Transcript Slide 0
A “Collaboratory” where Solutions Architectures are derived from industry best practices and lessons learned An emerging public/private partnership where PMs can get their programs to green in a conflict-free environment and risks of failure are mitigated September 2003 Mark Nelson [email protected] www.ICHnet.org/sail.htm 703 768 0400 This document is confidential and is intended solely for the use and information of the client to whom it is addressed. Recommended Actions Review SAIL value proposition with Govt IT management team Review challenges, inspect Approach, listed to agency advocates Review past performance work leading to this initiative (OSD HA, DARPA, Discovery) Conduct Analysis of Alternatives; how does this compare with current approaches. Identify current problem area for pilot. Solicit industry/agency participation Initiate to low cost, low risk prototype with like minded agencies/industry partners ICHnet.org Company Confidential - Copy right 02-15-03 1 Table Of Contents The Need, Concept and Vision Value Chain Participants Outcomes SAIL Concept of Operations Value Proposition “... the concept of the Interoperability Clearinghouse is sound and vital. Its developing role as an honest broker of all interoperability technologies, no matter what the source, is especially needed. Such efforts should be supported by any organization that wants to stop putting all of its money into maintaining archaic software and obtuse data formats, and instead start focusing on bottom-line issues of productivity and costeffective use of information technology.” Assessment by Leading FFRDC, 2000 2 Ourto advance mission collaborative architecture mechanisms that assure the successful modeling of enterprise technical solutions aligned with business drivers in an open, and conflict free, market place ICHnet.org Company Confidential - Copy right 02-15-03 3 The Challenge: New IT Initiatives (eGov, Web Services, DHS) lack access to the right set of resources and industry best practices necessary to cycle through the pre-acquisition planning and architecture process Lack of reliable and timely solution architecture data leads to implementation failure! – Research indicates that 34% of current IT failures (72%) is due to problems in aligning optimal technology with business needs (Dec 98 Information Week Feature Article on why IT Fails) – Fast paced IT market, combined with high failures rates, dictate a change in current technology adoption process (Clinger/Cohen Act) – Both business requirements and technology change before most agencies can get through traditional COTS evaluation process; research, testing, prototyping. (AF SAB Report, April 2000) – Security and Interoperability considerations rarely addressed, yet critical when implementing commercial solution (White House Draft Cyber Security Strategy). – Stake holders need a common criteria and standardized vetting process by which they can communicate business needs to emerging technical solutions (IAC EA SIG) ICHnet.org Company Confidential - Copy right 02-15-03 4 Critical Success Factors (CSF) for making architectures actionable for major IT programs CIOs, PMs and Government Leaders need; Business context of emerging standards and commercial offerings More timely and cost effective mechanisms for accessing market capabilities in a conflict free environment What assures success? Clear and unambiguous architecture views that enable clear Stake Holder agreements (Value Chains, CBA) where business needs can be aligned with proven solutions Means of linking architecture and acquisition processes while reducing risk of program delay and failure Partnership with community of interests (agencies business lines, CIOs, Vendors, Integrators) to share best practices and implementation lessons learned. IF THESE RESONATE WITH YOU, then SAIL is the vehicle for getting there ICHnet.org Company Confidential - Copy right 02-15-03 5 What are the proposed “products” of SAIL A public/private partnership where agencies, vendors, integrators, and standards groups collaborate development and certification of Solution Architectures, Business Cases and AoA. An Architecture Resource Center that bootstrap agencies understanding and application of emerging technologies in an architecture context A virtual government/industry solution architecture certification lab that leverages the existing market capabilities and implementation experiences of industry A non-profit advisory service that puts OMB reference models in the hands of PMs, Architectures, Business Lines and Integrators A shared knowledge