• Creating a Culture of Change Management

Creating a Culture of Change Management

The Greeks knew long ago that it is impossible to step into the same river twice. Fast-forward from ancient Greece to our technology-driven century, and change occurs so rapidly it is difficult to manage. Managing change is one of the most difficult challenges that IT organizations face, and to effectively support and facilitate enterprise business goals, IT must also continually change. Sometimes these changes are significant, as in upgrading a network. Some changes are almost imperceptible, occurring without fanfare as services evolve and underlying IT infrastructure is maintained.

Infrastructure Complexity Magnifies the Impact of Change
While planned, authorized changes have obvious benefits to systems or users, unknown and even imperceptible changes can result in serious negative impact to IT systems and processes. IT organizations are responsible for a complex structure of "systems of systems,"all of which must work together to deliver quality information and communication services. Each "service" requires a specific, integrated "stack" of systems-such as applications, databases, middleware, directory services, operating systems, and networks-in order to successfully deliver a set of functions or processes. The unique behavior and state of each system in a stack is determined by a multitude of elements, such as file systems and their attributes, configuration settings, users, and permissions. This complexity means that changes in the IT infrastructure can potentially affect every part of a business operation, posing various degrees of risk to the enterprise. For example, an unauthorized change to firewall settings can result in serious vulnerabilities that not only threaten data and disrupts revenue-generating services, but that can also imperil compliance with regulatory requirements.

Instilling Change Controls
Change must be controlled to mitigate the inherent risk to IT's compliance, service quality, and security posture. Indeed, national and local laws, as well as private contractual arrangements, demand that organizations deploy effective controls on their IT infrastructures. One form of control is developing change management processes. These processes are often based on best practices, such as the IT Infrastructure Library (ITIL), and supported by an array of system management techniques, tools, procedures, and policies that together help define the organization's change management process.

Having processes in place is not enough, however. Change management policies and controls must be systematically evaluated and enforced. If they are not, companies experience:

  • Control deficiencies that can result in poor audit findings, potential fines, and other disciplinary measures
  • Difficulty and higher costs to prepare for audits
  • Service outages, unplanned work, and delayed delivery of strategic projects resulting from unauthorized and undocumented changes
  • Increased risk and security vulnerabilities
  • A lack of assurance about system security and data integrity

 

 

Source : BlueLane
Published : 23/01/2007
Posted Date : 13/04/2009
Pages : 8

Sponsored Content

Sign In

Please sign in and you will have access to all the content available on CIO.in

Username


Password




Forgotten password?

One Time Registration Only !

Register now For your free CIO.in account and avail the following key benefits:
  • Never fill up any form to download whitepapers and case studies
  • Special invitations to CIO events
  • Be the first to get CIO reports & analysis
  • CIO special offers... and much more!

add comments

Sponsored case studies

Taking education to the next level

HP


In this era of profits winning over ethics and education becoming a burden, T. John Group of institutions (TJGI) has become synonymous with quality and affordable education. Working tirelessly since 1993, TJGI is making rapid strides in molding students into committed professionals and responsible citizens. Spread over an area of 25 acres, TJGI is offering courses in almost all the disciplines of Engineering, Nursing, Management, Biotechnology and Pharmacy. Understanding the needs of the global technical environment, this NAAC accredited institution has a campus which is completely wireless. A notebook is mandatory for all management students. With a vision of arming the Gen Next with the power of True Education.

Read more...

Sponsored By HP

MoreDirect Builds a Reliable, Scalable Storage Network, Gains $450,000 in Benefits with HP LeftHand P4000 SANs

HP

MoreDirect, owned by PC Connection (PCCC), is an IT solution provider offering corporate IT clients a flexible and unique solution to electronically source, evaluate, compare pricing, purchase and track IT hardware, software and related technology products in real-time. MoreDirect's proprietary software system, Traxx®, provides clients with a single access point for purchasing the latest technology, while offering visible cost savings and long-term valuable return on all IT investments.

Read more...

Sponsored By HP