PRESENTATION - IT INFRASTRUCTURE & INFO SECURITY CONSULTANT FOR PVT. MEDIUM ENT & GOVTS.

Wednesday, 28 September 2016

What is the benefit of a Project Management course?



What is the benefit of a Project Management course?










A Project Management course can be very beneficial from following view points :
  1. To the employee - a classroom workshop with an experienced instructor is going to tell you the “How” part of project implementation. You will learn the terms, their meaning and applications, the stages, the role of the stakeholders involved, and also learn new tools in the process.
  2. To the employers - they will have the knowledge, tools and techniques to effectively manage projects. Their Projects will be better managed within the scope of work, resources, Quality and time .
  3. For IT practitioners, Agile is the way to go these days, so I would recommend doing a Agile Project management course - To the people who are having a non IT background, wanting to go into IT projects management, you should start with doing a beginners course , then get some experience working as a Assistant Project Manager or a Team Lead, then do the Professional course . Experienced non IT professionals can also do course by PMI.
  4. 2 things are very important which I always emphasize - do what you like doing, and not because everyone is doing it, and ; get some real experience in Project management (maybe even in an Ad hoc or single project “planned" manner) , before doing a certification (which is next step after the course on PM) . This way learning would be good, you will learn out of your mistakes, and work around them effectively .
  5. To Senior Project managers- get some training on strategy , soft skills and presentation skills - you can do it yourself out of vast e-learning and online tutorials available.
Good luck !!

You may like to visit my website Anil Oberai, C.E.O of Oberai IT Consultancy/ to view my daily articles on Project management.

Tuesday, 27 September 2016

What should be my next goal after having 6 years of IT Experience?

What should be my next goal after having 6 years of IT Experience?



In this rapidly changing IT industry, this Question is there in every professionals mind, what should be my goal after 5–6 years !
My advice is , in these 6 years of IT experience , what is it which you liked the best?
a. Are you good at development ? Can you quickly develop an algorithm and a program, given the requirements ? Which software tools are you good at? Are they in demand as of now ? Then my advice would be to go in for a Course in Project management, Agile or Scrum which is in demand today, get some process management and leadership training, apply for a Project manager’s position . (Start initially as a Assistant Project manager, do your study and certification alongside the job).
b. Are you good at Design, Architecture, and have good knowledge and workex of the current Object and service oriented architectures, then plan to be a good Lead software architect - it could be a migration to e-commerce from client server architecture, which will be good experience and job satisfaction for you. Here, you may or may not have a team with you. You could go in for a diploma in e-commerce.
c. Are you good at Testing, then you should go in for QA Training certificate programs which can also include actual hands on training and certification in tools like Load runner or Rational . Here you are expected to lead a Team, so you should have Leadership and soft skills training as well. You can apply for a Testing Head position with a team under you.
d. If you have done a MBA in IT , and have interest in doing business analysis and presentations and managing a Product through its life cycle, then Product Management is a good option for you, You may or may not have a team under you, but this is an excellent interface between the sales and development teams .
I could go on and on, and discuss about other areas like Information security, ERP, Sales and business development, Business process migration , Supply chain, CRM etc. but let me end here for current context.
All above positions are in great demand now and so it does not matter what you chose, the goal should be of your liking !!

Good luck !!

This article is written by Mr. Anil Oberai, C.E.O of OberaiITConsultancy, with more than 2 decades of experience in managing and Consulting for IT Projects. To know more, Pl visit  https://aniloberai.blogspot.in/

FINANCIAL ASPECTS OF INFORMATION SECURITY INVESTMENTS

FINANCIAL ASPECTS OF INFORMATION SECURITY INVESTMENTS



Information security - the safeguarding of computer systems and the integrity, Confidentiality, and availability of the data they contain - has long been recognized as a critical issue. Two current trends indicate that its importance is growing.

First, the integration of computers into more and more aspects of modern life continues. Second, cyber-attacks, or breaches of information security, appear to be increasing in frequency, and few observers are willing to ignore the possibility that future attacks could have much more severe consequences than what has been observed to date.
The core issue, in all types of organizations, is whether we devote enough resources to information security Part of the answer must come from Financial analysis. What are the Costs  of security breaches? How frequently can attacks be expected? Can these factors be quantified precisely, so that business firms and their Boards can determine the optimal amount to spend on information security and measure the effectiveness of that spending?

