Skip to main content

Tag: Best Practices

Security Considerations for Managing Project Information

How do we achieve balance between ensuring that project information flows freely and protecting sensitive information?
As project managers, one of our primary roles is to make sure information flows between those that need it to do their job and support the project. But we’re also responsible for ensuring that corporate information assets and strategic information about the project remain secure.

The 2005 edition of ISO 17799 (Code of Practice for Information Security Techniques) advocates a risk based approach to managing sensitive information. This applies equally to information flows in projects.

It’s well understood that achieving increased security usually occurs at the expense of the user and, in this case, project stakeholder expense. For example, certain files we may want to view may be subject to restricted access. It’s an extra step which serves to limit the exposure of information to those granted the privilege of access. Access may require an additional password or other authentication technique, adding yet more difficulty to the process of restricting the information on an ongoing basis.

So what do we need to consider when deciding how to protect sensitive information? We don’t wish to overburden project participants with access limitations, nor reduce efficiency in our project execution? We need a balance.

First, identify sensitive information and rank the risk of exposure. This will guide the level of effort you apply to restricting access to key project stakeholders. “Need-to-know” is the guiding principle here.

Second, you can review your project activities and resource allocations in terms of “separation of duties.” The idea here is to limit an individual’s ability to act irresponsibly (intentionally or accidentally) based on the information they have access to. Of course, clear lines of separation and an understanding of what individuals need to know is necessary for this to be effective. Segregating roles reduces the risk of collusion as well as protecting corporate assets.

Finally, “cross-training” can be used to increase the likelihood that the people with the right knowledge will be available to perform project activities at the right time. It ensures an alternative when individuals who have developed specific knowledge based on their access to privileged information become unavailable to support the project. The availability of key people should play into your assessment of risks regarding sensitive information.

By considering these three security principles, the appropriate level of protection can be applied to project plans based on the risk of exposure of the information assets. Plans can mitigate or avoid risks of exposing sensitive information and project delays due to the unavailability of key stakeholders.

Everything old will be new again

Toronto – Just as a great mechanic can extend the life of an older car, a project consultant could be the Mr. Goodwrench of a systems upgrade.

More than one-quarter (26 per cent) of chief financial officers (CFOs) recently interviewed said financial systems upgrades top their list of projects for which they are likely to bring in financial consultants over the next three years.

The survey was developed by Robert Half Management Resources, the premier provider of senior-level accounting and finance professionals to supplement companies’ project and interim staffing needs. It was conducted by an independent research firm and is based on interviews with more than 270 CFOs across Canada.

CFOs were asked, “In which one of the following areas are businesses most likely to bring in financial consultants or project professionals over the next three years?”

Their responses:

  • Financial systems upgrades ………. 26%
  • Corporate governance ………………. 13%
  • Mergers and acquisitions ……………….9%
  • Business process re-engineering …….8%
  • Turnaround management ……………… .5%
  • None ……………………………………………4%
  • Don’t know/no answer …………………. 35%

“Even during this current economic climate, many companies continue to replace or modify outdated financial systems to improve efficiency,” said David King, executive vice president of Robert Half Management Resources. “To help implement these initiatives, firms need highly skilled and experienced financial professionals for only a finite period of time.”

King added that the use of consultants to augment staff can result in less need for continual layoffs and rehiring due to business fluctuations. “Using project professionals is a cost-effective staffing strategy that can offer flexibility and savings as well as increased productivity, profitability and morale among existing staff.”

The national study was developed by Robert Half Management Resources. It was conducted by an independent research firm and is based on more than 270 telephone interviews with CFOs from across Canada.

Myths, Mistakes and Assumptions

Editor’s Comments

“Don’t assume” is advice that, over the years, has been handed out by those who have “been there” to those who haven’t yet been there. It’s advice well worth considering because many of these assumptions turn into traps. In Unquestioned Assumptions: Costly Mistakes, Don Wessels discusses how assumptions, often mistaken as standard business practices, go unquestioned during project manager selection, often with very negative consequences.

