The middle management is a transformational change agent exhibiting industry expertise, business acumen, negotiation skills, empowerment skills, and strategic leadership, according to my post-doctoral TONES research. I present my ongoing observations to demonstrate my commitment to continuous learning. For more games, thought leadership, book, and KOL talks, please visit my site.
Search This Blog
Tuesday, September 12, 2023
Barista Language: Communication Lessons from Local Coffee Shop Visit
Monday, August 21, 2023
Risk Management: Birds' Eye View of some Standards and Regulations
- From my own understanding of the standards and their implementation in multiple industries, I feel some standards are universally applicable to multiple industries. I am calling these standards "core" standards. Such standards include ISO 9001 on Quality, ISO 27001 on Information Security, and ISO 14001 for Environment considerations.
- The core standards may not be sufficient for certain industries and "additional" standards are required to put in place guidelines and guardrails to support projects, programs, and portfolios to support the industry specific compliance to operate as a business to serve their targeted customers. For example, the ISO 28005 for giving electronic port clearance before a ship/cruise leaves the port. I call these standards as "additional" standards mandatory for that industry.
- Furthermore, some reference standards give clearer guidance for multiple industries to benefit from overarching principles. The exact choice of guidance applicable may vary from one industry to another and therefore serve as "supporting" the companies in those industries depending upon the specific products and services. The ISO 31000 gives the risk management fundamentals with many techniques but not all techniques (such as the Fault Tree Analysis may not apply in small enterprises focusing on IT software products) may extend to all the small, medium, and large enterprises. I call them "supporting" because they serve as an additional reference.
- The core and additional standards may act as a de jure standard (i.e., required legally). Some of the additional and supporting standards may act as a de facto (used as a default best practice guideline) standard.
- When I list "Multiple" in the "Industries" column, the appropriate standard can apply to any industry, such as the IT, Construction, Telecommunication, Transportation, Manufacturing, Healthcare, Agriculture, Aviation, Event Management, Food Safety, Banking, Financial Services, Investment, Insurance, Automotive, etc.
| Standard | Description | My Classification | Industries |
| ISO 9001 | Quality Management | Core | Multiple |
| ISO 27001 | Information Security | Core | Multiple |
| ISO 14001 | Environment | Core | Multiple |
| ISO 31000 | Risk Management | Core | Multiple |
| ISO 45001 | Occupational Health & Safety: Physical Risks | Supporting | Multiple |
| ISO 22301 | Business Continuity | Additional | IT Industry |
| ISO 20000 | IT Services | Additional | IT Industry |
| ISO 15288 | IT Engineering Services | Additional | IT Industry |
| ISO 45003 | Occupational Health & Safety: Psychosocial Risks | Additional | Engineering |
| ISO 28805 | Electronic Port Clearance | Additional | Shipping, Cruises |
| ISO 50001 | Energy Management Services | Additional | Energy |
| ISO 27701 | Privacy Extension | Additional | IT Industry |
| ISO 26000 | Social Responsibility | Supporting | Multiple |
| ISO 17025 | Testing and Calibration Laboratories | Additional | Healthcare |
| ISO 13485 | Medical Devices | Additional | Healthcare |
| ISO 22000 | Food & Safety Management | Additional | Restaurant and Food Safety |
| ISO 37001 | Anti-bribery Management Services | Supporting | FinTech |
| ISO 20022 | Electronic Data Interchange | Supporting | FinTech |
| ISO 20121 | Sustainable Events | Supporting | Event Management |
| ISO 14971 | Risk Management for Medical Devices | Supporting | Healthcare |
| ISO 15854 | Aircraft Equipment | Additional | Aviation |
| ISO 17944 | Banking Security | Additional | Banking |
| ISO 12812 | Mobile Financial Services | Additional | Banking |
| ISO 15782 | Certificate Management | Additional | Investment Services |
| ISO 17989 | Agriculture Tractors and Machinery | Additional | Agriculture |
| ISO 22002 | Food Safety & Farming | Additional | Agriculture & Farming |
| ISO 22005 | Traceability in the Feed and Food Chains | Additional | Agriculture & Animal Safety |
- CMMC – DoD’s Cybersecurity Maturity Model Certification (CMMC) is a standard proving risk management structured designed to ensure defense contractors are complying with the current security requirements while dealing with public information
- NIST CSF – National Institute for Standards and Technology (NIST) has many standards and is frequently known for the NIST Cyber security framework (CSF), which is a risk driven quality management standard for private firms to improve their processes and products while focusing mainly on maturity of security related processes
- CMMI – It is a Software Engineering Institute’s (SEI) structural quality guidance, called Capability Maturity Model Integration (CMMI) with multiple levels, targeted at the processes and products. Its focus is not only on security but also on overall organizational processes and policies.
- SOC2 – Has a series of audit controls from the American Institute of Certified Public Accountants (AICPA) on a company’s system and organization controls (SOC) as part of their internal risk assessment and treatment plans. SOC1 controls are mainly on financial controls while SOC2 controls are on CIA triad as well as security and privacy controls.
- FedRAMP – It is a US based Federal Risk and Authorization Management Program (FedRAMP) focusing on standardized approach to security assessment, authorization and continuous monitoring for cloud related products and services.
- FIPA is an IEEE Computer Society standard for Physical Agents and similar agent-based technology interoperability.
- COBIT represents a set of control objectives for information technology from an international association on computerized security governance (ISACA) and is prevalent in many industries.
- ITIL (Information Technology Infrastructure Library) represents a collection of service delivery guidelines as a library for the entire lifecycle of any IT services within a company.
- PCI DSS is a set of data security standards (DSS) for the payment card industry (PCI) to address vulnerabilities for point of sale (POS) devices, mobile devices and computers, wireless hotspots, web shopping applications, and transmission of data.
- Six Sigma is a framework of qualitative and quantitative tools and techniques to aid quality from an operational excellence perspective feeding prescriptive and predictive data analysis.
- DICOM represents a set of digital communication (DICOM) standards for the level of encryption required for data transmission and storage for PACS (picture archiving and communication systems) systems used for medical diagnostic images.
- PMBOK is a collection of business processes governing the management of projects, programs, and portfolios from the Project Management Institute for unique delivery of products, services, and results in any industry or organization.
