Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS)

Adapting IT Governance
Frameworks to Ensure
Control and Visibility
of Free and Open
Source Software
(FOSS)
Dr Derek W. Keats
http://www.dkeats.com
http://kengasolutions.com
derek@dkeats.com
(Pty) Ltd

"The system by which the
current and future use of ICT
is directed and controlled. It
involves evaluating and
directing the plans for the use
of ICT to support the
organisation and monitoring
this use to achieve plans. It
includes the strategy and
policies for using ICT within
an organisation."
– Australian Standard for Corporate
Governance of Information and
Communication Technology (ICT)
IT Governance
Oversight & direction
Accountability
Effectiveness
& efficiency
Innovate or
not

Governance
Frameworks
FOSS
Policy
Formal frameworksFormal frameworks
COBITCOBIT
AS8015-2005AS8015-2005
ISO/IEC 38500:2008ISO/IEC 38500:2008
ITILITIL
CMMCMM
EcosystemEcosystem

FOSS
Policy
2007
Use
FOSS
Migrate
to FOSS
Develop
in FOSS
Use
FOSS
License
Promote
FOSS
Hardware
Knowledge content
Data APIs

Create a projectCreate a project
Join a projectJoin a project
Sponsor a projectSponsor a project
Adapt existingAdapt existing
Use existingUse existing
Maximum
value
for large
organisations
FOSS engagement

Ecological
Complex
system with
emergent
properties
Vision
People
Process
Technology
Finance

PeopleVision Process Technology
Clear
Socialised
Known
Discussed
On agendas
Strategy
Aligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
Skills
Commitment
Knowledge
Competencies
Connectedness
Emotional intelligence
Problem solving
Attitudes
Beliefs
Actions
Passion
Fears
Hidden agendas
'Politics'
Governance
Leadership
Management
Creation
Deployment
Operation
Support
Enhancement
Innovation
Project
management
Change
management
Communication
Application
Supporting
applications
Operating system
Hardware
Network
Internet
User devices
User operating
system
User applications
Align for successAlign for success
Start here Do these together
Underpinned by: appropriate and sustainable finance
(unless you are a start-up)
examples

A committee reporting to the highest level governance structure exists, and
FOSS features strongly on its agenda
ICT forms a standard component of the work of highest level governance
structure, it is taken seriously, and FOSS features strongly on its agenda
Independent ICT knowledge, with a deep understanding of FOSS, is available
within the highest level governance structure
The implementation of policy with respect to FOSS is audited and the audit
taken seriously
A strategy exists and serves as the basis for estimating value of
achievements with respect to FOSS in government
Regular reports with 'score sheets' received, measured against SMART
strategic goals
A formalised ICT enterprise governance framework (e.g. COBIT) is used
effectively
Accountable person for ICT across government as a whole who has FOSS as
a key performance indicator
To what extent do you have governance?
A
B
C
D
E
F
G
H

Maturity of selected governance
process in relation to FOSS policy
in the SA Government (adapted
from the approach used in the
COBIT 4.1 maturity model):
● 0 = non-existent
● 1 = ad hoc
● 2 = repeatable
● 3 = defined process
● 4 = managed and measured
● 5 = optimised

A committee reporting to the highest level governance structure exists,
and FOSS features strongly on its agenda
ICT forms a standard component of the work of highest level
governance structure, it is taken seriously, and FOSS features strongly
on its agenda
Independent ICT knowledge, with a deep understanding of FOSS, is
available within the highest level governance structure
The implementation of policy with respect to FOSS is audited and the
audit taken seriously
A strategy exists and serves as the basis for estimating value of
achievements with respect to FOSS in government
Regular reports with 'score sheets' received, measured against SMART
strategic goals
A formalised ICT enterprise governance framework (e.g. COBIT) is used
effectively , and includes FOSS as a key element
Accountable person for ICT across government as a whole who has
FOSS as a key performance indicator
A
B
C
D
E
F
G
H
2
1
1
0
0
0
0
0

A
B
C
D
E
F
G
H
0
5
Actual
Maximum
Target

`
Vision exists for FOSS in government and the country as a whole, and is
derived from or drives policy or legislation
Vision articulates well with other policies, visions and strategies that may exist
in various areas of government
Vision is clear and easy to understand, stakeholders can explain its meaning
and are able to defend it to detractors
Vision document, videos, and other media available to all stakeholders
Vision well socialised and known, on agendas, discussed, and informs
strategies and operational plans
There is widespread acceptance of responsibility for the vision in all areas of
government, not just those with a direct ICT responsibility
Vision focuses on the role of FOSS in helping government achieve its core
objectives
Vision draws attention to the need for excellence in administrative and
management systems to achieve operational excellence
To what extent do you have a vision?
A
B
C
D
E
F
G
H