exchange where re-useable solution architecture templates are continuously updated by a large community of interests and stake holders A new e-Gov and DHS initiative that provides agencies with the means of accessing critical expertise necessary to get from architectures to implementation reality. ICHnet.org Company Confidential - Copy right 02-15-03 6 Table Of Contents The Need, Concept and Vision Value Chain Participants Outcomes SAIL Concept of Operations Value Proposition Excerpt from EDS Business Case Analysis: “The leveraging of our efforts with other parties through the formulation of a non-profit consortium is the most cost effective and efficient way of achieving the goal of interoperability assurance among heterogeneous systems. This ICH capability will augment our capability and provide us much more information about products, standards, and viable enterprise solution sets than we could ever realize through our own internal efforts.” 7 Value Chain Eco Systems - Inputs/Contributions Government Agencies (State & Federal) • • • • Technology Vendors & VARs Enterprise Requirements As-Is Architecture Models Regulatory Requirements/Constraints Implementation Best Practices Systems Integrators • • • • Architecture/Planning Services Integration Best Practices Domain Knowledge Integration References • Best of Breed Offerings • Compliance Assertions • Customer References OMB Reference Model Templates Conflict Management Govt wide Contract Vehicle COTS Component Directory Best Practices Repository Industry Outreach ICHnet.org Company Confidential - Copy right 02-15-03 Standards & Industry Groups • Emerging Standards • Architecture Methods (MDA, RM-ODP, ICH AAM) • Certification Services • Industry Out reach 8 Value Chain Eco-System - Outputs/Benefits Government Agencies (State & Federal) Technology Vendors & VARS • • • • • • Stake Holder Agreements Documented Business Case Industry accepted Solution Architecture Analysis of Alternatives Working Prototype Compliance (GPRA, A130, A119, FEAPMO, DoD 5000 series) • Acquisition Roadmap • Industry Best Practices • Managed Conflicts of Interests • Vetted Business Case for Products • Re-usable Case studies • Contract Vehicle for prototype efforts • Certified Solution Templates • Managed Conflicts of Interests Education & Mentoring EA Certification Solution Templates Risk Mitigation EA Mentoring/Training EA Resource Directory Systems Integrators • Govt wide contract vehicle for planning/architecture offerings • Low cost Market Research Data • Managed Conflict of Interests • Certification of Integration Capabilities • Re-usable solution frameworks ICHnet.org Company Confidential - Copy right 02-15-03 Standards & Industry Groups • Domain Solution Frameworks • Validated Standards Profiles • Business Case for Standard adoption 9 Value Chain View-points Technology Vendors (ISVs) Define offerings in context to a broader solution by domain Provide level playing field for communicating product fit to customer needs Standards Community Obtain business needs for specification enhancements Map standards to business needs Independent validation of case studies/success stories Define inter-relationships with other standards Expose products to enterprise buyers exactly when they’re looking for them Map commercial products features and interfaces to standards specs Capture implementation/testing results Validate Architecture Soundness Establish common architecture nomenclature ICHnet.org Company Confidential - Copy right 02-15-03 10 Value Chain View-points System Integrators/Management Consultants Advise agency leadership and PM in conflict fee zone Certify integration capabilities, domain knowledge, technology expertise Enterprise Users Align business needs with critical integration expertise Ability to align business needs with critical standards, products, and integration services Certify competency of EA methods and tools Improved mapping of business needs to IT investment Strengthen role in IT value chain Bootstrap application of FEA guidance to major programs Leverage existing solutions partnerships Reduce time and cost of pre-acquisition process Reduced Solution Development Life-Cycle risk Access to best practices in re-usable form ICHnet.org Company Confidential - Copy right 02-15-03 11 Table Of Contents The Need, Concept and Vision Value Chain Participants Outcomes SAIL Concept of Operations Value Proposition “The ICH repository data and analysis methodologies was very helpful in supporting a quick turn around for [Information Assurance] section of COTS security products. Highly detailed ICH technology