- PRINCE2 is a collection of business processes governing the management of projects, programs, and portfolios, originally started by the UK government and owned currently by Axelos focusing on projects in a controlled environment.
- HIPAA - Health Insurance Portability and Accountability Act to protect patient health information
- SOX - Sarbanes Oxley Act responsible for internal and disclosure controls
- GDPR - General Data Protection Regulation from European Union governing the privacy rights of individuals
- CCPA - California Consumer Protection Act governing the privacy rights of individuals
- TCPA - Telephone Consumer Protection Act amended to protect individuals against unsolicited text message, robot calling, do not call registry violations, etc.
- COPA - Children's Online Protection Act governing the rights and responsibilities for protecting children from abuse and cybercrimes
- PDMA - Prescription Drug Marketing Act governing the responsibilities for fair balance, efficacy, indicated use, black box warning, and adverse event consideration
- GAMP - General Automation Manufacturing Protocol in healthcare and allied industries governing the entire GxP (General Lab Practices, General Manufacturing Practices, etc.)
- CSA - Computer System Assurance related practices governing the design, development and testing of requirements (regardless of project delivery frameworks
- ASPICE - Automotive Software Process Improvement and Capability Determination to govern the detailed processes related to the original equipment manufacturers (OEM) whose products are included in the vehicles including but not limited to self-driving autonomous vehicles
Saturday, July 8, 2023
Parenting Lessons: Managing for Happiness while focusing on Relevance
I had a friend visiting my family. With a smaller child who was requiring some attention for food and later for occupying time, both my friend and I were readjusting to ensure that the child stayed happy. After the child had its food, we were showing the limited toys I had or the TV shows the child saw. The friend ensured that both the toys or the shows were relevant and age appropriate. After my friend left, I was thinking about how parents had that innate thought process of managing for happiness while delivering playful things with meaning! We understand that people learn when they are happy. That learning is channeled for relevance for value. But how much do we practice this "Managing for happiness while focusing on relevance" in managing ourselves, our team, our products, etc.?
If experience had taught me one thing, then, that is that we don't see things as they are, but we see things as we are. We put our own lens through which we see everything! This is the reason why people with scientific facts and evidence claim there is global warming and then others refute it because of extreme cold and snow in unpredictable places! The truth does not lie but we see the portion of the truth and not the entire truth! Good managers and great leaders see beyond abstraction and see where things could be! Whether it is people for skills and competency improvement or processes for experimentation and continuous improvement, nothing gets accomplished when people collectively don't collaborate and challenge themselves to share the need to be a part of something bigger than themselves.
When a child is happy the learning occurs. The parent does not give everything the child wants but drives the focus for relevance. Somewhere along our professional journey, people become complacent with the status quo. This could be due to other life priorities or unwillingness to commit to learning! If learning stops, growth stops! If we want to grow, learning should continue! So, why are we limiting ourselves to what we can learn in the early childhood days but fail to continue that childhood like curiosity continuously in personal and professional lives?
As I thought through this process, I thought that product management and project management as part of program and portfolio management should also look at people and process in a different light! "Manage people for happiness and focus processes for meaning" is my thought. If we ensure people are happy and the processes are meaningful (avoiding mura, muri, and muda), then, people will self-organize, challenge the status quo, and demonstrate leadership. If people are unhappy and processes are bureaucratic or confusing, people get demotivated, settle for mediocrity, and withdraw! Yes, there are many motivation theories (Maslow's Hierarchy, Hertzberg 2-Factor theory, McClelland Theory of Needs, Vroom's expectancy theory, McGregor's Theory of X & Y, Ouchi's Theory of Z) and each has a solid base on multiple fields with their proven track record.
| Suggested Step | Brief Explanation |
| Build for Happiness |
|
| Manage for Innovation |
|
| Accelerate for Learning |
|
| Experiment for Customer |
|
| Play for Success |
|
| Nurture for Growth |
|
Sunday, June 11, 2023
Does Agile Mandate CICD? Lessons from ADO West 2023
I was presenting at the Agile DevOps West in 2023 on business agility. Twice during this conference, I heard people say another presentation where they heard people say that continuous-integration and continuous-delivery (CICD) is required as part of the DevOps and teams are not practicing agility without implementing the CICD. I feel that these are clear misinterpretations of how Agile is still misconstrued and how the principles of Agile and DevOps frameworks are viewed improperly from the technical lens of CICD.
First, Agile is about self-organized team empowered culture adapting to change, experimenting with innovation, failing forward, and focusing on value maximization. When Takeuchi and Nonako (1986) first laid the foundation for Scrum, much before the Agile Manifesto was ever written, their focus of new product development was not isolated to IT industry or software development. However, one of the biggest issues with Agile is that all the 17 contributors were men and came from IT industry representing very little diversity. Their myopic thinking and ignorance can therefore be felt in three areas when they limited Agile to Software.
- Opening the Manifesto with "We are uncovering better ways of developing software by doing it and helping others do it."
- Including a statement, "Working Software over Comprehensive Documentation" in the Agile Manifesto.
- Including the principle, "Working software is the only measure of progress" as part of the 12 principles.
- Including the principle, "Deliver working software frequently from a couple of weeks to a couple of months, with a preference to the shorter timescale" as part of the 12 principles.
In my webinars and training, I question these statements. If you replace the word, "software" with "workware" (a term I coined indicating that workware could be software, hardware, firmware, healthcare, Construction contracts, FinTech processes eliminating overhead and waste), the statements do work fine to represent agility. These are the reasons why agility can be applied to individual career management and at home, religious places, and other industries where software is not part of their work at all. While it applies well in software development, it is not limited to software development. In fact, I have applied principles of agility outside of software development in a Theatrical context (Rajagopalan, 2013) and have practiced it at home.
Now, let us look at CICD. As part of the V-Model, any solution developed goes through various stakeholders that shape the solution. Clear and concise representation of the requirements by the business analyst, design of the overarching architecture by system analyst and system engineer, the development of the solution by the engineer. Testing therefore is checking at multiple levels to check for solution developed and system designed against the requirements requiring multiple levels of testing itself. The idea is to minimize waste by progressively testing every increment to the solution and ensure that the increment is a good candidate for deployment. Here is where a few principles must be kept in mind.