Regular contributor, Chris Vandersluis, revisits a subject he’s talked about here a number of times in the past. He says they have become a fact of life for senior management and, in Dashboarding Redux, he takes a look at the different types of dashboards available and how they can provide an onscreen view of key performance indicators, with your choice of how and what to display. But, he says, beware of possible pitfalls.

Blogger Andrew Miller, questions the need for budgeting in running a project, but acknowledges that budgets are important as long as their sensibly set and approved. Mike Lecky weighs in with some thoughts on the ongoing discussion about the PMO.

If you’re reading this during ProjectWorld in Toronto, we hope you’re finding your visit rewarding and that you’ll drop by our booth to say hello. Wherever you are, we hope you find this a thought-provoking issue of Project Times and that you’ll share your thoughts with us.

Spreadsheets: The Most Expensive PPM Tool You Didn

Spreadsheets are everywhere. Microsoft estimates there are 450 million users of Excel world-wide. And it is no wonder – the spreadsheet is a very handy tool. People use them for many purposes: from simple lists and tables to advanced calculations and graphs.

They can be a great productivity-enhancing tool and offer many advantages including:

  • Ease of Use – Most people already know how to create spreadsheets or could learn very quickly 
  • Availability – Spreadsheet applications are on almost every laptop and PC, just a click away. as a result, they have become a standard form of communication between computer users. 
  • Flexibility – Spreadsheets allow even non-technical people to do things they never thought possible without learning a programming language 
  • Inexpensive Start-Up – Because spreadsheets are typically already installed on most laptops and PCs, and creating a spreadsheet can be very fast and easy, they have very low start-up costs.

For these reasons, spreadsheets are the project tracking and project portfolio management (PPM) tool of choice for many organizations – both large and small. They offer a very quick, adaptable and inexpensive way to create a project inventory list from scratch. Then it is very easy to grow the use of spreadsheets for PPM from there. We create spreadsheets of our project backlog, spreadsheets of our active projects, and spreadsheets of our finished projects. And, it doesn’t stop there. We also create additional spreadsheets for our resource lists with availability projections and spreadsheets of our project plans. Some even create project scope statements and other documents in spreadsheets.

So, what does it take to implement PPM on spreadsheets?

Implementing PPM on spreadsheets generally requires the creation of multiple spreadsheets. One reason for this is that the information needs for decision-making change as the project progresses through the life cycle. For example, while the project is still in the pipeline, it is important to understand project alignment characteristics, value, the requested due date and the estimated start date. However, after the project is initiated, of greater concern are the project’s health, progress and the likely finish date. Another reason for multiple spreadsheets is that certain functions in the decision process do not lend themselves to a project list format. For example, if a scoring model is used for value assessment, this is typically done in different spreadsheet from the project lists.

The flexibility and ease of use of spreadsheets also leads to the creation of multiple personalized spreadsheets within an organization, often called the “not invented here” spreadsheet. This is an all-too-common occurrence when people who are not satisfied with the standard spreadsheet create their own personalized version that looks “just” like what they want. The result is multiple spreadsheets with the same information and the opportunity for data inaccuracies.

The spreadsheet was not built with the idea of multi-user access. However, some of the objectives of PPM are to create visibility, communicate information and facilitate discussions. This requires the information within the PPM spreadsheets be shared, consolidated and sometimes reformatted for other purposes. As a result PPM spreadsheets are typically emailed throughout the organization. Often a great deal of manual work is required to consolidate or reformat the information. Alternatively, some organizations attempt to set up shared spreadsheets, resulting in check-in and check-out requirements, and user access controls that are difficult to establish and manage.

True project portfolio management also requires a governance model and controls with an integrated workflow. Having a defined process with decision points and requirements for movement from one stage to the next allows an organization to remain in control, be consistent and make improvements. Spreadsheets were never designed to be able to implement a workflow, though there is no question that a PPM workflow could be designed and created by a spreadsheet guru.