domain and product evaluation data comprised over 60% of this urgently needed [architecture] report”. GCPR, Program Manager, Northrop Grumman/PRC 12 ICH is ushering in a new Value Chain Assessment approach to model, align, and validate complex business strategies into viable solutions ITERATIVE/VALUE-BASED METHODOLOGY (weeks to months) Strategy Profiling and Architecture Alignment Iterative Prototyping • Iteratively evaluate / refine prototypes • Capture and integrate citizen/customer feedback • Constant review and update supporting technologies • Iterative refinement and validation of business strategy and I/T solutions • Significantly shorter delivery timescales • Avoidance of “big-bang” approaches • Focused stakeholders and expectations Value Proposition • Develop proof-of-concept and pilot prototype applications • Measure value of short-term targets • Advance / refine as necessary Shared/Evolving Vision Business Modeling and Validation Domain Experience/SME • Develop product / service strategy with citizen/customer • Identify linkages and alignment to Federal and Agency Enterprise Architectures • Define short-term targets to help momentum and assist change • Successful target realization Value is captured and measured in iterative implementations Business strategy evolves based on lessons learned and customer feedback ICHnet.org Company Confidential - Copy right 02-15-03 13 Value Prop: Information Sharing and collaboration significantly reduces time, cost and risk transitioning from architectures to implementation reality Confidence Level High Low S.A.I.L. Market Place Risk Delta Cost/time Delta Acceptable Risk Level Project A Project B Project C Strategy Discover Architecture Validation Acquisition Implementation Validation Resources (cost & time line) Pressure to field solutions without vetted solution architectures is #1 cause of failure! ICHnet.org Company Confidential - Copy right 02-15-03 Redundant Research and Testing SAIL best practices collaboratory 14 SAIL Mechanisms: Accelerate the transition from architectures to implementation reality. To bootstrap Agency’s application of FEAPMO Reference Models in architecting complex solutions To mentor development of e-Gov/DHS solution architectures that are business driven, actionable and compliant To establish a set of normalized, re-usable solution frameworks to accelerate the architecting, development and implementation of Cross-Agency e-Gov initiatives To enable transforming of common e-business requirements into interoperable COTS solution suites that provide immediate ROI To provide a formal process to enable adoption Component-Based Architectures; To eliminate redundancy and reduce cost by providing agencies with a common, cross agency solution architecture and research lab. To provide an joint government/industry clearinghouse of re-usable and normalized architecture “blueprints” in a common form (ie. OMG MDA, ebXML). ICHnet.org Company Confidential - Copy right 02-15-03 15 Table Of Contents The Need, Concept and Vision Value Chain Participants Outcomes SAIL Concept of Operations Value Proposition “The ICH repository data and analysis methodologies was very helpful in supporting a quick turn around for [Information Assurance] section of COTS security products. Highly detailed ICH technology domain and product evaluation data comprised over 60% of this urgently needed [architecture] report”. GCPR, Program Manager, Northrop Grumman/PRC 16 To assist agencies in the rapid assembly and realization of their eGov and DHS integration initiatives, a solution validation center is needed Solution Architecture Center Objectives: – Act as an honest broker to balance strategic vision and reality – Capture business requirements in OMB Reference Model terms (BRM, PRM, SCRM, DRM, TRM - A130) – Enable greater stake holder participation and oversight (congress, CIO, CFO, COO, users, suppliers, industry partners) – Streamline business case to solution architecture process (S803) – Provide industry outreach - leverage standards, COTS and commercial best practices (OMG A119 compliance) – Create a “mock-up” of the solution that validate stakeholder needs prior to acquisition – Enable multiple agencies/states to collaborate on a common solution architecture. – Share lessons learned and solution architecture templates for reduced risk, and faster time to market Step 1 Identify Solution Architecture to begin strategy realization Step 2 Select components/ build solution components Step 3 Rollout to stakeholders for validation of strategy Step 4 Define production requirements, release for production