Financial analysis
1.      Return due to investment in security
Return  is expressed as the net gain divided by the investment.
In the simplest of terms:
(TOTAL AMOUNT GAINED)−(AMOUNT invested)/( AMOUNT invested)
2.      annual loss expectancy
Annual Loss expectancy is expressed in the following form:
Sum of (Harmful outcomes x Impact in Rs. or $ x Frequency of outcome)
We calculate the Loss expectancy with Security controls and Annual loss without security controls in place.
3.      TOTAL AMOUNT GAINED = benefit = sum of annual loss expectancy
 = annual loss expectancy without sec control− annual loss expectancy with sec control

In addition, there are other parameters which can be calculated and presented to the board to justify the financial needs for Information security investments.


The above article has been written by Mr Anil Oberai, who is an IT Consultant. He has over 2 decades of experience specializing in areas of Information Security, Project Management, and Process Excellence. You may contact him through his Mob+91-9899124880 (New Delhi) or visit his website https://aniloberai.blogspot.in/

Monday, 26 September 2016

Role of a Information Security architect

Role of a Information Security architect 


Information Security Architect plays a key role, as part of the existing Information Security team, to support a number of the company’s new (& transformation) programs.
He is responsible for leading the security solution design for various projects, whilst translating the domain architecture principles into practical steps while assessing architectural designs against security policy, ensuring risks are anticipated and mitigation plans are put in place and suggest such changes as necessary.
To do this, it is essential to keep up with new challenges and threats to the security industry. Additionally it will be expected that he should apply knowledge of current industry security solutions and align these trends to the programs, the business and IT issues.
Reporting to the Head of IT (depends on Organization size and structure), a Security architect will ultimately be responsible for spearheading the overall security architecture from the strategy through to the delivery and maybe even leading a small team.
Further key responsibilities for this role could include the following, depending on the size of the organization & its requirements
  • Threat management and Incident response investigation.
  • Design, implementation, review and maintenance of technical security controls.
  • Manage the development and growth of all technical security controls across networks and applications.
  • Understand and track emerging threats and technologies and their potential threat to the organisation
  • Lead the solution architecture function and project teams working on cyber security initiatives
  • Interface with internal security departments and liaise with external security experts
  • Clearly communicate security and risk issues to both technical and non-technical stakeholders
On the whole he will be expected to enhance the security roadmap of existing systems requiring transformation as well as the new Projects.
I am an IT Consultant providing help in areas of Information Security, Project Management, and Process Excellence. For more information, Pl contact me through my website Anil Oberai, C.E.O of Oberai IT Consultancy

Sunday, 25 September 2016

What to do if your friends receive email messages from your email id & name, to transfer some money into a unknown persons account ?

What to do if your friends receive email messages from your email id & name, to transfer some money into a unknown persons account ?


I saw this urgent message today from a friend's Facebook page : 
I am producing here as general awareness is important . while flagging out names and identities of persons to save their identities as case is under investigation.

“Hi All, Please go thru this msg seriously as it happened with me two days before and I want each one of you to be aware of it”


“My name is abc and I have a factory in bbb,  My accounts head hhh received a mail from my email ID saying that I need to transfer some urgent money to a person. So please send the details which are required to transfer the money. He thought that since this mail has come from me, immediately sent a standard format which asks for details like name, account number and bank details. He did not have any doubt since the mail was addressed to him with his name hhh and my full name – ABC was mentioned in the signature in the mail (my email ID is abc@mailserver.domain.in and no one can know my full name just from my email ID) 
Within 10 minutes he got a reply giving all the details and asking for an amount of Rs RRR to be transferred. The money was to be transferred to someone by name of NAME having his accounts in kkk bank, ccc branch. Since the mail came from my email ID, my accounts head did not have any doubt, but before transferring the money he called me to find out if this money needed to be transferred from my personal account or company account. I was shocked to know as I had not sent any such mail. That time I was in factory only. I immediately rushed to his seat and to my horror there were mails from my ID. I checked on the server if someone had hacked my password and was sending mails directly from server. But there was no mail being sent from the server.
I immediately contacted my IT consultant who handles our website and when he checked he found out that these mails were coming from some other email ID from Africa, but what was seen on the screen was my ID. 
To investigate further I sent one of my accounts person to kkk bank ccc branch to find out about this account in which payment had to be transferred. They informed that this is about a month old account and many such transactions have taken place where money is coming and going out from this account. They also told that this type of fraud is specially happening with people who are in exports import business as their mails go throughout the world thru different servers. 
I decided to inform this episode to our association President – Mr GGG and on his advice we have even informed the Police. He has promised to pursue this matter and get the account blocked of that person NAME in kkk bank and also further investigate to find out the culprit. 
What surprises me is that the hackers knew that I am the person who is the decision maker in our company and hhh is our accounts head. We have more than nn email IDs in our company. It means that the hacker would have gone thru all these mails to figure out who are the right persons whose ID he can use to get this money.
I would request all of you to be cautious of sending online payment requests by email and if you are sending then put a system in place where there is a double check through phone.”