“My solution is really quite cheap”

Since spreadsheets are so pervasive and inexpensive to create, they are perceived as a free solution for PPM. One blogger, who created his own set of PPM spreadsheets, recently commented, “My solution is really quite cheap.” However, he goes on to say, “But there is, of course, a manual overhead.” It is this “overhead” that can turn the spreadsheet from a cheap tool into a very expensive PPM solution.

Performance management consultant and founder of Hired Brains, Inc., Neil Raden wrote: “The benefits of spreadsheets are undeniable; however the drawbacks can be significant.” According to Raden, people have a tendency to be more aware of upfront costs than of the ongoing maintenance costs of using spreadsheets. With regard to PPM, the problems usually start occurring when the spreadsheets grow from a personal productivity tool into a departmental solution used by multiple people. Raden goes on to state that, “the ongoing effort to support a complicated system, built with components that were never designed to operate in a collaborative manner, is very significant.”

“Don’t worry, it is just a little chunk of ice”

Just like with the iceberg metaphor where you only see the tip, there are many costs associated with spreadsheets that are not apparent initially. In the end, all those positive characteristics of spreadsheets also lead to hidden costs and risks. These costs are generated from the creation and use of multiple spreadsheets, the attempts to collaborate and share information from these spreadsheets, and the fact that spreadsheets were not designed for certain PPM functions. The resulting hidden costs include:

  1. Wasted Time

    Spreadsheet users waste hours of time trying to consolidate information from multiple spreadsheets and transferring selected information from one spreadsheet to another. Individual users also waste time trying to perfect their own view by resizing columns and rows, justifying text and many other beautification activities that really don’t add value.

    For the University of Oklahoma Information Technology organization, spreadsheets were the standard for project lists. Mitch Seal, a project manager for OU commented, “Everybody had their own personal version of the projects and information in custom spreadsheets. These spreadsheets were rarely maintained on a regular basis. This made consolidation of information very time consuming and, in some cases, impossible.”

    With multiple spreadsheets and duplications of data, much time is wasted in looking for and correcting inaccuracies in the data. Or worse, these inaccuracies never get corrected and create a risk to the organization.

    With differing skill levels from the users of these spreadsheets, often there is time wasted as the builder of the spreadsheet explains the intricacies of their work, so others can use it. And, given that the creators are constantly modifying their work, there is a constant need to explain the changes. 

  2. Inefficiencies

    Spreadsheet Inefficiencies occur in multiple areas. The preferred method of communicating information from spreadsheets is to email them to others. In some cases, this is completed instantaneously. However, in other instances, there is elapsed time between when the spreadsheet was emailed and when it was opened. This leads to delays in work and decisions. Basically, the information needed might not be available to a person when they need it.

    Emailing of spreadsheets also leads to the potential for multiple versions of the same spreadsheet being updated independently, and even more inefficiencies due to duplications of effort. Special reporting also causes another inefficiency when certain people only want to see a subset of the information in the main spreadsheets. This requires the generation of special views of the data that can be communicated to these people – and even more versions of the spreadsheet.

    On occasion massive PPM spreadsheets are created over time with no thought to the value of the additional data or the compounding problems in using the new creation, causing data overload. More data does not always lead to better decisions. Often it leads to paralysis or “minertia” – the focus on minutia that leads to inertia. Along the same lines, spreadsheets have so many neat features, that we often over-analyze the information, creating new filters and generating pivot tables of data to our hearts content, almost always an inefficient use of time.

  3. Risks

    There is no doubt that the use and communication of spreadsheets can lead to higher risks for data security. With the portability of spreadsheets, it is very difficult to control access to them, both internally and externally. It is very easy to send a spreadsheet to a destination outside an organization’s control, whether intentionally or accidentally. Having copies of the spreadsheets and data in multiple hands only compounds the potential risk. To a minor extent, there is also a potential risk of making a bad decision as a result of the data inaccuracies that often occur.

Is there a better way?

Spreadsheets are a valuable tool and a great place to start at the beginning of a PPM initiative. They are a great personal productivity tool because of their availability, ease-of-use and flexibility. And, they will always play a part in PPM for certain types of reporting and analysis. However, they are not “free” of cost and become a very expensive tool when trying to use them for a departmental PPM solution.

