Indranil Guha, Head of IT Infrastructure at Commercial Bank of Dubai spoke at the CIO Middle East Event April 2013

1. Indranil Guha
22nd April 2013
AGILE IT
RIGHT ARCHITECTURE AND SIMPLICITY TO GAIN COMPETITIVE
ADVANTAGE

2. Sluggish & Traditional IT
 Complex Architecture and Design
 Tightly Coupled System and their Functionalities
 Too Many Silos, Proprietary Protocols & Interfaces
 Complex & Expensive to Sustain and Upgrade
 Availability ? Reliability ? Maintainability ?
 Performance Issues? Slow Troubleshooting?
 Lacks Automation, Process Orientation & Controls
 Human Resource Intensive & Intense Dependencies
 Poor Cost Benefit Ratios
 High Turn-Around Times

3. Agile and Efficient IT
 Supple and Quick to Deliver
 Strategically Aligned – IT Strategic & Tactical Plans
 Master & Blue-Printed Architecture
 Modular and Loosely Coupled
 Process Oriented, Workflow Based & Automated
 Simplicity & Security is well Embedded
 Well Thought of and Right Combination of:
 Physical vs. Virtual
 Insourced vs. Outsourced
 On Premise vs. Cloud (Private, Public or Hybrid)
 Training, Up-Skilling, Succession Planning
 This IT - THINKS DIFFERENTLY !!

4. 3
1st Things 1st - Thought Transformation
 COMMUNICATION: Does the FULL IT TEAM know your
vision?
 ALIGNMENT: Do you think you are well understood?
 BELIEF: Do they believe in your Vision & Roadmap?
 Clear ROADMAP & Measurable BENEFITS?
 QUICK WINS vs LONG-TERM GAINS
 SHARE & REJOICE SUCCESS
 REWARD: Change Agents & Key Drivers
 Identify TACTICAL & TECHNICAL CHAMPIONS
 Create MASSENGERS of the new era

5. 4
Architectural Revamp
Concept
PoC
RFPSelection
Project
Sign-Off
Core
Architecture
Team
(CAT?)
 Form a Core Architecture Team
 Architect Systems in-line with the BIG
PICTURE
 But Design Loosely Coupled Subsystems &
Functions
 A Well-Defined & Mature SDLC
 Embed the Essential Components in Every
Subsystems
• Security
• Resilience
• High-Availability & DR
• Error Handling
• Monitoring Capability
• Elasticity
• Logging for troubleshooting – Time-Stamping
Ensure That This Team Visualizes
Functionalities
(not Servers, Databases & Applications)

6. 5
Building Blocks Towards Agile IT
AGILE IT
 Enterprise Architecture
 Modular Infrastructure, Application & Security - SOA
 Infrastructure
 Virtualize Servers – TCO, Provisioning Time, Asset Utilization
 Virtualize Desktops/Applications – Mobility, Deployment,
Upgrade, Security
 Virtualized & Tiered Storage – Interoperability, Performance,
Thin-Provisioning
 Backup, DeDup & Archival – Faster Backup, Secure Data
Movement
 Active-Active DR Capability – Resilience & Site Recovery,
Investment Utilization
 ESB
 Avoid Point-Point connection; Use a solid Middleware
 Modularity
 SDLC
 Optimized SDLC, Faster & Consistent Service Provisioning
 ERP, CRM, BI, EDMS & Workflow
 Automation & Integration for enhanced Efficiency

7. 6
Strategic Plan
INPUTS
 Corporate Strategy
 Business Plans
 Business Targets
 Security & Threat Landscape
 Risk & Compliance Requirements
 Application Systems Robustness & Ability to Deliver Value
 Degree of Current Automation & STP (Straight-Through-Processing)
 Budgets & IT Costs
IT STRATEGY 3~5 Years
 How IT will support the business in Agility, Innovation & Growth
 IT Architecture – Internet, Extranet, Intranet, Security & Application
 Systems – Keep, Upgrade, Replace
 Integrate via Middleware – Avoid Point-to-Point
 Infrastructure (Security, Network, Servers & Storage)
 Resilience & DR Capabilities
 Governance, Risk & Compliance
 Process, Quality & Certifications
 Skills Matrix, Training & Succession Planning
 IT Career Path

8. 7
Tactical Plan
TACTICAL PLAN – This Year & Next
 Cover Holistic View of People, Process & Technology
 Key Initiatives/Projects Showing Current Pains & Expected Benefits
 Investment Dashboard
 Quarterly Breakdown of Investment Plan