build Note – The Prototyping/Solution Center does NOT build the Production Version – Protect stake holders from Conflict of Interests concerns during the planning and architecture process! ICHnet.org Company Confidential - Copy right 02-15-03 17 SAIL Steps Agency given SAIL lab business requirements, existing TRM, limitations SAIL Industry partners help normalize into BRM format, identify related best practices SAIL helps develop and reuse normalized SRM templates that align with business needs Agency confirms SRM components. Creates balanced scorecard and common criteria. ICH helps agency issue RFI to industry using SRM templates. SAIL helps with outreach via standards partners and other outreach vehicles. Prospective offers participate in SAIL down select process. Offerers fund own vetting process and provide normalized product profiles based on SRM templates. SAIL partners performs down select process based on vendor submission and analysis of alternatives SAIL partners who make down select participate in funded prototype development resulting in at least two approaches Based on success of efforts, govt. issues RFP for major deployment. ICHnet.org Company Confidential - Copy right 02-15-03 18 How SAIL supports existing EA Process Using re-usable solution templates SAIL Assessment Framework Business Requirements Proposed Concept Aligned per IT Strategy Normalize BRM Language 1 (SELECT) Develop Business Case Alignment BRM Templates Acceptable Compliance Industry Self Vetting Process SAIL Solution Templates 4 3 Report Evaluate Architecture Compliance Reusable SRM Templates Assess Business Case Proposal Assess Technology Compliance 2 TRM Standards Compliance Assessment Unacceptable Conformance Reusable Best Practices Templates Enterprise Design Patterns (SELECT) Project Initialization Reusable SRM Templates Unacceptable Compliance Disapproved 5 Assess Waiver/ Exception Request Audit Reports ICHnet.org Company Confidential - Copy right 02-15-03 Architecture Roles Validation Points 19 Accelerated version of ICH’s EA IV&V Process Agency PMs Normalize BRM Business Requirements, Policy, & Best Practices Guidance Models Business Strategy Validation Business Models Bill of Materials Reusable COTS Component Architecture Templates Value Chain Analysis Solution Exist? Certified Solution Architects Business Patterns Yes Align and Validate Solution Best Practices Alignment no COTS & Integration Capabilities Solution Architecture Templates Model New Solution MDA Service Components MDA Service Components Solution Architecture Validation and Demonstrations Industry Best Practices & Standards no AoA Complete? ICHnet.org Company Confidential - Copy right 02-15-03 Solution Validation Pre-Validated Reference Models BRM Normalized PRM Yes Solution SRM Frameworks TRM DRM OMB Approved (300b) 20 SAIL “exchange” uses SRM to enable partners to model and align business needs to technical solutions Functional Traceability BRM Business Drivers & Metrics BRM Service Elements & Metrics (SRM) Core Business Mission Objectives Associated Metrics Performance Metrics Business Processes & Infrastructure Appl Service Components Layer 1 Infrastructure Service Components Layer N BRM Technical Application Solution & Layer 1 Metrics Effectiveness/Efficiency Interoperability/Security Solution Repository Contribution to Fulfillment Reference Models Common Infrastructure Layer M ICHnet.org Company Confidential - Copy right 02-15-03 21 Table Of Contents The Need, Concept and Vision Value Chain Participants Outcomes SAIL Concept of Operations Value Proposition OFFICE OF THE SECRETARY OF DEFENSE, DEPUTY CIO: "Since the value of the ICH to our programs increases rapidly through results sharing, we encourage the defense community and IT industry to participate directly in the public service initiative in terms of sponsorship and lessons learned" 22 Conclusion Operationalizing the FEA Reference Models can be accelerated by a partnership between government and industry – SAIL increases the number of vested (and educated) stake holders in Solution Architecture definition process – SAIL increases likelihood of making architectures an actionable business tool that enables true transformation – SAIL enables sharing of existing testing and implementation results to better assure implementation success – SAIL provides a high integrity registry of market capabilities in a business value context 23 Case Studies: Early adopters demonstrate benefits ICHnet.org Company Confidential - Copy right 02-15-03 24 Case Study: World Largest Healthcare Project; $4.1 Billion Govt Wide eHealthcare program