mestrado em engenharia informá>ca e de computadores master ... · today it service management...

48
Prof. Rui Santos Cruz [email protected] IT Management and Administra>on - Part 1 Mestrado em Engenharia Informá>ca e de Computadores Master Degree (MSc) in Informa>on Systems and Computer Engineering Administração e Gestão de Infra-estruturas de IT IT Infrastructure Management and Administration

Upload: lyngoc

Post on 20-Mar-2019

215 views

Category:

Documents


0 download

TRANSCRIPT

[email protected]

ITManagementandAdministra>on-Part1

MestradoemEngenhariaInformá>caedeComputadoresMasterDegree(MSc)inInforma>onSystemsandComputerEngineering

Administração e Gestão de Infra-estruturas de IT IT Infrastructure Management and Administration

TODAY

ITServiceManagement

FrameworksandStandardsforITSM

ISO20000

ITIL

COBIT

ISO38500

ISO27014

IT4IT

2

Technologysessionswithinvitedspeakersfromindustry:

4thDecember: NOKIAAnaly6csSolu6onPresentedbyEng.JoãoMar>ns

3

4

ITServiceManagement

Theworldseenfromwhereyouare

5

Theglobalpicture 6

Business

People

Processes

InformationSystems(IS)

InformationTechnology

(IT)

Pyramidvision

7

Thewaytogo

8

Resource management

Yesterday Today Tomorrow

Information management

IT resources and services

management

Information services

managementUnified service

management

Information Systems

Information Technology

Services

Systems administrator

Information manager and consultant

Service manager and

consultant

Data Centers

TheimportanceofITEnterprisesareincreasinglydependentonIT.Examples:

Google(theworld’slargestIT“consumer”)

Facebook(theworld’slargestuserbase)

Amazon

E-Bay

ITiscri6cal.Ifitfails,everythingstops.

Reliability

Changeability

Business-ITalignment

Specialisedtraining

9

IT<=>ManagementManagementisthebestwordtodescribeIT:

Servers(provisioning,loadbalancing)

Storage(SAN,NAS,RAID,backups)

Network(routers,switches,VLANs,cabling)

Facili>es(sensors,HVAC,physicalsecurity,power)

Powerconsump>onandgreenissues

Virtualisa>onandcloudcompu>ng

Tools(monitoring,repor>ng,events,automa>on)

Applica>ons(mail,webandapplica>onservers)

Security(policies,iden>tymanagement)

People:

Users(accountcontrol,policies,support)

ITStaff(training,procedures-ITIL,governance-CobiT)

OtherCxOs(resources,support,businessalignment)

10

TypicalITexpenditureprofile

11

ObstaclesPreventEffec>veEngagement

12

DisparateSystemsReduceEfficiency

13

InfrastructureManagement

14

CurrentChallengesofIT

15

BusinessChallenges

ITResponsibilities

Minimisingriskinadynamicbusinessscenario

Minimisingcost&time-to-market

ImprovingROI

IncreasingBusinessPerformance

ITenablesthebusinesstomeetitsgoals

Ensuringastable&flexibleITenvironment

Optimisingresources&costs

Minimisingcosts&complexity

Adaptingquicklytochangingneeds

ITServices

16

An "IT Service" is a set of IT-related functions (HW, SW & people)

User Web Server Application Server Database Server

Ameansofdeliveringvaluetocustomersbyfacilita>ngoutcomescustomerswanttoachievewithouttheownershipofspecificcosts&risks

UTILITY“Fitforpurpose”

+WARRANTY“Fitforuse” = VALUE

U>lityandWarranty

17

UTILITY

WARRANTY

T/F

T/F

T/F

Fitforpurpose?

Fitforuse?

OR

AND

Performancesupported?

Constraintsremoved?

Availableenough?

Capacityenough?

Continuousenough?

Secureenough?T:TrueF:False

Value-createdAND

WhatisITServiceManagement(ITSM)?ServiceisanapproachthatITorganisa>onscanu>lizetodesign,build,integrate,manageandevolvequalityITservices.