Continuous Integration (CI) is required to ensure that every solution increment is integrated and regressed with already working and previously released functionality. This aspect is the first area of CI to ensure the new code has required boundary checking (no uninitialized variables, no memory leak, all code paths are covered) in addition to running automated test cases confirming all previous functionality so that the automation tests can run on the changes.
Not all new code can be deployed to a production environment from CI functionality. Many reasons, such as multiple staged environment (like test, staging, pre-production, and production) may be required before additional tests like penetration testing and load testing may be mandated. Some industries may require a special group to handle validation as a separate activity outside of quality control, such as in healthcare and life sciences, for performance qualification (PQ handled frequently by the QC team), Operational Qualification (OQ) and Installation Qualification (IQ) that may be handled by a validation team and/or installation team appropriately. Therefore, CD may also mean continuous delivery to other environments in a linear pipeline. So, Continuous Delivery precedes Continuous Deployment.
Furthermore, even if the continuous delivery succeeds in all the environments or the validation (OQ, IQ, for instance), the new increments can't be released. In some organizations, such as in pharmaceutical companies, new increments cannot be released to production until approval to distribute (ATD) is provided from the OPDP (Office of Prescription Drug Promotion) after medical, legal, and regulatory review and approval. Any functionality released to production prior to this ATD (sometimes called AFD - Approval For Dissemination) is considered a violation of OPDP protocols.
Alternatively, it is possible that multiple teams are working together. So, it is possible that an additional level of release level testing of all the functionality consolidated from each team's outcomes will have to be assessed. These are called single cadence release at the release level (containing multiple iterations from multiple teams).
When you factor all these thoughts of why CI is required and the various instances of CD (continuous delivery and continuous deployment), the CICD itself is focused on the continuous improvement (which is also abbreviated sometimes as CI) of software development life cycle processes. So, CICD is supporting agility, but agility does not require CICD at all as agility is not restricted to software development in the IT industry.
Now, let us extend the discussion to DevOps. The fundamental principle behind DevOps is also a team-based culture focused on collaboration, data-based decision-making, customer-centric decision-making, constant improvement, responsibility throughout the lifecycle, automation, and treating failure as a learning opportunity (Roddewig, 2021). The DevOps institute (n.d) itself proclaims in their CALMS (culture, automation, lean, measurement, sharing) these principles outlining DevOps as a team-oriented culture enabling framework. While CICD is part of DevOps infinity cycle to have the delivery team and the infrastructure team to collaborate on their collective accountability, CICD is only one part of the DevOps framework.
When all these ideas are integrated together, let us tell the right story. Just because a team does not use CICD or deploy increments to production frequently and directly after successful CI, it does not mean the team is less agile. Agile and DevOps serve as two book ends including Continuous Integration, Continuous Delivery, and Continuous Deployment. All elements of CICD support Agile and DevOps but Agile itself does not mandate CICD.
References
DevOps Foundation Blueprint (n.d.). DevOps Institute. https://www.devopsinstitute.com/certifications/devops-foundation/
Rajagopalan, S. (2013). Agility outside of Software Development: A case study from Theatrical Play. https://agilesriram.blogspot.com/2013/05/agility-outside-of-software-development.html
Roddewig, S. (2021). 7 Principles of DevOps for Successful Development Teams. https://blog.hubspot.com/website/devops-principles
Takeuchi, H. & Nonaki, I. (1986, January). The New New Product Development Game. Harvard Business Review, 64(1), 137-146.
Friday, May 12, 2023
Ingredients of a Growth Mindset: Connecting with Movies
I was watching a few movie clips to pass the time after a long week. And I watched the Harry Potter and Sorcerer stone clip on how Harry Potter was chasing one of the flying keys among many other masquerading keys. I had an idea at that point about having not one key but many keys that must work together to unlock the door of "Growth Mindset." In Lean framework, we categorize the growth mindset as the ability to learn about anything required by learning from failure, growing from challenges, and focusing attitude and efforts towards continuous growth.
Inspired by this movie clip, I thought of various attributes of a growth mindset. In a fun way, I brainstormed with my sons on what growth meant to them in their school and career. I discussed some of my ideas with my wife and children. Interestingly and unknown to me, I came up with eight different attributes that seemed to follow a pattern that were alphabetically sequenced. Now, I engaged with some creative fun to model these attributes as a key pointing towards the center (if the key looked like a carrot or radish, that demonstrates my creative ability 🤣) I added five concentric circles. Think of them as the Likert-5 scale with 1 at the outer ring and 5 being at the inner ring. The idea is that all the keys must be locked in simultaneously towards the inner core for growth to completely materialize.
Attitude is having that "Power of Now" contagious enthusiasm. I am not saying it is being always optimistic but being a realist to "practice the choice to see the brighter side of things" while "mitigating the risks or blind spots" (After all, isn't that what the Johari Window talks about without mentioning the word "Risk!"). As you can see, one's attitude is a function of their ability to recognize that failure is a steppingstone to success. It is like that "Moana" who chooses to fight!
Balance is having the emotional stability to "continuously play both yin and yang to be the best one can be." That is, have the delicate physical, mental, emotional, and spiritual state of mind. It is a demonstration of your practice of choosing the right attitude every day. True that life gets in our way and no plans work out as planned. Balance is recognizing this inner need! It is like that Po in Kung Fu Panda managing to find "inner peace" or "Aladdin" figuring a way out calmly when Jaffar locks him in a cave. Robert Schuller calls it, "Tough times never last but tough people do!"
Commitment is "following up and following through with actions to deliver results." (Please follow my blog on what follow-through is and how it differs from follow-up) It is laying the foundation with training, having mentors and coaches, facilitating and practicing walking the talk. Commitment derives from attitude and balance. Commitment shows character as we put SMART plans to grow and be an example for others. Woody in Toy's story demonstrates commitments towards his other team toys even when the going gets tough. At the same time, Woody demonstrates the right attitude when necessary (when other toys need help) and demonstrates the balance to keep Lightyear in check on his mission.