Challenge: develop enterprise architecture for patient record integration Applied ICH Architecture Immersion Program – Developed architecture validation criteria to GCPR Program Office – Developed product selection guidelines for Prime Contractor – Applied ICH Architecture Assurance Method Outcomes – Enabled award based on unambiguous design specs – Augmented UML/MDA to address legacy and COTS capabilities – Ensured viability of chosen technologies Met HIPPA requirements Met security requirements Provided integration framework for web infrastructure – Assured implementation success ICHnet.org Company Confidential - Copy right 02-15-03 25 Case Study: World Largest Media Company; Discovery Channel Challenge: Select enterprise web infrastructure to integrate stovepipe applications Applied ICH Solutions Validation Program – Performed architecture baseline assessment – Provided guidance and selection support for Web-app server, VPN, portal, last-mile wireless connectivity Outcomes – Validated requirements against marketplace offerings – Improved confidence in technology decisions Delayed VPN implementation Purchased Web application server, database, and media products Deployed system without a hitch – Significantly reduced time/cost to implementation ICHnet.org Company Confidential - Copy right 02-15-03 26 Case Study: World Largest Intelligence Agency Challenge: means of integrating diverse communities via the web Applied Architecture Validation Program – Developed common criteria for emerging portal market – Evaluated selection of Enterprise Portal for pilot project – Developed impact analysis on enterprise architecture – Maintained view of evolving marketplace Outcomes – Enhanced and normalized portal selection criteria – Identified key features/functional areas for testing – Applied commercial best practices for successful production rollout Improved understanding and alignment of technology to problem domain ICHnet.org Company Confidential - Copy right 02-15-03 27 Case Study: GSA Financial Systems Enterprise Architecture Challenge: making EA actionable, eliminate redundant Financial Mgt. Systems Applied Value Chain Analysis – Developed metrics for FMS implementation success – Evaluated current EA products – Developed Value Chain assessment model – Moved EA effort into CFO office Outcomes – Enhanced and normalized existing EA products – Identified key business processes required for implementation – Enabled senior management to interact with EA process for the first time. – Helped GSA go from “red” to “green” based on Value Chain effort – Identified over $100 M in potential savings via ICH Value Chain Approach ICHnet.org Company Confidential - Copy right 02-15-03 28 Backup Slides ICHnet.org Company Confidential - Copy right 02-15-03 29 Value Chain Benefit: Agency Leadership, Congress, GAO & OMB Policies Congress, Agency Leadership: COO’s, CFO’s Auditors Provides view into planning process Establishes metrics for mission fulfillment Aligns IT Capital investment with Agency Mission Leverages industry best practices/lessons learned Creates Understandable & Actionable Project Transition Plans Catalyst for implementing President’s Management Agenda Compliance ICHnet.org Company Confidential - Copy right 02-15-03 30 Value Chain Benefit: CIO, CTO, Chief Architects, Chief Security Officer IT Management: CIO/CTO/CAO: IT Program Plans AoA, Resolved Identifies viable COTS solution frameworks Quickly Models Architectures and Inferences to Identify Linkages with Strong COI and Weak “Track Records”. Saves and Shares Models using common architecture terms (MDA) Provides “What If” Modeling and Analysis Provides In-Context, Real-Time, Just-In-Time Research Data Use of SAIL Feeds Data Back to Knowledge Base Congress, Agency Leadership: COO’s, CFO’s Auditors ICHnet.org Company Confidential - Copy right 02-15-03 31 Value Chain Benefit: Solution Integrator & Consultants IT Management: CIO/CTO/CAO: Re-usable BluePrints Integrators Integration Skills Provides Solid Evidence for making COTS decisions Shares Integration Success Record with Potential New Customers (Who are Looking!) Finds Potential COTS Component Matches Based on Prior Similar Context Successes Provides “What If” Modeling and Analysis for component composition Provides Design Differentiation to Enhance Quality Marketing Use of Tool Feeds Data Back to Knowledge Base Congress, Agency Leadership: COO’s, CFO’s Auditors ICHnet.org Company Confidential - Copy right 02-15-03 32 Value Chain Benefit: Standards Bodies and Industry Groups IT Management: CIO/CTO/CAO: Standards Templates Integrators Captures