“ServiceManagementisasetofspecialisedorganisa5onalcapabili5esforprovidingvaluetocustomersintheformofservices”

IthelpsinalignmentoffouraoributesPeople,Process,ProductsandPartners

18

ITServiceManagementContext

19

WhatdoesITServiceManagementdo?

20

ITServiceManagementObjec>vesToalignITServiceswiththecurrentandfutureneedsoftheBusinessanditsCustomers

ToimprovethequalityoftheITservicesdelivered

Toreducethelongtermcostofserviceprovision

21

Needs

QualityCost

ITGovernance

22

COBIT 5 brings together the five principles that allow the enterprise to build an effective governance and management framework based on a holistic set of seven enablers that optimises information and technology investment and use for the benefit of stakeholders.

23

Solu>onstotheITServiceManagementproblemPeople(ITIL)

asetofbestprac6cesisneeded

Automa6on(eachITitemmustbepreparedtobemanaged)

asetofinteroperabilitytechniquesisneeded

Mixed

usepeopleonlyforhighlevelprocedures

useautoma6onfortherest

24

People:theweakestlinkHumanlimita>ons

Slowresponse

Unabletodealwithcomplexity

Unreliable(sickness,errors,omissions)

Cannotwork24x7

Principleofleasteffort(passwords,donotlogeverything)

Haterepe>>vetasks

Undisciplined(theydoastheythinkitshouldbedone)

Poorinseman>cexpression

Canperformillicitacts(outofinterestorgrudge)

AccordingtoGartner,40%osservicebreachesareduetothehumanfactor

25

Automa>onManagementtechniquesexecutedautonomouslybytheITsystemitself.Pre-definedoradap>vepoliciesS>llalongwaytogo.Objec>ve:turnutopiaintorealityImportantmilestones:CompilerOpera>ngsystemVirtualmemoryVirtualiza>on(networks,servers,storage,datacenter)Automa>onofITprocesses(RunBookAutoma>on)

26

Examplesofautoma>ontasksDatamanagement(backup,recovery)Patchmanagementanddistribu>onProvisioningVirtualmachinemanagementLoadbalancingBatchprocesses(jobscheduling)

Monitoring(performance,availability,events)ChargebackCapacitymanagementConfigura>onandchangemanagementAssetmanagementITprocessautoma>on

27

MainreasonstoautomateReducethehumanfactor

Increasesystemreliability

Reducecomplexityofhumanmanagement(upwardsintheabstrac>onlevel)

Reduceresponse>mes

Beoerdynamicalignmentwithbusiness

Improvequalityofservice(SLAs)

Reducecosts

28

Gartner’smaturitymodel

29

Theevolu>onofpeoplePeopleneedtoberestrictedtohigherlevels

Peoplearebeoerincrea>vetasks

Computersarebeoeratrepe>>ve,fast,reliable,massivedatatasks

Automa6ontoolsarethekeyfortheseman>cgapbetweenpeopleandcomputers

Thiscanonlyworkif:Weadoptaparadigminwhichallen>>escanfitEachen>tyispreparedtobemanaged

30

31

FrameworksandStandardsforITServiceManagement

DevelopmentofstandardsforITSM

32

DifferencebetweenaFrameworkandStandard.

33

FRAMEWORK STANDARDCustomizable NotcustomizableGoodPractice BestPractice

Individualgetscertified Anorganizationgetscertified

Exampleofframework:ITIL,COBIT ExampleofStandard:ISO20000,ISO38500

Frameworks&standards

34

ITServiceManagementFramework

35

ISO20000

36

ISO20000

37

WhatisITIL(ITInfrastructureLibrary)?TheITInfrastructureLibraryisthemostwidelyacceptedapproachtoITservicemanagement.

Itisalibraryofbookswhichtalksaboutthegoodprac>cesinITservicemanagement.

ITILisaFramework

ITILdefinestheorganisa>onalstructureandskillrequirementsofanITorganisa>onandasetofstandardopera>onalmanagementprocedurestoallowtheorganisa>ontomanageanITopera>onandassociatedITinfrastructure.