Vision exists for FOSS in government and the country as a whole, and
is derived from or drives policy or legislation
Vision articulates well with other policies, visions and strategies that
may exist in various areas of government
Vision is clear and easy to understand, stakeholders can explain its
meaning and are able to defend it to detractors
Vision document, videos, and other media available to all stakeholders
Vision well socialised and known, on agendas, discussed, and informs
strategies and operational plans
There is widespread acceptance of responsibility for the vision in all
areas of government, not just those with a direct ICT responsibility
Vision focuses on the role of FOSS in helping government achieve its
core objectives
Vision draws attention to the potential for FOSS to help drive
excellence in administrative and management systems to achieve
operational excellence & delivery of services
A
B
C
D
E
F
G
H
2
1
1
0
0
0
0
0

A
B
C
D
E
F
G
H
0
5
Actual
Maximum
Target

Clear
Socialised
Known
Discussed
On agendas
Strategy
Aligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
Skills
Commitment
Knowledge
Competencies
Connectedness
Problem solving
Attitudes
Beliefs
Actions
Passion
Fears
Hidden agendas
'Politics'
Governance
Leadership
Management
Creation
Deployment
Operation
Support
Enhancement
Innovation
Project
management
Change
management
Communication
Application
Supporting
applications
Operating system
Hardware
Network
Internet
User devices
User operating
system
User applications
People Process Technology
examples
Strategy

A strategy for bringing FOSS to bear on government ICT and processes
exists
Strategy gives life to the vision statement
Strategy is derived from broader government strategy or embedded within it
Strategy is specific, measurable, aggressive, realistic and has time-bound
goals
There was active participation of stakeholders in strategy development
Strategy is known and socialised
Strategy is used for decision making
Strategy is owned by all IT leadership and other relevant leaders within
government
To what extent do you have a strategy?
A
B
C
D
E
F
G
H

A strategy for bringing FOSS to bear on government ICT and
processes exists
Strategy gives life to the vision statement
Strategy is derived from broader government strategy or embedded
within it
Strategy is specific, measurable, aggressive, realistic and has time-
bound goals
There was active participation of stakeholders in strategy development
Strategy is known and socialised
Strategy is used for decision making
Strategy is owned by all IT leadership and other relevant leaders within
government
A
B
C
D
E
F
G
H
2
1
2
0
0
0
1
0

A
B
C
D
E
F
G
H
0
5
Actual
Maximum
Target

strategy – a
co-created
plan of
action arising
out of a vision, with
aims, objectives and goals;
sometimes with an operational plan

aims – high level, conceptual things
to be done or achieved
The South African Government will
implement FOSS unless proprietary
software is demonstrated to be
significantly superior
FOSS

objectives – stated targets, the achievement of which
can be estimated through an aggregation of measurable
goals that collectively contribute to achieving an aim
Create project governance with government wide oversight
that ensures that projects implemented within all spheres of
government would have to justify the implementation or
development of proprietary software, and ensures that FOSS
client applications are not disadvantaged even where
proproprietary sofware is implemented
Create broad improvements to procurement so that
FOSS is recognised and favoured

goals – specific, observable and
measurable results that collectively
contribute to achieving an objective and
which are SMART in their formulation
S
M
A
R
T
Specific
Measurable
Aggressive
Realistic
Time-bound

Strategy
Aim
Aim
Aim
Objective
Objective
Objective
Objective
Objective
Objective
Goal
Goal
Goal
Goal
Goal
Vision

Aim
Objective
Goal
Goal
South African Government will migrate current proprietary software to FOSS
whenever comparable software exists
Migrate office software to FOSS throughout the South African Government,
starting within DPSA
By December, 2008, training and support will be available for Open Office
(LibreOffice) to enable office migration to proceed
By April 2009, the offices of the Minister and Directors General will be
migrated to Open Office (LibreOffice)
Goal
By March 2010, DPSA will be completely migrated to Open Office
(LibreOffice)
A trivial example

Governance
Frameworks
Governance
Vision
Strategy

Passion of individuals
Ad hoc
Path of least resistance
Fluctuating value
Win and lose cycle
FUD abundant
2007
2011
2013

Clear
Socialised
Known
Discussed
On agendas
Strategy
Aligned to
other visions
Aligned to
other strategies
Other strategies
aligned to
vision
Organization
Skills
Commitment
Knowledge
Competencies
Connectedness
Problem solving
Attitudes
Beliefs
Actions
Passion
Fears
Hidden agendas
'Politics'
Governance
Leadership
Management
Creation
Deployment
Operation
Support
Enhancement
Innovation
Project
management
Change
management
Communication
Application
Supporting
applications
Operating system
Hardware
Network
Internet
User devices
User operating
system
User applications
People Process Technology
examples

LeadershipLeadership
mattersmatters
TheThe
ecologicalecological
viewview

Derek Keats, PhD
derek@dkeats.com
+27 82 787 0169
www.dkeats.com
kengasolutions.com
Thank you

Derek Keats, PhD
derek@dkeats.com
+27 82 787 0169
www.dkeats.com
kengasolutions.com
Thank you
This presentation
was made
entirely using
Free Software
Creative Commons
Attribution License

Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS)

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (20)

Ähnlich wie Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS)

Ähnlich wie Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS) (20)

Mehr von Derek Keats

Mehr von Derek Keats (18)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Adapting IT Governance Frameworks to Ensure Control and Visibility of Free and Open Source Software (FOSS)