SharePoint as the New Normalized

1. Brittany Kwait @BritKwait ProtivitiSPS OMAHA 2013!!!! SharePoint as the New Normalized A Case Study

2. Thank You!!! ForSponsoring the IT Pro/Admin Track

3. Why Are You Here? (Session Overview / Agenda) • Introductions • Overview of Challenges • Risk Compliance • Getting Back to Normal • SharePoint Undergoes Surgery • Qs & As

4. Why is Protiviti here? • This is what we do • Over 15 years of effective technology solution implementation • 12-time Microsoft Gold Certified Partner helping over 250 clients world-wide achieve business goals • Have released a commercial work, project and portfolio management product on Microsoft from SharePoint 2007 through 2013 • Organizer of the annual SharePoint Conference .ORG and facilitates the largest SharePoint Group on LinkedIn, as well as a private user group • As a global leader in consulting and internal audit, leverages deep technical capabilities with a wide range of subject matter expertise to develop value-adding, customized solutions www.protiviti.com

5. Why am I here? • I ♥ SHAREPOINT! • And want you to, too! • Working with SharePoint since 2007 • Senior SharePoint consultant with Protiviti specializing in information architecture, business process automation, project management, and user experience • No-Code Solution Architect for 50+ clients across the Americas

6. Session Topic Survey • SharePoint 2010 • DataviewWeb Parts • JavaScript/JQuery • Not Answering Surveys • Nintex • Nintex Forms/InfoPath • Regulatory compliance • Have you seen “Have You Seen Me”?

7. The Client • Global credit card company • Under an alphabet of government regulations • Under the gun to prove compliance with regulations and process improvement • “Can SharePoint do that?” (“Yes it can!”) • “What will it do?” (“We’re not sure yet!”)

8. STEVE • PM • Runs Training Division • Played in a band for years • BRIT • Problem Seek & Destroy • Apparently a Nintex expert • *Almost* moved to Siberia • DREW • Developer • New to SP • Grew up in Europe but as no accent • BILL • Jack-of-All Trades • Primary Training & Nintex Expert • Makes mead

9. Challenges • I thought compliance was a crime! • On a scale of 1 to 7 with 7 being…or, wait, was that 0 to 7, or… • Wetsuit timeline • First time team—geographically dispersed • Like “Now You See Me” without the sole purpose of crime/vengeance • Dependent on customer’s infrastructure, which had not been set up and whose administrators we did not have direct access

10. The Nightmare

11. The Nightmare Come True (a.k.a., the Reality) • “SCREENS” • “Cascading” • Weighted average • Printing • Tooltips • Validation • “Prompt” • Dozens of spreadsheets of raw exported data • From multiple systems of record • And multiple versions of spreadsheets! Emailed!

12. Risk Compliance 101 • Reg.Regulation, Mandate. Set by the Government that contains requirements • Req. Requirement contained in a regulation that must be complied with • IR Inherent Risk. Measures the amount of risk the business is exposed to, usually as inherent to their industry • QRM Quality of Risk Management. Measures the strength of steps taken to counter Inherent Risk • RR Residual Risk. Measures remaining risk exposure (IR – QRM = RR) • BPC Business Process Category, or Business Unit • BRA Bank Risk Assessment

13. Risk Compliance 101 Requirement BPC Mandate

14. Day 1: Information Architecture - Denormalization • “What is magic? Focused deception.” • One of the first, and most crucial steps of a SharePoint solution • How do we translate what we have and what we want into SharePoint? • Leap of faith • Because we can survive the fall better when we’re younger

17. Day 2 – Information Architecture - Getting Back to Normal(ized) • “The closer you think you are, the less you’ll actually see.”

18. 32 lists 11 user-facing lists 23 normalized data lists (tables) 3 management lists

19. Nintex – The Magic Curtain • Interface for manual data population mapping • Automated data mapping and assessment population • Calculating scoresBO0LeAN-CIS • Weighting and averaging scores for phase • Determining when an assessment phase is completed • Creating issues for weak elements and alerting assessor

20. “SCREENS” SCREENS

21. PAM Manual map of Requirements to applicable Product Types

22. Homepage

23. LOBCO IR • Pulls in data from the OCCO IR • Screen exists for each assessment • Three data views and a filter • Hyperlinked columns

24. Subfactor Rating • EditForm.aspx!! • Pulls in data from 2/3 lists • JQuery for validation • JQuery for tabs

25. Subfactor Rating - Guidance Tab • DVWP • Filters data using URL paramater • Interactive • Ability to add new item

26. Raw Subfactor Data

27. QRM Summary Screen • Displays all combinations of BPC & Req • Screen exists for each assessment • Two data views • Hyperlinked columns • Delete button

28. QRM Controls Rating • Editform.aspx • Scoring algorithm • Validation JQuery • Ability to add new item

29. QRM Training Rating • “Cascade” rating

30. Scoring & Weighting Tables

31. Filtered Normalization – End Result

32. RR by Requirement (and override) • Summarizes RR at each level • Allows override of RR at requirement level

33. Lessons Learned • SharePoint is not Excel • ASP buttons • Nintex is the missing link • Checkboxes = Ugh! • I jQuery and So Can You! • Codecademy • Can connect only one web part to a list form, but multiple on a site page • People LOVE Excel • It’s OK to be normalized!

34. @britkwaitbrittany.kwait@protiviti.com Qs? OR Cs?