An examination of the case suggests that it could be an insider’s job. Someone who may have known abc and hhh the acounts head. The fraudster was an expert and used name aliases in email (unfortunately this is very easy to do in email.. you can change the senders name and id -- what appears to the recipient). But immediately on seeing the subject of transfer money to NAME  you should have checked the details of the email.. that’s how your IT Consultant found out and through reverse DNS he could see the email was from an IP address in Africa with of course the alias names of abc and hhh.. the insider could be a person working in the email service provider, the bank or even in abc’s office. But One thing you can try to pre-empt this kind of problem in enabling the 2 factor authentication. I am an IT Consultant providing help in areas of Info Security, Project Management, and Process Excellence. I have helped clients in such kind of frauds - Pl contact me through my website https://aniloberai.blogspot.in/

Thursday, 22 September 2016

What are the precautions of things to do when you are joining new company as a Project Manager?

What are the precautions of things to do when you are joining new company as a Project Manager?



There are certain expectations of Sr. management, and Team Members from a new joinee designate Project Manager.
Expectations differ from Company to company, the ones which are large sized, viz. ones which are start ups or medium sized , whether they are a software driven company, a civil construction or real estate company, or a company into EPC, (Engg. Procurement, Commissioning) etc. Every company needs Project Managers but their culture and expectations are quite different.
A large software services or Products company has already a number of Project Managers on board, so you will report first to the HR, they will tune you in their orientation program of 2–3 days into the company ‘s operations. A start up on the other hand may or may not have 1 or 2 PMs on board and their expectations are very high about the PM, that he will bring a sea change and desired results and even revenue to the company in shortest time. Here, HR may not be there, so you will report directly to the CEO or one of Directors on the board. It is here that you will feel lost initially, as the Director’s and CEO’s thinking may be in business terms and everybody may not be aware of the reason why you were recruited in first place.
One thing is clear, where ever you join, a PM is a Leadership position with people having following expectations, which you should be able to meet or exceed in the first week itself after joining :
  1. Leadership – Project Managers need excellent communication and negotiation skills and must be confident relating to and working with a wide range of people. It’s particularly important to understand the strategic needs of the business to deliver the project’s desired outcomes.
  2. Problem-solving – Savvy Project Managers should be able to identify risks, manage expectations, and allocate limited resources to deliver a quality project that meets the business’s needs.
  3. Adaptable – should be comfortable with change, and flexible to the project’s needs, Project Managers are great multi-taskers.
  4. Highly organised – Strong and accurate time and financial management skills and processes so that Project Managers can keep an eye on the big picture while also ensuring the small details are taken care of.
  5. Technical – Should have strong domain knowledge of the Project they are managing, and the fact that you are working with highly skilled technical teams means that you require experience in a variety of technical platforms and methodologies including PMP, CMMI, Agile or SCRUM. Invest in Training and gathering knowledge around you.
Nevertheless, a PM should always look positive, think positive and do positive, from day one, that is what the management wants.
So, get going and Good Luck !!

To know more about us and read my articles, Please visit my website ABOUT US

How is a Project Manager rated ?



How is a Project Manager rated ?
In my opinion, Project Manager’s rating works in 2 ways .
a. For small to medium sized projects with quick deliverables and small teams :
Project managers earn 100 points for completing a project. But if the project isn't completed on time, the project manager gets points deducted from his score—say two points for every week the project is late.
Similarly, if the project comes in over budget or is implemented with defects, the project manager loses points—such as a half a point for each defect found within 60 days of the project going live or half a point for each one percent the project went over budget.
Project size is also taken into consideration according to its number of function points.
Organizations can subtract more or fewer points from a project manager's score depending on which elements of project success (e.g. time, budget and quality) they wish to emphasize. For instance, if an organization prizes speed over quality, and if a project manager misses the go-live date, the project manager could be deducted five points for each week the project was late instead of two.
Above has been adopted from the Zaitz’s methodology. Though Zaitz's methodology is focused on objective metrics, it takes into consideration stretch goals, such as early delivery of projects and technical productivity (getting more done with fewer resources or for less money), and soft skills .
For example, if project managers complete their projects ahead of time or under budget, they can earn bonus points (especially if quality is not compromised.)
b. For the larger Projects where Requirements play an important role and need to be frozen before Project implementation
I feel the CMMI has rightly mentioned the KPAs which are of a function or organization but largely driven by a passionate Project Manager’s leadership .
Level 2 (Managed ) organization
Requirements management
Project Planning
Project Monitoring and Control
Supplier Agreement Management
Measurement and Analysis
Process and Product Quality Assurance
Configuration Management
Level 3 - Defined Organization
Requirements Development
Technical Solution
Product Integration
Verification
Validation
Risk Management
Decision Analysis and Resolution
Integrated Project Management
Organizational Process Focus