It does not take much of a productivity gain to justify the cost of some of the more affordable PPM solutions on the market. If your employees waste as little as one hour per day with PPM spreadsheets, the costs can be substantial.

Orbus, Inc. an industry leader in developing display and exhibit products based in Chicago, Illinois was faced with this situation. They managed their portfolio of projects and resources on a series of spreadsheets that were constantly being updated and emailed throughout the company. According to Steve Westcott, Product Development Manager for Orbus, “We wasted a lot of time waiting for spreadsheet updates, emailing them across time zones and consolidating data. Using a tool specifically designed for PPM we were able to increase our productivity by 25%.”

Mitch Seal of OU also implemented a PPM solution and commented that, “It allowed us to consolidate all our project information into one solution and has the added benefit of giving us the capability to control our process.”

Summary

The proliferation of spreadsheets for PPM is an indication that users have unfulfilled needs. With this, there may be resistance to a single PPM solution and the abandonment of the more familiar spreadsheet. Spreadsheets are quick and easy. Although it is difficult for any PPM solution to meet this standard, it is critical that the solution be non-complex and easy-to-learn. It is also helpful to provide familiar spreadsheet-like views and not try to over-automate the process. This will just add unneeded complexity. Organizations have implemented a sophisticated PPM tool only to see their users fall back to the more familiar spreadsheets for these reasons. If you want your PPM solution to actually be used by your organization, keep it non-complex and used as an aid for the decision-making that will increase the value delivered by your department to the organization.

 


Steve Chamberlin is the CEO and Managing Partner of 3 Olive Solutions, LLC (www.3olivesolutions.com), a provider of Portfolio Intelligence™, an affordable SaaS PPM solution for organizations ready to make the transition from spreadsheets to an integrated, process-oriented solution. He can be reached at 847 993-1078.

References

Raden, Neil, “Shedding Light on Shadow IT: Is Excel Running Your Business?”, DSSResources.COM, 02/26/2005

Darryl Lyons’ Blog, http://dangermoose.blogspot.com/2006/01/project-management-using-spreadsheets.html, accessed on 03/07/2007

Microsoft and Excel are registered trademarks of Microsoft Corporation

Portfolio Intelligence is a registered service mark of Three Olive Solutions, LLC

 

More Top 10 Tips for Project Management Success

Want to sharpen your project management skills and up your “projects successfully completed” average? Here are 10 tips to help ensure that your project is on track and that you’ve covered the essentials, right from the start.

  1. Be clear about the business result that your project has been commissioned to produce. 
  2. Plan the work the best way to get it done, then crash and fast track to get to the requested date.
  3. As you complete an iteration of planning, be sure to desk test this iteration against the previous iteration to verify you are still in scope. 
  4. Build completion criteria for each task. Completion criteria will keep both the project manager and the person working the task clear about what “done” looks like. 
  5. Team norms will help your team work together effectively. 
  6. The effect of taking on a change request is not always equal to the number of days provided in the estimate. Be aware of the incremental effect. 
  7. Build cost estimates for every task regardless of whether you are held accountable for a budget or not. You need the practice and later you can use these figures for Earned Value Management. 
  8. Calculate the cost of quality at the end of the planning phase and several times during the execution of the project. Doing this will help hone your skills to deliver a better quality project. 
  9. Build an effective plan to work with your executives the same way you work with your team. 
  10. Have an attitude of success. It’s contagious.


Claudia Bacca, PMP, PMI Certified OPM3 Assessor/Consultant, is an independent project management consultant, trainer and lecturer. She has lectured at private venues and PMI chapters across the world. The tips are based on her new book, Project Management for Mere Mortals, published by Addison-Wesley Professional (ISBN 0-321-42345-3):

Bacca has more than 20 years of project management experience and serves on the leadership team that produced the Project Management Maturity OPM3 standard. She contributed to Kim Heldman’s best-seller PMP: Project Management Professional Study Guide, and also served as its technical editor. She is coauthor of the PMP Project Management Professional Study Guide Deluxe Edition.