Divergent is having that "open mindset towards alternative thinking" (T, Pi, V, E/M shaped skill development). Concepts like design thinking and system thinking require one to have a big picture mindset. Our ability to grow will be limited if we are comfortable with what our strengths are. The longer we practice this "comfort zone" approach, the sooner our strengths will become our weakness and threat reducing or removing the opportunities. Be comfortable with discomfort and that is the only way to guarantee success. I always say that the best way to guarantee my stability is how I eliminate myself by leaving behind a legacy while seeking new ways to serve. Edna from Mr. Incredible exemplifies creating suites that best meet the super character's needs with divergent thinking applying multiple experiments.
Empathy is showing that we care! Empathy is demonstrating our commitment (action) towards causes that matter as well as people that matter! It is the "Pay it Forward" (which is a movie by itself) mindset that demonstrate not only divergent mindset towards people. Who else but Cinderella can demonstrates such kindness and empathy with actions to support all the animal friends! She is the perfect example of Empathy! Rafiki in Lion King must demonstrate that empathy and seek Simba out! Everyone needs to empathetically look out for others. Don't show sympathy as part of post-mortem but demonstrate empathy as part of ongoing lessons learned!
Focus is letting "distractions not impede commitment to actions!" Learning from mistakes and applying fail-forward thinking taking responsibility for actions are traits of focus. Not multitasking but getting jobs done even when risks and challenges throw a wrench! Po demonstrates continuous learning from every failure (although he needs his team to keep his balance) and Master Shifu learns from his mistakes that his teaching has to be modified to teach Po.
Global thinking is thinking beyond the local constraints and limitations. It is looking at the macroscopic impact ethically and morally rather than conventional limitations. It requires one to rise above the constraint with "divergent" thinking. While a "selfless" attitude brings a combination of "empathy" and "focus," the resulting commitment also requires one to "balance" themselves in their honest pursuit of results. Mulan may have left as an impostor to save her father from the King's orders, but the pursuit was due to a need to serve the entire country. She never gave up even when her identity was revealed. That's a commitment to global thinking.
Honesty is a commitment to character, integrity, and ethics. "You are your own benchmark, right!" Even when you do something wrong, it takes courage to stand up for your failure or lack of actions. Only then anyone can help you heal so that you don't feel continuously hurt. If Simba was honest about why he thought he was a failure from the stampede fiasco with Rafiki, would Rafiki have been successful? No. It is that commitment to character that stands tall as honesty. Maui and Moana had to be honest with each other reconciling their fear and goals before they could emerge victorious as a team.
As you can see, each attribute feeds on each other. If Kaizen or Continuous Improvement is important, all these elements are required! I am not talking about continual activities which are events that happen repeatedly which are transactional. I am talking about continuous where we can review, reflect, and do things differently. That is the seeds of Kaizen! But not all of us may be at the level we need to be to lock into the inner core and regain our strengths and unlock opportunities. Whether it is a personal ambition or professional goal, all these elements should be at their maximum before they can be near the field-force of the inner core and bring the ikigai (the reason for existence or the famous questions like "what makes you happy?" or "what makes your heart sing?") to you!
What do you think? This was a fun exercise for me! Look forward to your thoughts on what other attributes I may have missed and how it may be unique and different from any of the eight attributes. I am all ears!
Disclaimer: All the characters in the movies are referenced only to make connections with the principles. The movies and the character names belong to their respective owners.
References
Rajagopalan, S. (2018). Reflections on a Group Discussion: 4 F's of Success. https://agilesriram.blogspot.com/2018/08/reflections-on-group-discussion-4-fs-of.html
Friday, April 21, 2023
Evolution and Revolution of Change Management
As I was in the last training session with my current project management professional training batch, I was discussing how change sticks within an organization. As I differentiate governance processes for managing changes within the context of a project or program related to introducing large scale change management, questions emerged on what is change management. Some members who had attended a 2-day Scrum Master class mentioned about ADKAR and another management learner discussed about Kotter's change management.
And both these change management frameworks are good and relevant. While both ADKAR and Kotter's change management frameworks are powerful and relevant in today's organizational environment, the knowledge of the change management evolution can help understand how change is perceived, planned for, and implemented. One can then appreciate the richness of history in connections with both the influence and impact of change management framework.
| Year | Model Name | Brief Explanation |
| ~1947 | Kurt Lewin 3-Stage |
|
| ~1969 | Kuber-Ross Change Curve |
|
| ~1980 | McKinsey 7S Model |
|
| ~1991 | Bridges Transition Model |
|
| ~1996 | Kotter 8-Step Model |
|
| ~2006 | Hiatt's ADKAR Model |
|
Have I missed out on any model or misinterpreted any connections to models? Share your thoughts.
References
Bridges, W. & Bridges, S. (1991). Managing Transitions. Boston, MA: Da Capo Lifelong Books.
Hiatt, J.M. (2006). ADKAR: A model for change in business, government, and our community. Loveland, CO: Prosci, Inc.
Kotter, J.P. (1996). Leading Change. Boston, MA: Harvard Business School Press
Kubler-Ross, E. (1969). On Death and Dying: What the dying have to teach doctors, nurses, clergy & their own families. New York: Scribner, An imprint of Simon & Schuster, Inc.
ADKAR Model (n.d.) Prosci. https://www.prosci.com/methodology/adkar
Waterman, R., Peters, T. and Phillips, J. (1980). Structure is not organization. Business Horizons, 23 (3), 14–26
Friday, March 10, 2023
Quality is a function of Risk
I was recalling the statement, "Quality = f (Risk)," in one of my PMP training sessions and one of them asked how quality relates to risk. The premise behind this thought was on the iron-triangle thinking that quality is controlled by scope, schedule, and cost! It seems like we have a lot of work to do still in understanding about risk and its impact!
As this person was in semi-conductor space, I reasoned risk is like the hard-wired interrupt that takes precedence over soft logic in the way microprocessor operates. That got the attention. So, I continued to make a connection on the immediate topic of the "Cost of Quality" we were discussing and reasoned out the importance of risk.
In the diagram above, I have presented the cost of quality made up of two important branches. These are the cost of conformance to avoid risks happening in the first place and the cost of non-conformance to address risks that have happened.
- To avoid risks as part of the cost of non-conformance, the best approach is to practice the "wisdom of the ages" saying, "Prevention is better than cure!" Here we take proactive steps to ensure quality planning (as part of the Quality trilogy) includes preemptive measures. This involves building quality using quality assurance (QA) with process oriented and proactive steps to train people, have multiple documentation (caters to multiple modes of learning), the appropriate equipment required and the required amount of time to do things correctly (e.g.: right-sizing stories to fit into the timebox, risk driven development methods to prioritize).