38

WhyisITILV3referredtoasaGoodPrac>ce?Becauseitallowsamanagementplanwhichassertsthattherearemethods,techniques,ac>vi>es,andprocesses,thatturnsmoreeffec6vethedeliveryofapar>cularoutcome.

39

ITGovernanceFramework

40

COBIT:BusinessframeworkfortheGovernanceofEnterpriseIT(GEIT)

IT Governance

COBIT4.0/4.1

Management

COBIT3

Control

COBIT2

An business framework from ISACA, at www.isaca.org/cobit

Audit

COBIT1

2005/720001998

Evo

lutio

n of

sco

pe

1996 2012

Val IT 2.0 (2008)

Risk IT (2009)

41

ISO38500Interna>onalstandardforCorporategovernanceofinforma>ontechnology

Responsibility

Strategy

Acquisi>on

Performance

Conformance

Humanbehavior

42

ISO27014Interna>onalstandardforCorporategovernanceofinforma>onsecurity

Establishorganisa>on-wideinforma>onsecurity

Adoptarisk-basedapproach

Setthedirec>onofinvestmentdecisions

Ensureconformancewithinternalandexternalrequirements

Fosterasecurity-posi>veenvironment

Reviewperformanceinrela>ontobusinessoutcomes

43

44

ISO/IEC 27014:2013 & 38500:2009 – AFAI Délégation Sud-Est 13/11/14 - Hugh H. Penri-Williams

ISO 27014 ISO 38500

24

IT4IToverviewIndustrystandardforthe“businessofIT”launchingOctober2014atOpenGroupconferenceinLondon

StartedoutofdiscussionsbetweenShell,HPandothercustomers

Intendedtobemoreprescrip>veandarchitecturalthanITILorCOBIT

EmphasisonendtoendITvaluestreamsandconceptualdatamodel

SimilarinscopeandintenttoreferencearchitecturessuchaseTOMandARTS

45

ITILtoIT4ITcomparison

46

ITIL IT4ITPositioning Frameworkdescribingfunctions/capabilities/disciplines. Informationmodeldrivenreferencearchitecture,supportiveof

multipleprocessframeworks.Origins “Best”or“good”practiceoriginsintendedforbroadaudienceof

executives,managers,andindividualcontributors.OriginatedoutofneedsidentifiedbyenterprisearchitectsandITmanagersforclearerimplementationandintegrationguidance

Methodology Primarilyunstructurednarrative.“Process”(similartowhatenterprisearchitectswouldtermfunction)istheprimaryunitofanalysis.

StructuredconsistentlywithTOGAFandArchimate.Valuestream,capability,data,systemviews.

Orientation Orientedtopractitionereducationratherthansolution SolutionorientationValueapproach Orientedtodeepdiscussionofindividualsilofunctions/processes.Beyond

overallservicelifecycle,doesnotemphasizelongerlivedvalueflows.FocusedontheendtoendflowoffourhighlevelITvaluestreams(StrategytoPortfolio,RequirementtoDeploy,RequesttoFulfill,DetecttoCorrect)acrossITcapabilities.

Internalconsistency

Ambiguousandoverlappingterminologyinplaces Mutuallyexclusiveandcomprehensive,rigorouslyavoidingambiguityandoverlapinitsarchitecturalcatalogs

Levelofdetail NotsufficientlydetailedtobeofutilitytoplannersandarchitectsattemptingtointegrateITmanagementinfrastructure.

PreciserepresentationofdataandintegrationpatternsincomplexITmanagementdomain

Agile Implicitwaterfall,top-downplanningorientation. ExplicitcoverageofAgileandDevOpstrends.Maintenanceprocess

Longtermhistoryofproprietaryownership.Multi-yearrevisioncycle Opendevelopmentprocess

ITServiceManagement

FrameworksandStandardsforITSM

ISO20000

ITIL

COBIT

ISO38500

ISO27014

IT4IT

47

SUMMARY

AnyQues>ons? 48