Use-Cases that Support and Justify Standards Models Correct Use of Standards in selection COTS products Links Pertinent Standards to Products Features/functions Provides Dynamic, but Solid Compliance Record (A119) Enable collaboration between disparate industry groups Standards & Industry Groups Adoption Congress, Agency Leadership: COO’s, CFO’s Auditors ICHnet.org Company Confidential - Copy right 02-15-03 33 Value Chain Benefit: COTS vendors, Component Builders, Small Businesses IT Management: CIO/CTO/CAO: Integrators Standards Development Organizations Provide Buyers with the Exact Product Information they Need When They Need It Certifies Vendor Claims Based on 3rd-Party Validation/History Data Specifications Increased Buyer’s Chances for Successful Use of Vendor Product --> Happy Customers! References Generates normalized COTS solution blue prints Congress, Agency Leadership: COO’s, CFO’s Auditors ICHnet.org Company Confidential - Copy right 02-15-03 Technology Adoption & COTS Vendors/ Component Builders Small Businesses 34 SAIL Program Roll out: Steps to Success Validated Need through; AF SAB, ECCWG, OMB SAWG and IAC EA SIG recommendations Established COTS selection criteria (common criteria) to align with business needs Developed Component Architecture Templates, load into ICH Solution Repository Established EA IV&V GSA Schedule 70 for Agency Wide Usage Supposed IT Reform objectives; FEA-PMO, PMA, S803 Objectives (e-Gov Act) Established Educational Program to enable transformation; SecurE-Biz .net Secured advocacy from leading standards and industry groups (PSC, OMG, ICH, CCIA, CEG, INCOSE) Secured support from leading agencies (GSA, Homeland Security, FAA, SBA, Interior, OMB, GAO, NSA, Army) Securing industry Agreements & Commitments with prospective partners (35%) Establish a Pilot program. Secure Matching Funds from e-Gov Fund, States and Industry Secure agency agreements/support. Develop task orders via new GSA FED SIM Contract Vehicle Stand up virtual SAIL facilities and e-Solution Portal ICHnet.org Company Confidential - Copy right 02-15-03 35 S.A.I.L. Life Cycle Toolkit Recommendation Integrating proven methods and tools in a collaborative environment SAIL Tool Proposed Operationalized Methods/Tools EA Planning; NASCIO EA Toolkit, ICH Architecture Assurance Method Enterprise View; IEEE-1471, OSI-Reference Model for Open Distributed Processing DoD Business Modeling: DoD Architecture Framework (C4ISR), OMB BRM Civil Agency Business Modeling: ICH Value Chain Analysis, CSC Catalyst, Model Linkage; OMB SRM, ICH Business Alignment Method Application Modeling; OMG Model Driven Architecture (MDA), OMB TRM Component Modeling: ICH DCAM & SEI Component Architecture Guidance FEA Repository; FEAMS, METIS, ICH COTS Component Repository EA Maturity GAO EA Maturity Model Information Modeling OMB DRM, Entity Relationship Diagram EA Shared Best Practices SecurE-Biz Solution Architecture Training Program ICHnet.org Company Confidential - Copy right 02-15-03 36 Example: Vendor supported onLine directory enables discovery ICHnet.org Company Confidential - Copy right 02-15-03 37 Example: Shared research reduces life-cycle times and risk ICHnet.org Company Confidential - Copy right 02-15-03 38 Example: Aligning technical needs with Business Drivers ICHnet.org Company Confidential - Copy right 02-15-03 39 Example 2: Creating a balance score card for COTS selection ICHnet.org Company Confidential - Copy right 02-15-03 40 Open Source Architectures: Building on ICH’s COTS Component Repository ICHnet.org Company Confidential - Copy right 02-15-03 41 S.A.I.L. Public/Private Partnership Getting agencies to “green” in a conflict-free zone A collaborative, public service initiative where agencies can share insights into emerging technologies and testing data in a conflict free zone Means of facilitating development of business cases, OMB Reference Models, and analysis of alternatives (product/standards choices) A public/private partnership to establish directory of proven and interoperable solution templates (and necessary integration capabilities) Industry supported initiative that puts commercial offerings (both products and services) in contextual architecture terms simply and quickly based on implementation/testing best practices data Clearinghouse of re-usable (and normalized) architecture frameworks for both government and industry use A consortium of standards bodies, vendors, and users working together to advance President’s Management Agenda; FEA-PMO, e-Gov, A119, A130, DoD 5000 series ICHnet.org Company Confidential - Copy right 02-15-03 42