- The next step is to evaluate how well our controls are working by performing quality audit on the work (PM/PO owns the quality audit). Here, quality control (QC) comes from the delivery team that comes in with reactive and product-oriented methods like testing (product testing), inspection (Gemba Walks), etc.
- Now, if the errors are released such as not missed compliance or security considerations or misinterpreted requirements, or other forms of requests like change request or enhancements are noted, depending upon the triaging process, these could be show-stoppers disallowing the user to realize the intended benefit thus risking value delivery. So, rework may be required, or products may be discarded (prototyping or physical products) as scrap. These corrective actions are adding more time and cost and increase the opportunity cost of people unavailable for improving the benefit in the current project (working on newer functionality) or other business initiatives. Time may translate further into budget risks as available funding may be depleted to pay for contractors and infrastructure.
- Finally, if these internal errors were not caught and were released to the customer, they become escaped defects! This impacts now the customer's value delivery life cycle as our faulty products may be used in their product assembly or our faulty code may be impacting their applications built. These translates into liabilities for the company, Warranty claims (ongoing free support, recall for the products at our expense) and perhaps even the business lost to competitors.
So, am I not correct to say, "Quality = function(risk)"? Share your thoughts.
Sunday, February 5, 2023
Risk Driven Prioritization: Challenges to Prioritization Techniques
I have always felt that if value is the focus of prioritization, the value should be prioritized equally by the risks to delivery. In other words, engaging in powerful questions (Rajagopalan, 2015) helps a lot and this behavior is driven from the leadership mindset (Rajagopalan, 2013). When sufficient focus of risks to delivery or risks to non-compliance exists, value is not delivered as the benefits are not realized! Instead, we run into the challenges of techniques without understanding risks.
Given below are most frequently used prioritization techniques and a brief discussion on what they lack that should be factored if not done consciously.
| Technique | Description | Risk Thoughts |
| RICE |
| On a positive note, it uses some level of analysis to compute the estimate. But this is a very ambiguous approach for the following reasons.
|
| WSTF |
| This approach has the same challenges as RICE but also improves on RICE somewhat significantly.
|
| MoSCoW |
| All these four levels (Must, Should, Could, Won't) are subjective interpretations. Granted that there is some amount of categorization, but several ambiguities remain.
As you can see, this approach is a good start but not a good one for prioritization at all. It only helps with a first level of categorization and is not the final level of prioritization. This is the reason why this approach is sometimes associated with Eisenhower Matrix which President Eisenhower used for decision-making on what he needs to address and what he needs to delegate! Another technique I have heard is Yes-No-Not Now-Never. To me, this is analogous to MoSCoW and not much different. |
| Kano Model |
| This model is driven from the market research. Almost like a persona expectations of the market behavior. However, while it may serve as an external risk trigger, it does not quantify further (e.g.: deeper dive of PESTLEED, TECOP, etc.) and meet the individual risk driven considerations (e.g.: VRIO) for a product. Again, it is a good categorization for product backlog but does not help with prioritization of the individual items. |
| 100-Points | This approach is an approach to engage stakeholders to prioritize when more than one is influencing or impacted.
| This approach is fine but still has the challenge of how risks are communicated to the stakeholders and how much risks are factored by the stakeholders. Bias and influence can help a feature be prioritized that the team can't handle or deliver. |
| Relative Prioritization | This approach is for the team to prioritize items already prioritized. | This helps with relative prioritization (for instance if two features are high, which one should be delivered first.) |
As you can see, each technique has its own strengths and weaknesses. If it works for you, great! But risks are something that one must quantify and evaluate. In fact, I call such an approach to risk-based prioritization "risk driven development (RDD)". Here, the risks are identified, assessed, and evaluated with a risk exposure score. These risks are associated with requirements as well as the test cases (conformation criteria) as not all requirements are easy to test. Based on the sum of the risk scores on a requirement and test cases, the features can be prioritized. It is possible to use other methods in conjunction with this so long as risks are considered and there is a ratio level scoring mechanism included or at least a good risk breakdown structure included to avoid bias or subjective interpretation.
What are your thoughts? Please share.
Rajagopalan, S. (2013). Essential Leadership behaviors for Agile Transformation. https://agilesriram.blogspot.com/2013/12/essential-leadership-behaviors-for.html
Rajagopalan, S. (2015). Client Management: The influence of powerful questions.
Sunday, January 15, 2023
Model Based System Engineering (MBSE): Relating Systems to Value
As part of the product analysis methods, I was discussing with my project management training class when these discussions really made me feel that there is a lack of fundamental understanding on model- based system engineering (MBSE) and its relationship to value. Much of the value decomposition was conceived by the professionals in my training class relating to the product backlog breakdown splitting a product epic into separate components and subdividing them into features and user stories for MVP and MBI/MMF. The focus was of requirements analysis splitting stories into smaller chunks for estimation and delivery lost the connections to the model-based system engineering (MBSE) concepts, such as the system engineering, systems analysis, value engineering, and value analysis, and their tight coupling to technical subsystem interfaces for a simple, secure, safe, stable, and sustainable product.
Some of the familiar concepts of model-based system engineering also pave their connections with the processes for procurement and agreement management, project enablement and related outcome management, technical management, and the technology related management itself. Such concepts can be found in the ISO 15288 on how system related processes are mapped not only in designing the system but also in designing the processes around the system (Hall, 2018), which is not the product alone but the processes around operations (which is a portfolio component), programs (which focuses on benefits management) and projects (which focuses on outcome management).
The concepts of managing these processes within a software context can be seen in the capability maturity model integration (CMMI) and the processes of continuous quality management (both QC and QA) can be seen in 6-sigma concepts. Even ISO 9000 umbrella of the ISO 9001 series to total quality management espouse these processes related to both technology and management of technology to ensure quality in numerous standards and regulations (Rajagopalan, 2023). This is what is emphasized by the agile principle, "Business and Technical stakeholders must work together daily!" While each industry may create different models depending on the specific products and their impact on clients and customers, a few generic MBSE concepts apply in all the industries.
