Next Generation Data Centers

Transcript of BriefingsDirect podcast recorded at the Hewlett-Packard Software Universe Conference in Las Vegas, Nevada the week of June 16, 2008.

Listen to the podcast here. Sponsor: Hewlett-Packard.

Dana Gardner: Hi, this is Dana Gardner, principal analyst at Interarbor Solutions, and you're listening to a special BriefingsDirect podcast recorded live at the Hewlett-Packard Software Universe Conference in Las Vegas. We are here in the week of June 16, 2008. This sponsored HP Software Universe live podcast is distributed by BriefingsDirect Network.

Today, we welcome Ben Horowitz. He is the vice president and general manager of HP's Business Technology Optimization (BTO) software unit. Welcome to the show.

Ben Horowitz: Thanks very much, Dana, it's exciting to be here.

Gardner: I really enjoyed your presentation on the main stage this morning. As we are in Vegas, I thought you had a good stand-up comedian style. You had the audience in the palm of your hand.

Horowitz: Well, I appreciate that, but I'll try to leave the jokes on stage.

Gardner: Well, we try to make these podcasts entertaining too. One of the things that's a recurring theme here is, of course, data center transformation, helping enterprises move their data centers to a higher level of efficiency and also cut costs. Part of that equation requires that your applications are built well, too.

So, I want to talk a little bit about this whole notion of better practices and standard methodologies around good application development, testing, and deploying, more towards the lifecycle approach. One of the things that I have heard described from the BTO organization is this notion of application lifecycle optimization. I wonder if you could unpack that a little bit for us.

Horowitz: Sure, when you look at the history of applications, and Web applications in particular, originally it was great. There was this new way to develop the applications, it was much easier than the old way, and people developed a lot of applications quickly. Then, they put them out there, and the applications didn't work too well.

So, the first thing that companies went to tackle was testing, functional testing, and performance testing. Of course, HP owns the most famous product line in that space, the franchise that was Mercury, with our great quality center and performance center products, and those have been terrific.

We have heard from customers, as they have got more and more sophisticated, that what they'd really like to do is be able to map very, very precisely everything that they are doing with that application, from the point that they set the business priority.

So, there is something in the business that says, "We have to solve this problem. We have to provide the service, and therefore, we are going to create some functionality and build an application, test it, understand its performance characteristics, make sure it's secure, and then put it out in the environment. The question that we asked ourselves was, "How do you do that, and how do you make sure that you are aligned?"

Gardner: That raises this issue about boundaries. There have been boundaries between elements within application development, which application management techniques and products help fix, but there is a larger boundary between what happens on the application side and what happens on the operational side.

Now that we are in the era of service-oriented architecture (SOA) and virtualization, these boundaries no longer can stand. What is it that you are doing with your products and your announcements here at Software Universe that can help organizations overcome these inefficient boundaries?

Horowitz: First, we have done a great, new integration of our Project and Portfolio Management (PPM) software, which understands all of the business requirements and their priorities and the overall project status and project resourcing.

Then, we have taken that information and we have mapped it directly into quality center, into our requirements management module. So now, for every technical requirement that we go to test, we know exactly what the business driver for that was, and that becomes very, very powerful.

Then, those requirements feed in parallel into the quality organization, as well as into the development organization. By doing that, we support a much more agile project process where the quality guys are coming up to speed, on point with the developers.

And then, on the back end, we've then integrated our new Application Security Center, an offering that we acquired with SPI Dynamics, into Quality Center. So, in a single place you can test -- you can do functional testing, quality testing, as well security testing.

So, at the end of the cycle, you have a completely tested product where you have a total understanding of where you are, versus the business requirements, and in fact, we enable you to generate a contract with the business that declares an understanding of the level of quality that you have achieved at the point of release.

Gardner: So, ameliorating the boundaries means bringing more people in earlier in the process, but doing it in a way that doesn't create chaos, that is organized through a workflow. Everyone's ultimately on the same page, but early enough in the process, where you can have an impact on the overall application.

Horowitz: Right, exactly. What we were doing is saying, "All these things that used to be conversations that may or may not have happened, and were never recorded, now become a part of a very simple work flow that basically ensures that you have alignment from end to end. So whatever you wanted to build, that's what you actually end up building.

And, having everyone in the organization in the same page is it just tremendous -- not only a time saver, but also building the right thing in software development is probably the biggest thing that distinguishes good organizations from bad. The ones that solve the right problems are generally the ones who are successful.

Gardner: Another thing we are seeing in the market is the need for a lifecycle for applications that almost leave them in perpetual development mode. Increasingly with agile and with services, an application doesn't just go out into production and stay there for years at a time. How do the feedback loops work between requirements, deployment, and then refinement?

Horowitz: One of the great things that we have in the new integration that we have between PPM and Quality Center is that, when we go to manage the many, many incoming requests for changes (RFCs), we do that in the context of the business priorities.

So, by knowing and having right there all of the overall business priorities in conjunction with all of the change requests, and all the technical risk assessments, what is it going to cost us? How important is it to the business? And how many request we have on it all go into the picture. Then, we are able to quickly figure out, "Okay, here are the changes that we ought to make to the application that are low enough risk and high enough pay off, that we think they make sense."