Organizational Training
Project Manager’s role is changing rapidly and a Rating system can be evolved after knowing the Organization’s background, its products and services, culture and SWOT of the organization in the competitive environment of Time to market its products and/or services. For details Pl contact Anil Oberai, who has more than 2 decades experience in Project Management, Consulting, Business Process Excellence and Be-Spoke consultancy. Visit http://aniloberai.blogspot.in/

Wednesday, 21 September 2016

Why does executive management refuse to function as a project sensor?


Why does executive management refuse to function as a project sensor?



Top (Executive) Management is interested in getting the job done at the lowest cost, in the quickest time, with minimum number of resources (yes, they cost money !!). They want all aspects of scope to be covered and with least number of problems from the end product .
A Project Manager on the other hand, is concerned with the triple constraints of Scope of work, Time, and cost. Quality (or Performance) becomes the fourth constraint . He has to work within these constraints called as Triple constraint triangle.
The time constraint refers to the amount of time available to complete a project. The cost constraint refers to the budgeted amount available for the project. The scope constraint refers to what must be done to produce the project's end result. These three constraints are often competing constraints- increased scope typically means increased time and increased cost, a tight time constraint could mean increased costs and reduced scope, and a tight budget could mean increased time and reduced scope.
A Project Manager has to do three things - communicate, communicate, communicate to the stake holders (starting from Top Management to Team Members) the vision ( & status) of the Project. He can not do the project in isolation . A person designated as Project Sponsor is the Executive management Representative who normally gets the Project funding done.. ensure that a Sponsor is there and take him into confidence on Project Management and reporting. Top management have their other problems , so do not burden them (or even the sponsor) with micro management .. only major issues or issues affecting the Triple constraints described above and you get going , man.
Good Luck !!
To know more about us and read my articles, Please visit my website ABOUT US

Monday, 19 September 2016

How does a routine day of a project manager look like?

How does a routine day of a project manager look like?



A project manager has a daunting task to ensure project is successfully delivered. It is really important to get organized despite of the chaos around the Project.
Almost every day in the life of a project manager is different. The challenges, obstacles they face every day, are different. The kind of stakeholders they need to communicate to, are different. In short, days and activities are unpredictable. Typical activities during a day of an IT project manager
Morning
  •          Reaching the office early
  •          Checking emails for important matters, Respond to urgent & important emails. Mark emails to get more info from other team members.
  •         Open the project management software & check project progress, update risks, and issues.
  •          Prepare To-Do list and select which meetings to attend, & which ones to skip
  •         Check and act on customer issue that needs to be addressed ASAP
  •         See if any issue has aroused and things are progressing as per plan

Pre-Lunch
  •         Call for a meeting with the team; check progress made on yesterday’s activities, what is today’s plan & how I can help you
  •         Have a 1-2-1 with Team Leads if they want to discuss issues separately
  •         Attend to other calls from Boss who wants the PM to join him in his office for a meeting with partner.
  •         Another boss wants to discuss few things. His office is in another building, I drive down there.
  •         Respond to other emails, delegate activities.
  •          Review meeting with my Business Analyst to review project documents & improve those before handing it over to customer

Lunch time
  •         Have Lunch with my TL

Post Lunch afternoon
  •         ATTEND TO CUSTOMER CALL; he says this and that is not working, Particular functionality has not progressed beyond last week and he would like to discuss it now. I explain him the technicalities of the issues, he understands it, send him a detailed email and ensure him that activities are not getting delayed.
  •         My schedule shows I have to rush for a cross functional team meeting
  •         One of my bosses calls me up. We get into a conference room. We discuss about his issues. I sense his problem and promise him to discuss positively it with my TL. He seems to be happy with that.
  •         My Technical Architect calls me, he has identified some issues with new technology framework and he says he has emailed this issue to Product management team & can’t progress now and will not be able to complete integration by this week. We get into a call. I say, enough of emails and chats. I request for Product Manager to join in Conference call and Product manager tries explaining to Lead Architect who promises to address it by end of day with some changes.