The MBSE concept is analogous to the fable that I heard in India about six blind children touching an elephant and describing the elephant. If elephant is the system and the blind children are the various stakeholders, we are describing the system from what we think we see/feel. Security, for instance, has a different meaning for the technical team members compared to the end users.
For simplicity, let us define the model as a feature-box (functional requirements and non-functional specifications) that adequately represents the set of inputs that can interface requiring the model to prioritize and the set of outputs it will generate. The model's behavior is controlled by a set of complex rules that are manageable. This model now represents the system that must be viewed closely and from far! This requires the system architect not only to see the auditability of the system for diagnosis (such as behavior, but paths also taken and the trails left, considerations for gracious shutdown, etc.). So, how do the system analysis and system engineering differ?
The system analyst will use a combination of techniques (e.g.: data modeling, interface analysis, data flow diagram, and alerts & event triggers) to refine the model! This is reviewing the model at a close distance. So, the system analyst frequently will consider using class diagram, functional decomposition, sequence diagram, network diagram, entity-relationship model, and deployment diagram as well as the total-quality-management (TQM) foundations like the flowchart, scatter diagram, checklist, root cause analysis, and histogram. But the system engineering discipline observes the model from a long distance.
Therefore the system engineer focuses on interference defining the boundary of the system (where the system can no longer sustain itself to be valuable), behaviors that exposes the system's vulnerabilities (model is no longer safe or secure without subjecting itself for damage or causing harm to others). The system engineer then uses market analysis, business rules analysis, concept modeling, scenario analysis, risk analysis, state modeling, interface analysis, decision-modeling, Gemba Walks, workshops, focus interviewing, SWOT/TOWS analysis, benchmarking, and brainstorming further supplemented by TQM techniques like control chart and pareto charts. Please note that these are additional techniques beyond the techniques used in the system analysis.
Now, both the system analysis and system engineering concepts can be extended to the extent of benefit (value) derived by the users and the performing organization. These values can be looked at from multiple angles. One approach is the approach that I normally recommend as custom value, business value, technical value, and process value (Rajagopalan, 2019). The goal of these exercises is not only to protect the customers and business but also look at efficiency gains through the combination of both the process and technical value giving a competitive market value! When all these areas are reasonably protected, they also enhance the future value (that can be measured using ROI, NPV, IRR) of the product within the product portfolio. The short-term focus will be value analysis and the long-term focus will be value engineering.
Another lens, that in my humble opinion, extends from the previous discussions is how the model is sustained and supported. From this lens, we can evaluate model from flow (hence Lean), governance (hence Change Management), behavior (Systems Engineering and Value Engineering concepts mentioned earlier) and decision-making (hence Risk Management discipline, Costing Principles, and Costs of Quality considerations). A few refinements are required here.
- Flow is often thought of as work progressing across various statuses. This is horizontal flow. Flow also should be looked at vertically between projects, programs, and portfolios and multiple systems or projects that must work together.
- Change Management concepts extend in such vertical value flow in terms of risk management, decision-making, funding, and resource planning that happens in program management, PI planning in scaling agile approaches, etc.
- Governance can be supported at a lower level with workflows that enable faster decision-making and system traceability & auditability.
- Behavior can vary very widely depending on the organizational processes as well as the maturity/direction required by the team. Hence, it could range from as simple as time tracking, waiting time evaluation, burn rate as well as evaluating negotiation considerations, team health, conflict resolution, etc.
- The decision-making can be supported by some of the governance considerations, but it could also transcend other work authorization systems based on extensive funding considerations (e.g.: Efficient Frontier, portfolio balancing, resource optimization, etc.).
References
Hall, D. (2018). Systems Engineering Guidebook. Toney, Alabama: Hall Associates. https://www.incose.org/docs/default-source/default-document-library/systems-engineering-guidebook---isbn-9780692091807bb88028572db67488e78ff000036190a.pdf?sfvrsn=365365c7_0
Rajagopalan, S. (2023). Risk Management: Birds' Eye View of some Standards and Regulations. https://agilesriram.blogspot.com/2023/08/risk-management-birds-eye-view-of-some.html
Rajagopalan, S. (2019). Requirements Management: A value mapping exercise. https://agilesriram.blogspot.com/2019/02/requirements-management-value-mapping.html
Wednesday, December 14, 2022
Overview of Stakeholder Engagement Techniques
Inspired by the quote, "Tell me about your friends, I will tell you who you are!" I used to tell any project manager "Tell me about stakeholder engagement strategy, I will tell you how successful your project will be!" This is the same message when a group of learners in a project management professional certification asked about which models to use in stakeholder engagement. Since projects come in many sizes of varying complexity and not all stakeholders are the same, there is no one correct answer for selecting the model that fits!
Furthermore, Palan (2020) provides four different stakeholder persona which is a very interesting way to look at how stakeholders may be categorized. These include the following. So, each stakeholder persona focuses on several areas of the problem and their overall perception needs to be managed. Finally, in the end, all stakeholder engagement approaches are getting people to identify, deliver, and sustain value maximization (Barth, Ulvenblad, & Ulvenblad, 2017).
- HIPPO (Highest Paid Person's Opinion),
- WOLF (Working on Latest Fire),
- RHINO (Really High-value New Opportunity), and
- Zebra (Zero Evidence But Really Arrogant).
In my book on Organized Common Sense (Rajagopalan, 2018), I expand on a basic technique on the ABC of Stakeholder. It is understanding the authority (power), behavior (influence) they have on people, and the extent of concern or care (interest). Over the years of my experience managing stakeholders, I have called these principles the ABC of stakeholders. Now, as the project size varies and depending on the stage the project is in, there are many techniques. Some are very common and some are not.
- Power-Interest Grid
- This is a very common technique (PMBOK, 2017) where people map the stakeholder engagement strategy with four quadrants. The X-axis has a interest on low-to-high scale and the Y-axis has the power on a low-to-high scale with (low, low) at the origin. Accordingly, four strategies emerge.
- High-Power, High-Interest 👉Manage Closely (Sponsor, Regulators)
- High-Power, Low-Interest 👉Keep Satisfied (Other Decision-Makers, Suppliers)
- Low-Power, High-Interest 👉Keep Informed (Delivery Team, Operational Team)
- Low-Power, Low-Interest 👉Monitor Marginally (Employees, Users)
- This approach is good for small-to-medium projects but doesn't scale very well for larger projects unless only critical stakeholders are captured.
