[Note: This is Part 2 of an ongoing conversation that I’m having with a former VP of IT of a national bank in Canada. We started talking about why ITIL initiatives have such a low rate of success, and I was truly amazed at the perspective she had to offer. Click here for Part 1.]
Michael Jagdeo:[In response to Cindy’s email] What I find interesting is that the core ITIL processes of Incident, Problem, and Change Management aren’t practiced very well at many organizations. Some organizations go through ITIL consultants in various forms and still don’t have these processes down.
In frustration, I wrote a blog on it, actually. http://www.bwyze.com/blog/implementing-incident-management-like-a-marketing-guru/. I’d love to hear your thoughts on where ITIL consultants/IT departments have missed the mark. What are they doing wrong?
Cindy Allingham –
Your blog, specifically the article on Implementing Incident Management, touched on an idea that I want to expand on, to answer your question: Why Doesn’t ITIL Work?
To begin with, keep in mind that ITIL is a library of process guidelines. Everyone knows there are no hard-and-fast rules about how to organize, or what jobs need to be done. Implementation of one process, such as Incident Management, can be relatively easily and cheaply done. And that’s where most organizations get into trouble. They view each process as a stand-alone function that can be built on existing functional foundations.
This is understandable, given that most organizations want to start small and simple, and that’s good. However, true process maturity will only happen with ALL the processes in place and integrated, and that is very difficult.
Take tools, for example. A good incident management reporting tool includes a database and an easy way of entering data uniformly, and it is pretty difficult to get IM going without it. Many organizations purchase and implement a tool for one process without thinking how they will furnish and integrate the other processes. Change Management, Problem Management, Release Management, Config Management, and almost all the other ITIL processes need to be linked by such a tool. To do that up front, however, is extremely costly and requires a lot of planning. Most organizations cannot justify that cost and effort all at once, so they start piecemeal.
Functional flow in the organization is critical, but is probably the most poorly understood area when putting in ITIL processes. However, if you get it wrong you will get situations like this: Incident Management and Help Desk analysts are viewed as incompetent, lazy and uneducated because they cannot seem to stop the rising tide of incidents. No matter what they seem to try, the numbers just keep going up. Project and development teams have no relationship with IM and HD, and just keep developing new great stuff, but the old stuff just never gets fixed. This is all blamed on the Service areas.
However, the development areas do not include impact assessments on their projects, to verify that the new products and services aren’t going to introduce new problems, and to make sure that the Service areas know how to fix the things that break. This is so common, many IT managers are aware of it, but getting it to change is tough. I suggest that, if the blame for rising incidents were placed on developers they would be quickly reduced, but most of the time development functions reject any involvement in service.
It may be, also, that consultants and vendors have encouraged organizations to place very high expectations on ITIL. Many think that, provided ITIL is “installed” properly, all the IT service problems will disappear. But remember, ITIL is merely a collection of process guidelines, so it is still necessary to choose appropriate tools, provide appropriate levels of resourcing, put the effort in to integrate all the processes, fine tune each process in accordance with your organization, and make sure the right groups are accountable.
Senior IT management should, perhaps, also consider whether they have given process owners the right level of authority. For instance, the Incident Manager is usually a first-line manager in the service-side of IT, but has no authority to stop or delay projects, reject new product implementations, or challenge strategic plans that might result in increased incidents. Unless they can do this, they really don’t have the authority they need to be accountable for Incident Management. A way needs to be found to have that in place.
ITIL material and consultants know all of this, and try to convince their customers to do it properly, but more often than not, IT senior management derails or truncates processes to fit the organization. Cutting costs, holding the line on staff numbers, and keeping authority centralized are usually on the agenda, but these are all counter to what ITIL needs to work. Organizations who find their ITIL processes aren’t delivering the value expected will need to get some expertise to re-assess, possibly streamline or re-implement, and shift the ownership and accountability for the key functions. Should you hear an IT exec insisting that they know ITIL well enough to do it themselves without outside help, you need to ask yourself again, Why Isn’t IT Working?
MJ is a Director at B Wyze Solutions.
Cindy Allingham (ITIL, PMP, CGEIT) is a Senior Consultant with over 25 years’ experience in all aspects of IT. With several years at the IT executive level, she has an extensive portfolio of experiences in the financial services and government sectors. She specializes in ITIL consulting, project management, and operations improvement. To reach her, please leave a message at 1.888.418.4230 ext. 222