Then, once we have developed that, and we are ready to release, we have tight integration with our operational software. So, all of the things that we know at the time that we tested that change go into operation. So if you know, "Gee, once we get a million users, this change is going to cause the application to break," that's known on the operational side, so that they can be proactive in managing the consequences.

Gardner: One of the announcements that you've made here at the event that caught my attention was the move towards a federated configuration management capability, that uses connectors and modules, and basically brings more information about the systems into a place where it can be viewed, I guess, moving towards greater visibility. Tell us a little bit about how greater visibility into what's going on within these systems ultimately helps with the total lifecycle benefits?

Horowitz: This is a very interesting and important question. There are lots of parts to the answer, but the first thing that people need to know about it is in HP Business Availability Center (BAC) we can tell you "Gee, this application is getting slow. Something about it is slow." And, that's good to know. But, the next thing that you might want to know is, "Did Opsware change anything in that application, that might have caused it to get slow?"

In order to answer that question, Opsware has to have the same view, i.e. have the same definition of what BAC thought was slow as BAC does. With the configuration management database (CMDB), that's the kind of thing that we are able to do. Similarly, if you want to open an incident on that application, the service manger has to have that same definition.

That's the kind of high-level problem that we are trying to solve. Now, the way that we have done it with a federated configuration management system is unique in the industry.

We have seen approaches from certain competitors for certain products, whose names will go unmentioned, who have come up with the idea that, "If we just had all of the data in the same place, then the customer could do whatever they wanted with it." That seems like a good idea, but it turns out to be quite a bad idea.

The reason is that all of the data and all of the products have been optimized over many, many years for performance -- tons and tons, hours and hours, and probably hundreds of man-years -- into making that data very easy to retrieve for the people who need to use it in that context.

What the competitors do is say, "Well, that performance optimization will be an exercise for our customers. They will have to figure how to make the data perform." That has proven to be pretty much an everlasting job. Gartner reports that only 4 percent of these CMDB implementations have succeeded, and that those 4 percent probably were not trying to do anything too ambitious.

With our federated approach, we say, “Let the data live where the data lives. Let the products do what they know how to do. Get the benefit of all that performance engineering that's been done over all the years." What we provide is essentially a map or a directory to all of the bits of information in a reconciled fashion about, for example, a server.

In our product line we have server information stored in Opsware, stored in BAC, stored in HP OpenView, stored in Service Manager, and the CMDB is able to get those data sets from all those locations and reconcile them, so that you have a single notion of that server.

Gardner: This strikes me as something that can open up even wider federation. Think about all the information for governance, for example, in a registry/repository. Think about the information that's available through service level agreement policy engines. We can maybe start to break down the boundaries at yet another abstraction, another level. Does that make sense?

Horowitz: Yes, definitely. What we really have is the "master join," for those who know relational databases, amongst all of the data and all of the products. Here is a way that's very high performance, where we have done a tremendous amount of work on making it really easy to integrate. That can be a central way to get all of the data about the various things -- everything from a service level agreement (SLA), to a server, to a network device, to an application -- that you have running in your environment. That's something that nobody has and everybody would like. So, it's great to able to ship that.

Gardner: Another announcement today was an alignment with VMware on some products. Tell us a little bit about first the market opportunity for the virtualization space and how management is an important element for people to actually attain the goals that they now fully understand with virtualization, and then how that relates back into our discussion about breaking down boundaries and finding more of the lifecycle benefit across development and design time into runtime in operations.

Horowitz: Virtualization is probably the most important mega trend in the data center right now. All the customers that we talk to are moving pretty aggressively towards a virtualized environment. That environment provides a ton of benefits, which is why everybody is going there, but it also creates a whole set of new challenges around management. Now, you've got another layer of abstraction. You've got another really complex piece of software to manage in the hypervisor, in that the software needs everything from patches to configuration changes and to upgrades.

You have to understand how all of that works together. By working with VMware, which really is the product leader in the space, we are able to bring all of the value of HP software to the virtualized environment.

So, it's great for the VMware customers, in that they get a real first-class management system that seamlessly moves across virtual and physical environments, and servers and network and storage. It's great for us, because it means that our customers, as they add VMware into their environment, have a solution that already works.

We think that everybody is going to be really excited about it. It's an R&D relationship, it's not a marketing relationship, so we think that we are going to get really good product results out of it, and it will be terrific for our customers.

Gardner: Well great. We really appreciate your time. We've had a conversation with Ben Horowitz, the vice president and general manager of HP's BTO software unit. You've had a busy schedule. I appreciate you taking some time.

This comes to you as a sponsored HP Software Universe live podcast recorded at the Venetian Resort in Las Vegas Nevada. Look for other podcast from this HP event at www.hp.com, under "Software Universe Live Podcasts," as well as, through the BriefingsDirect Network. I would like to thank our producers on today’s show, Fred Bals and Kate Whalen, and also our sponsor Hewlett-Packard.

I'm Dana Gardner, principal analyst at Interarbor Solutions. Thanks for listening. and come back next time for more in-depth podcasts on enterprise software infrastructure and strategies. Bye for now.

Listen to the podcast. Sponsor: Hewlett-Packard.

Transcript of BriefingsDirect podcast recorded at the Hewlett-Packard Software Universe Conference, in Las Vegas. Copyright Interarbor Solutions, LLC, 2005-2008. All rights reserved.