9. 8
Policies, Processes, Work Instructions ….
IT Asset Lifecycle – IMAC-D
 Distinguish Between:
• Policies
• Processes
• Work Instructions
• Checklists
• Guidelines
 Policies Are Clear, Concise, Unambiguous & Addresses IMAC-D
 Processes Exists for all Routine & Operational Activities
 Work Instructions & Checklists are equally important
 Apply PDCA approach for Continuous Improvement

10. 9
Modular Architecture
for Agile & Innovative Service Delivery
IDENTITYMANAGEMENT
B2B
Connectivity
(Web
Services)
PerimeterSecurity
B2C
Connectivity
(MPLS/3G
/4G-LTE)
B2G
Connectivity
(MPLS/3G
/4G-LTE)
IDENTITY MANAGEMENT
Perimeter Security
TELECOMPROVIDER&ISP
Offering
CommonInternationalThreatProtectionasaCloud
Service
CUSTOMERS & PROSPECTS (Marketing)
Voice
Recognition &
Finger-Printing
Push SMS &
Bulk eMail
Cloud Service
Location Based
Services
& Marketing
cloud Service
Tele-Sales &
Tele-Marketing
Cloud Service
RFID / NFC
Based Services to
Customers
Virtualized Infrastructure
for Agile Provisioning
ATM & Card Services
Modular Infrastructure
Risk & Compliance
Common Services from
Cloud
ServiceDeliveryChannels
TellerATM&POS
ProductSalesPhoneBanking
B2BKiosk
Mobile&InternetBanking
CRM & Market Support
Sales Support Cust Info Mgmt Campaign Mgmt Offer Structuring
Loans &
Collaterals
Credit
Assessment
Collateral
Management
Financial Management
GL, AR, AP, Fixed Assets
Budgeting,
Reconciliation
Regulatory Reporting
Performance
Management
MIS, Profitability by
Business Unit, Product
& Customer Segment
Risk Mgmt
Market,
Credit,
Operations,
Fraud
Detection
Core
Processing
Systems
Channel
Integration
&
Workflow
Mgmt
Information
Delivery &
Other
Systems

11. 10
IT GovernanceRegulatory
Authorities
Business
Plans
Outside&
InsideSecurity
Threats
Risk&
Compliance
Security
Frameworks &
Policies
ICTInitiatives
Effective IT Governance:
 Corporate-wide Accountability – Ensuring Accountability of all Stakeholders
 Enterprise Architecture – Predict & Architect; Reengineer (if needed)
 Risk & Compliance (Cloud related policies too….) – Policies. Roles (Who Does
What). Govern & Comply!
IT Governance

12. 11
Decision Making – To Spark Your Thoughts …..
• Is this Service Related To Your Core
Competencies? – If Not, Think….
• What Is the Cost & Effort to Provide This
Service? - If Substantial or Even
Considerable, Work Out the ROIs & TCOs….
• Is A Cloud Service Available? – Locally, In
the Region, Distant….
• Are There Any Governing Policies/Laws
That Inhibits? – Within Your Org or Local
• If Indicators Are Favorable - Go

13. 12
IT as a Service & Charge-Back to Business
IT Services & Service Catalog
 Ensure to have all IT Service Delivery Processes well Documented
 Have all Services Listed
 Create an User Friendly IT Service Catalog with Service Costing
 See which Services can be offered as a Self-Service
 Have an SLA signed with the Business
 Have relevant Under-pinning Contracts
 Service Pre-requisites & Timelines - SLA
 Generate Service-Reports by Department, by User etc.
 Charge-Back the Business for the Services Offered
Ensure to Have the Services Delivered Efficiently and Cost Effectively

14. 13
Maturity Models & Certifications
IT Maturity – Evolve your IT
 Reactive – Business decides; IT is Instructed to Fulfill
 Collaborative & Proactive – IT is involved with Business
 Predictive & Influential – IT predicts & influences Business
 Service Oriented & Well Orchestrated – Agile IT
 IT Costs are Charged-Back – IT has to be Competitive
Frameworks, Capability & Quality Certifications
 COBIT
 CMMI
 ITIL
 ISO – 20000, 27001, 10002
High Performance Delivered & Accredited !!

15. 14
Thank You
indranil.guha@cbd.ae
Questions?