150 likes | 349 Views
Management Roles and Responsibilities. Jack Suess, UMBC Michael Berman, CSU-Pomona. Defining the Business Case. An Identity Management project is a significant investment. What is the business driver for this? CIO often needs to “sell” IdM
E N D
Management Roles and Responsibilities Jack Suess, UMBCMichael Berman, CSU-Pomona
Defining the Business Case • An Identity Management project is a significant investment. What is the business driver for this? • CIO often needs to “sell” IdM • What aspects of the institution will be impacted? What groups on campus should have a voice in the project? • Driven by the business case • What constitutes success? How will you measure this? • Essential to determine the investment return (ROI) CAMP Directory Workshop Feb 3-6, 2004
Decision Making Structure • The CIO needs to create a decision making structure. This includes: • What are the roles and responsibilities of people involved? • How do your structure your project to balance timely decision making with building consensus? • Who makes final decisions? • The more complex your institution the more complex the decision making structure CAMP Directory Workshop Feb 3-6, 2004
IdM Committees and Team • The Why? • Executive committee demonstrates commitment and support of business drivers. • The What? • IdM steering committee. This group is usually responsible for identifying and defining policy and procedure changes, approving scope changes, and ensuring committed resources perform. Approves project plans to meet drivers. • The How? • Project team - people tasked with responsibilities of implementing some part of the IdM system. CAMP Directory Workshop Feb 3-6, 2004
Creating a Project Team • Implementing an Identity Management system requires resources -- TIME, MONEY, and STAFFING • It is a complex project that can run a year or more and will require ongoing support. • It isn’t as complex as an ERP but it still requires solid project planning for success • Every project has multiple roles and responsibilities to be completed (although in many cases the same person handles multiple responsibilities) CAMP Directory Workshop Feb 3-6, 2004
Identify a Project Director • Find someone that can do the following • Develops project plan, budget, constraints, dependencies, schedule, milestones, and the estimates on task time • Oversees resource allocation and resource leveling on project • Identifies scope changes and adjusts plans • Depending on complexity this might be full-time • Person needs the support and confidence of the executive committee CAMP Directory Workshop Feb 3-6, 2004
Identify the Technical Resources Needed • An IdM project involves many aspects of your campus technology infrastructure. As such you need access to resources on a full or part-time basis; • Directory architect • Systems administrators • DBA • Software developers • System analysts • Support staff CAMP Directory Workshop Feb 3-6, 2004
Identify the Functional Resources Needed • Data stewards should understand meaning of data used in IdM and privacy rules governing the data • Data administrators provide extracts for populating the IdM • Functional staff are needed to test and verify confidentiality is maintained What authority does project director have over these staff? CAMP Directory Workshop Feb 3-6, 2004
Identify Policy and Compliance Resources Needed • Identify issues that will arise in IdM and develop draft interim policies and streamline changes to policy and procedure. Examples include: • Account eligibility and duration • Guest access • Log file access and archival • Compliance is needed to make certain the IdM meets policy and privacy directives CAMP Directory Workshop Feb 3-6, 2004
Identify Security and Privacy Resources Needed • How does this project connect with broader security and privacy goals? • Are there special security issues that must be considered when extending the IdM to a system (e.g. single signon and ERP) • What security will be in place to protect the IdM infrastructure CAMP Directory Workshop Feb 3-6, 2004
Change Management • Who is responsible for project communication among stakeholders and on the campus? • Who is identifying social barriers to success and working to resolve these (e.g. we feel our local authentication works better for us) • Training - are there training issues that must be addressed. How will this be done? By whom? • Support - when this is implemented how will people get support? What about decentralized technical staff? CAMP Directory Workshop Feb 3-6, 2004
Production and Operations • The IdM has ongoing maintenance • SOR feeds have to be maintained • Upgrades to source systems have to be tested against IdM • Data verification and validation needs to occur • Updates to the IdM infrastructure require testing and verification • Development for extending IdM to new applications is ongoing CAMP Directory Workshop Feb 3-6, 2004
Management Conundrums • Finding the right person to manage the project to successful completion? • Build yourself or buy a vendor solution? What are yours? Break into groups CAMP Directory Workshop Feb 3-6, 2004