- Stakeholder Map
- While the Power-Interest Grid is a good one to identify the way you engage with people, one can draw significant stakeholder-to-stakeholder influence, such as who has the listening ears of another, who has more trustworthy relationship, who can gather insights from other sources, etc.
- The knowledge of these behavioral influence maps is inferred and observed and not necessarily drawn from the title or hierarchy in the organizational chart.
- People can use arrows, colors, and size of the stakeholder circle in the quadrant to draw such influence directions so that this knowledge furthermore can be used (Anonymous, personal communication, PMI MassBay Chapter Meeting, 2014).
- Since "influence" is about leadership and leadership is not just with a title, I prefer the Power-Interest over "Influence-Interest" or "Influence-Impact" or "Power-Influence" diagrams.
- This approach is good for small-to-medium projects but doesn't scale very well for larger projects unless only critical stakeholders are captured.
- Stakeholder Cube
- This approach is an attempt to scale power-interest grid (PMBOK, 2017) with the influence making three dimensions and evaluating the engagement strategy.
- This approach, in my experience, is more theoretical than practical as it is very hard for people conceptualize the strategy in three dimensions with influence being an observed behavior that can't be mapped to a quantitative or qualitative scale.
- RACI
- This is a popular tabular structure indicating responsibility assignment matrix (RAM) (PMBOK, 2017) that maps people or the role to four areas. They include responsible, accountable, consulted, and informed (Rajagopalan, 2014a).
- There are many conceptual errors people inculcate due to the lack of understanding the power of this tool. Please read Rajagopalan (2014b) for more details.
- This tool will work well for larger projects, programs, and portfolios but care is required in capturing more critical stakeholders.
- Stakeholder Engagement Assessment Matrix
- This is another good tool to evaluate the perception of the stakeholders' journey (PMBOK, 2017) in your project. Typically, these perceptions are that they are unaware of the project, negatively influenced and so resistant, neutral about supporting the project due to lack of connection with the project outcomes, supportive of project's outcome, or champions of the project. Depending upon what stage of the stakeholder journey they are in, the strategy may involve informing, educating, or committing them.
- This is also a good tool for small-to-medium projects. It can scale well for a larger project, program, or portfolio with some modifications of the critical stakeholders captured.
- Stakeholder Register
- This is another popular tool and is more of a tabular structure (PMBOK, 2017) summarize essential details. It may be difficult to read the diagram and charts and so this structure helps with stakeholder-engagement to communication management plan.
- Salience Model
- This is a good model that makes the first attempt to scale to larger initiatives (PMBOK, 2017). Here, three variables are evaluated, and these include power, legitimacy, and urgency.
- It uses the Powe∩Legitimacy∩Urgency Venn diagram to demonstrate seven types of stakeholders.
- These involve dormant, discretionary, demanding stakeholders at the external side of power, legitimacy and urgency.
- The dominant stakeholder is between power and legitimacy, the dependent stakeholder is between legitimacy and urgency, and the dangerous stakeholder is between power and urgency.
- The definitive stakeholder is at the intersection.
- The model does not recommend removing any type of stakeholder but expects one to evaluate the characteristics of when to engage them.
- CATWOE Analysis
- This model recommends (Bergvall-KÃ¥reborn, Mirijamdotter, Basden, 2004) looking at the categories of stakeholders and evaluate perceptions from their viewpoint.
- It stands for customer, actor, transformation, worldwide view, owner, and environment.
- Customer 👉 Mostly made up of company paying client or the client's customers or the company's direct end-users
- Actor 👉Any person or group responsible for delivering the solution (product, service, or result)
- Transformation 👉Any process, tool, or method that the actors use to convert input to outputs (This could be executional, decision-making, or operational processes)
- Worldwide view 👉 This aspect corresponds to high level policy and associated standards and regulations that they need to adhere and be compliant with.
- Owner 👉This member or group is responsible for collective decision-making
- Environment 👉The internal and external environment that facilitates all the above to work together (the people, process, product)
- In practice, the order of events should be Worldwide View, Transformation, Customer, Actor, Owner, and Environment
- Worldwide view binds the reasons why projects or programs started (e.g.: regulation)
- Transformation investigates the internal and external processes that support the projects and programs to deliver
- Customer provides the requirements that the actors must evaluate to understand, fill the gaps, and prioritize (Backlog or scope)
- Actors work together to deliver the output, capability, outcome and benefit for value realization
- Owner approves the project for the team to continue their work
- Owner and actor are also responsible to create the environment conducive for delivery
- This model is more to ensure that everyone is on the same page in terms of the project scope and no shocks or surprises are present. It is more of a stakeholder perception management tool.
- I-C-ICE
- This framework is large-to-larger projects mostly in the public services (IAP2 Spectrum, n.d.), such as building a city, highway or railway management, new supply chain route, airport and telecommunication network, etc.
- It stands for Inform-Consult-Involve-Collaborate-Empower and predominantly derives support from many of the previous techniques such as Power-Interest Grid, Salience Model, RACI, etc.
- Onion Diagram
- Just like the layers of onion, (some of you may be familiar with the layers of onion used in the Agile approaches), this approach derives its approach from identifying the stakeholders or stakeholder groups closer to the delivery team (Alexander, 2004).
- Think of the core as the "Customer Operating System". The people closer to this core are the business analyst, product owner, project manager, developers, and testers.
- The group in the next outer layer are operational team members, customer support, help desk, users, and some of the extended business teams (marketing, for instance).
- The next layer will be decision makers mostly internal to the company such as the sponsor and governance committee
- The next layer could be internal or external influential experts, consultants, suppliers, vendors, or regulators
- The final layer could be a market research team focusing on competition, users, market segments, etc.
- While there are benefits to this approach, it also distances people and unless there is a good communication cadence to regularly collect voice of customer and voice of business feedback and ongoing market intelligence, there could be challenges.
- Proximity Chart
- This model is a revision of the onion diagram with some level of stakeholder engagement assessment matrix.
- It has emerged from data analysis techniques on how closely data points related together on the central tendency.
- It still uses the layered approach but brings the SEAM approaches like who opposes the project and who supports the project to evaluate strategies.
