Thursday, December 17, 2009

We have the smartest people in our company working on our IT, do we need help?

I come across many businesses where the best minds in the business are working on IT. This is great if you run an IT company but is probably reducing your billable hours or reducing your sales if you are not.

Take, for example, an engineering business I recently encountered. Basically, their computers were driving them mad. Their first question to me was: "How can we minimise the amount of time our engineers spend on IT issues?"

As an engineering business, this company's employees are highly technical. Because of this, management decided that their staff knew enough to, "look after IT themselves". So, the company bought some funky computers, some cool applications, and left their staff to their own devises. As the business grew, they "whacked in a server", and things were going pretty well.

Things started to go wrong when a few big projects were landed, and the company's growth hit a steep upward turn. Their ad hoc IT environment simply couldn't cope, and because the engineers were now busy delivering, there were no resources available to fix the many emerging IT problems.

Of course, an engineer with a project to work on is a valuable resource; where every hour spent resolving IT issues has a direct impact on the project work. If the project is delayed, it impacts that project and every one that comes after it.

All of a sudden, IT was no longer a fun thing to play with in their spare time, it was actually constraining the business' ability to grow.

The key to reducing the amount of time your staff spend on IT is to develop a continuous, pre-emptive approach.

First of all, have a look at your IT environment from a strategic perspective. Does your IT environment support your company's business strategy? Will future growth (as projected in your strategy) require changes to this IT environment? Do you know?

Once you've nutted this out, get your IT environment up to speed by implementing the technology required. I recommend getting a reasonable standard operating environment (SOE) in place, with standardised hardware and reliable systems.

At this point, you'll probably feel like you've conquered the IT monster. But don't leave it there.

The key to reducing the time spent on IT is to monitor and improve your IT environment on an ongoing basis. Don't leave it alone and wait for it to break in six months time. At that point, you'll have to start the whole process from scratch again. Monitor IT on an ongoing basis, and you'll be able to evolve it as your business grows. Prevention is always better than cure – so pre-empt problems before they occur.

Only then will you have a stable IT environment that lets your people do the work that makes you money, and allows your business to grow.

David Markus is the founder of Combo - the IT services company that ensures IT is never an impediment to growth.

Thursday, December 10, 2009

How can we protect our information from loss (or even theft)?

I come across many businesses that are confused about how best to protect their information. The bottom line is this – if you have data, there is a risk that you will lose it. And that loss may be catastrophic for your business.

First, let me define the multitude of risks out there, because we tend to overlook so many of them.

  • The biggest risk is hardware failure. If your hardware fails, you lose everything in an instant.
  • The simplest risk is the accidental deletion of files and folders by your staff.

Other risks include:

  • Virus corruption of files.
  • Physical theft of computers (even servers get stolen).
  • Web-based attack by script, or by direct attack.
  • Internal staff stealing or copying intellectual property, or maliciously deleting information (it does happen).
  • Corruption of files during use or transfer – even during the act of backup.
  • Overwriting of previous versions of files with new unwanted versions.

Clearly, with this range of threats, there are a wide variety of very technical solutions available.

It is important to first understand the value of your data, your obligations to your clients, the cost of not having data available, and the cost of a security breach to your business and your reputation. It is not possible to ignore security and be without risk. It is possible though to spend a fortune on the wrong solutions, and fail to mitigate the key risks.

So which security solution is right for your business?

Unfortunately, security is a double-edged sword. If you have no security, your risks are high – but your costs are low. If you have high security, your risk is reduced – but the cost is high.

Keep this in mind too – security implemented badly is a disruptive technology, so there is a high potential for your new security solution to impede your ability to do business. For example, connecting across the web to an open system is quick and efficient – but full of risk. Logging in via a security gateway with an encrypted connection and a security token is a little more time consuming, but considerably safer. But, if the token system is poorly implemented and doesn't work, it will either expose you to risk or impede your access.

Good security involves ongoing management of your technology resources, monitoring, patching and upgrading to ensure you get the right balance. Your backup strategy needs to create multiple versions of your data and move it off site. The more versions and the more often it goes off-site, the less you are likely to lose. If systems are monitored carefully, failures, intrusions and corruptions can be detected early to reduce impact of critical events.

Each time you limit access to a data folder or file, you add a level of security and a level of administration to ensure you are keeping the wrong people out and letting the right people in. As your business systems grow, the administrative overhead grows with it.

As you add firewalls, secure system logon, antivirus, backup systems, updates, patch management, archival and retrieval, remote access with secure tokens and more, the costs of implementing, managing and updating all of the systems grows. People like to believe that as the business grows, the cost of IT per person plateaus – but this only really applies once you have hundreds of staff.
So, how do you access the right level of protection without spending a fortune?

First, know your risks and understand the true cost of getting it wrong. Then, clearly the answer is not to spend a lot of time trialling a variety of disruptive solutions. Get good advice from people who implement these solutions all the time. Stick to tried and tested products that will scale to accommodate your business as it grows. And lastly – ensure that each system that goes in gets the appropriate level of ongoing management to ensure it provides the function it is supposed to.

After all, the only thing worse than not being protected is thinking that you are, and then discovering – after losing all your data – that you weren't.

Click here to read more IT Systems expert advice.

David Markus is the founder of Combo - the IT services company that ensures IT is never an impediment to growth.

Thursday, December 3, 2009

How can I minimise the time we spend on IT issues?

I come across so many businesses that spend an unbelievable amount of time managing IT issues; despite the fact that IT is not their core business.

Take, for example, an engineering business I recently encountered. Basically, their computers were driving them mad. Their first question to me was: ‘How can we minimise the amount of time our engineers spend on IT issues?'

As an engineering business, this company's employees are highly technical. Because of this, management decided that their staff knew enough to, "look after IT themselves". So, the company bought some funky computers, some cool applications, and left their staff to their own devises. As the business grew, they "whacked in a server", and things were going pretty well.

Things started to go wrong when a few big projects were landed, and the company's growth hit a steep upward turn. Their ad hoc IT environment simply couldn't cope, and because the engineers were now busy delivering, there were no resources available to fix the many emerging IT problems.

Of course, an engineer with a project to work on is a valuable resource; where every hour spent resolving IT issues has a direct impact on the project work. If the project is delayed, it impacts that project and every one that comes after it. Personally, I've never seen an engineering project plan that included two hours a day fixing flaky computers.

All of a sudden, IT was no longer a fun thing to play with in their spare time; it was actually constraining the business' ability to grow.

The key to reducing the amount of time your staff spend on IT is to develop a continuous, pre-emptive approach.

First of all, have a look at your IT environment from a strategic perspective. Does your IT environment support your company's business strategy? Will future growth (as projected in your strategy) require changes to this IT environment? Do you know?

Once you've nutted this out, get your IT environment up to speed by implementing the technology required. I recommend getting a reasonable standard operating environment (SOE) in place, with standardised hardware and reliable systems.

At this point, you'll probably feel like you've conquered the IT monster. But don't leave it there.

The key to reducing the time spent on IT is to monitor and improve your IT environment on an ongoing basis. Don't leave it alone and wait for it to break in six months time. At that point, you'll have to start the whole process from scratch again. Monitor IT on an ongoing basis, and you'll be able to evolve it as your business grows. Prevention is always better than cure - so preempt problems before they occur.

Only then will you have a stable IT environment that lets your people do the work that makes you money, and allows your business to grow.

David Markus is the founder of Combo - the IT services company that ensures IT is never an impediment to growth.