Evening
  •         I have to conduct an interview of a candidate for quality-lead position. In my mind, I am trying to map those in our project & overall Project Management Office (PMO) practices. I spend some 30 minutes in Interview and another boss calls me – I try to explain him that I am in midst of an Interview for an important position and will contact him early next day . He understands and I hang up the phone .In meantime, I feel the candidate will be a good addition to our team and recommend him to the HR to make him an offer.
  •         I check email and respond. I need to re-work the project schedule. I set up a call with our TL and business analyst and we agree to change delivery item for 2 items slated for delivery next week.

Late Evening
  •  I look at my calendar for tomorrow. I open my To-Do list for today and see what is still pending and call up or write emails accordingly. I realize, I could not read some useful and interesting project management and project leadership articles. I remind myself to read it over weekend if not tomorrow.
  •  Another TO Do list – accompany wife for some important shopping for her at a shopping mall near her office after which we head for home and I baldy need some rest and keep my phone in silent mode thinking about my plan for tomorrow .

To know more about us and read my articles, Please visit my website ABOUT US



Is ITIL certification important for a developer in a mid level software developer company?

Is ITIL certification important for a developer in a mid level software developer company?


Before you go in for ITIL certification, your objective should be clear : i.e, do you want to pursue ITIL as a career or you want to do the internal work in order to obtain certification ?

My advise is that if you are keen to pursue ITIL as a career alternative, then you should look at training, self certification, but your target market should be large enterprises.

A mid level software developer would not achieve ROI after achieving ITIL, unless demanded by its clients .

Good Luck !!!!

To know more about us and read my articles, Please visit my website

What is the suitability of a senior sales person wanting to move to a project management role?

What is the suitability of a senior sales person wanting to move to a project management role?

A Project management job needs a domain experience as an essential qualification. In Sales you would have handled Relationship management, Project coordination and Procurement  but if you have the domain experience of particular Job (like Telecom Billing, Retail, POS , Payment systems, CCTV and Surveillance systems, HR and Personnel management, e-Governance , etc.),  that would be advantageous.

Project Management jobs are of different kinds, i.e, requiring purely Technical knowledge , or Administrative , or both (normally it is both). This requires domain knowledge, Process, People management and Task management skills. Delivering to specified Quality parameters is very important in Project management, which we sometimes skip in a sales job (due to over commitment at times). A PM does estimation of the time required, after doing a detailed scoping of the requirements. He has to deliver the product in the agreed scope, time frame, resources and cost. So he cannot go wrong in estimation .
If during your experience in sales you have had the exposures to the above traits, then I would suggest you to work as a Junior PM with a Sr PM, understand the PM Cycle, and then go in for a study, (self or through a PMI certified trainer) for required Project Development Units, take the test, and do some introspection of how you rate yourself, work on the improvement areas, and then launch yourself as Project Manager.
Good Luck !!!!
To know more about us and read my articles, Please visit my website ABOUT US 

Saturday, 17 September 2016

Are you planning to set up a Project Management Office?

Are you planning to set up a Project Management Office?




The article below gives an idea of the type of hierarchical Organization structure for Project Management Office


The PMO is typically a tiered structure of project management personnel with specific competencies, tasks, experiences requirements for each level:

1.    Project Management Director is responsible for directing and managing multiple interrelated implementations. This position requires minimum 10 years of project management experience
2.    Portfolio manager is responsible for managing governance and project management processes, methodologies and tools. This position requires 10 years’ experience.  
3.    Program manager oversees and supports programs and processes across the institution. Seven years of experience required
4.    Senior project manager manages all aspects of highly complex medium- to large-scale strategic projects that span three or more organizational boundaries. Ten years of experience (including five years of project management)
5.    Project manager manages all aspects of moderately complex medium- to large-scale projects spanning two or more organizational boundaries. This position requires eight years of experience (including five years of project management experience)
6.    Associate project manager: Plans, organizes, monitors and leads small teams responsible for delivering defined projects, enhancements or sub-projects. Four years of experience (including one year of project management)

A PMP credential is preferable though not essential if the relevant experience is there with candidate.


This article is written by Mr. Anil Oberai, C.E.O of OberaiITConsultancy, with more than 2 decades of experience in managing and Consulting for IT Projects. Information Security is one of his pillars for consulting. To know more, Pl visit http://aniloberai.blogspot.in/