- Stakeholder Map ideas can be brought here to draw influence directions.
- It still has the same challenge of distancing people and requires frequent communication to ensure that stakeholders feel engaged and connected.
- Resistance Pyramid
- This approach emerged from the change management context on understanding how humans perceive and deal with change. The model was introduced by Nieder and Zimmerman (Galpin, 1996). Instead of using a layered concentric circle approach, this approach builds on a pyramid.
- The layers of the pyramid list people that are not knowing about the project, not able to deliver on the outcome, and not willing to support the initiative.
- On either side of the pyramid, the reasons for their current state and the potential actions that can be taken are listed.
- I have seen people that breakdown the reasons with root-cause-analysis and further extend by force-field-analysis.
- While this is a good one in concept, some of the earlier techniques like Power-Interest grid and Stakeholder Engagement Assessment Matrix are simpler and more manageable!
So, after reviewing these frameworks, that have been present for a long period, which is good? There is no one-size-fits-all. The more we look at these techniques, the more we can see that there are a lot of similarities and differences. Depending upon the specific project, pick what matters and improvise! If we recommend one as the best, then, it is like saying agile or traditional approach is a good candidate for all projects.
What are your thoughts? I am sure I may have missed a technique in a specific industry. Let me know your thoughts.
References
A Guide to the Project Management Body of Knowledge (2017). Project Management Institute, 2017. APA, 7th ed. Project Management Institute.
Alexander, I. F. (2004, June). A Better Fit-Characterising the Stakeholders. In CAiSE Workshops (2) (pp. 215-223).
Barth, H., Ulvenblad, P. O., & Ulvenblad, P. (2017). Towards a conceptual framework of sustainable business model innovation in the agri-food sector: A systematic literature review. Sustainability (Switzerland), 9(9), 1–15. https://doi.org/10.3390/su9091620
Bergvall-KÃ¥reborn, B., Mirijamdotter, A. & Basden, A. (2004). Basic Principles of SSM Modeling: An Examination of CATWOE from a Soft Perspective. Systemic Practice and Action Research 17, 55–73.
Galpin, T (1996). The Human Side of Change, San Francisco, Jossey Bass.
IAP2 Spectrum (n.d). https://iap2usa.org/resources/Documents/Core%20Values%20Awards/IAP2%20-%20Spectrum%20-%20stand%20alone%20document.pdf
Palan, H. (2020). The dangerous animals of product management and how to tame them. Customer Think. https://customerthink.com/the-dangerous-animals-of-product-management-and-how-to-tame-them/
Rajagopalan, S. (2014b). RACI: Errors and Implications in building the right one. https://agilesriram.blogspot.com/2014/07/raci-errors-and-implications-in.html
Rajagopalan, S. (2018). Organized Common Sense. Outskirts Press.
Thursday, November 24, 2022
Gift of Teaching: Why it should matter to anyone?
Sunday, October 2, 2022
Powerful Communication: Lessons learned from High School Essay Writing
- The persuasive communication is required when you are recommending a decision (terminating a project, funding a program, etc.). These types of communication are therefore either argumentative or expository depending on the level of subject matter expertise you bring to the table.
- The informative communication is more of a status quo balancing multiple elements (scope, schedule, cost, quality, risk, procurement, stakeholders, resources, change) and so is often an expository level of communication.
- The exploratory communication is often taking some level of persona to try out an experiment and so I view them as narrative essays.
Monday, September 12, 2022
Team Management Guidelines: Treasure from my Archives
As I was doing Fall cleanup of my room, I felt ecstatic when I found one of my scribbled notes on an old journal record on the guidelines on team management. It was one of the preparations I had done for a PMO round table on team management. The guidelines were the recommendations of Jerry Wellman (2011). While the concepts were straight forward here, I decided to put this here with some additional thoughts and share it for the community. All the eight habits are recommendations from Wellman (2011) and although these are recommendations for project teams, I feel that it applies to any type of strategic and executional team.
- Shared Vision
- Establish Clear Roles - This is not to indicate titles but roles with broader responsibilities
- Develop the Objectives together to foster buy-in - Teams work together better if they co-author the working agreements
- Set Expectations
- Translate overall vision into specific objectives - Discuss in clear unambiguous terms how the vision is mapped into strategic objectives (product, program, portfolio, etc.)
- Discuss commitments - availability, updates, process checks - As people commit to work, ask them to think about other elements that will endanger their commitment.
- Integrated Plan
- Decide on deliverables for the project - What, when, who, how, why? - While we discuss deliverables within in the project context, explore alternative thinking on these same thoughts for backlog refinement and phased approaches to rolling wave planning.
- How do you measure success? - Ensure that we agree on what matters to the team's health! Measure what matters rather than what can be measured.
- Measure Performance
- Synchronous and asynchronous focus on status - With remote teams, don't ask for meetings at hours that make it difficult for team members in other time zones to meet. Use both synchronous and asynchronous means to validate success. Promote unambiguous written communication.
- Act as each other's eyes - Don't just see what you want to see - Yes, although is a cliche that it takes a whole village to build a village, it truly a fact!
- Allow for Uncertainty
- Be flexible - Identify risks and prepare for them - What more can I say here that I have not already said!
- Discuss risks and treatment plans identify triggers in advance - Identify triggers that can make the risks materialize! Have a plan to monitor risks!
- Manage Change
- Identify slips proactively and have a plan to manage change - There are supposed to change management protocols and governance. Use an audit-based governance mechanism to promote expedited approvals.
- Monitor change with client and internal teams - Remember change occurs everywhere all the time. So, be an agent of change from both the external and internal environments!
- Continually Influence
- Think outside the box - clients are reasonable and understanding - Don't complain about unreasonable clients. Are you ready to listen to their "unreasonable vendors"?
- Think laterally to influence - Influence is all about leadership bringing behavioral changes to others - external and internal to the delivery team.
- Regularly Over-Communicate
- Understand various means to communicate and use all channels effectively - Be comfortable with writing/speaking on all the channels of communication
- Even if it is common sense, communicate. - Let others be the judge of the information they receive!
Thoughts not in bold and italics but after the hyphen in every element are my extension of ideas! Happy to hear your thoughts.
References
Wellman, J. (2011). Eight habits of successful project teams. New York, NY: Palgrave Macmillan


