Tuesday, April 28, 2009

Internet Privacy: The Raptors of Regulation

"Companies that track consumer behavior on the Web for targeted advertising without proper consent are near their 'last chance' to self-regulate." ~ FTC Chairman Jon Leibowitz, Monday 26 April 2009 at the Reuters Global Financial Regulation Summit.

Privacy Advocates


Privacy advocates have long knocked, unheard or largely ignored, on the doors of internet giants like Google and AT&T. These same advocates have a strong presence in Washington, lobbying Congress for change. Their basic argument is that privacy regulations are too lax, allowing internet companies to collect and use what advocates characterize as "private data" without notification, permission, or an opt-out.

The attention -- huge and growing larger in Washington -- is largely focused on "behavioral advertising." The push is to increase both privacy protections (permissions and opt-out) as well as transparency (clear, visible privacy policies). In a congressional hearing last week, Rep. Rick Boucher (D-VA) promised, by the end of the year, some form of legislation from congress to address the issue.

The Debate


This debate is taking place despite the fact that no one on either side can point to any specific harm done to consumers or internet users. Both sides admit the benefits (targeted and free content). The issue seems largely focused on a lack of understanding or confusion on the part of internet users... Users are unaware of when and how, or sometimes if their personal behavioral data is collected or used.

There are also clear signs in the way the debate is being framed in Washington that the government would rather not step in with regulations, preferring the industry to do so on its own. There is time, but very little left, for the industry to do so.

"If companies fail to do a better job of making their privacy policies understandable to the average person, momentum will keep building for greater regulation," Leibowitz said. “It’s really up to industry.”

Wrap It Up


A fork in the road is clearly here for internet companies and internet technology providers. The industry has only a few months wiggle room before choices vanish and the raptors of regulation descend. Google in particular has a chance to lead the pack and set the pace for the rest of the industry or defer and face the whims of the raptors.

Choose wisely: The time is now.

Add to Technorati Favorites Subscribe

Saturday, April 25, 2009

Project Manager: Building Pencils?

There is a tendency among some organizations to demand highly specific experience and qualifications in hiring project managers. In some cases this makes sense as specific domain knowledge may be appropriate and lead to decreased ramp-up time. When taken to extremes, however, the value is quite arguable, potentially negative, and raises doubts about the organizations' understanding of project management.

For example, one posting (found via Google search today) for an IT (technical) project manager included in the requirements a PMP (Professional Project Manager) certification as well as technical (hands-on coding) certifications in Java, J2EE, Oracle, SQL Server, Unix, VB, .NET, and ASP. A Bachelor's degree is required with a preference for a Master's degree and 2 - 6 years working experience in IT. This is, admittedly, an extreme example but serves to make the point and it is a real posting.

Certification Silly


Someone in the organization doing the hiring for that position is remarkable unclear on certifications. The PMP credential, for example, requires 5 years documented, verifiable project management experience (+high school diploma) or 3 years documented, verifiable project management experience (+Bachelor's degree) plus 35 hours of accredited project management education within the past year in order to qualify for the four-hour, multiple choice exam.

That is only the minimum needed to qualify for the exam, not what is needed to actually earn the credential. Many candidates take the courses, study for and take the exam multiple times before receiving the credential.

Credentials or certifications in the technical areas listed above require training, and testing and may also require experience. At the minimum experience level listed (2 years in IT) it is unlikely that that more than one or perhaps two of the technical certifications could be achieved. It is obviously impossible to earn the PMP credential in that time since, even with a Bachelor's, three years experience in project management is required.

At the maximum experience listed (6 years in IT), it is still highly unlikely that all qualifications are met by a single individual... not impossible, but extremely unlikely. For one thing, the probability of finding all those technical skills in use by one individual at one organization at the level needed to achieve certification within the given time frame is just off the chart. For another it's difficult to actually hold a full-time job while training, studying, and sitting for all those exams.

Beyond the extreme, obviously fantastical postings like the one above, there is a more serious point in all this. Take for example a more common requirement seen with some regularity: "IT Project Manager with recent Java certification and hands-on coding experience." This is not uncommon and raises several questions about the organization, the project, and the job itself.

The Job


First, look at the job itself. A project manager assigned to a large effort, or a couple of medium efforts, or 4 - 5 small efforts is fully engaged -- 100%+ -- in just doing the basics required of project management. It's 40 - 60 hours a week; maybe more at times. Where does writing code come in? How does writing code become a project manager's task?

Answer: It doesn't, and, it doesn't.

Domain knowledge is useful... even critical at times but that does not mean what some organizations seem to think it means. A software development project manager who completed numerous successful projects over the past few years with a verifiable background and references is superbly qualified to manage similar projects. If they spent the past few years writing code, they were not a project manager (someone else was) and are not qualified.

The Project


Second, look at the project. If code is being written by someone called "the project manager," then they aren't the project manager and someone else is managing the project. The project may be "all about" writing software but managing the project isn't.

Who's writing code for this project? Where are the programmers? The analysts? The technical "lead?" Are there no experienced hands on deck for this project?

If the coders on the project team require coaching in their programming language, that means there are no functional or team managers capable of providing this support. The organization should hire team managers and get their house in order before embarking on this project.

Analysis of the project from the posted job description for the project manager shows this project is doomed. Roles are poorly defined, the scope is not clearly understood by the stakeholders, the project goals are misaligned, the right resources are not on board, and functional management is non-existent or incapable of supporting the effort.

The Organization


Third, look at the organization. Organizations who expect project managers to compile code are not looking for a project manager. They're looking for a lead developer, team lead, or combination functional manager and project manager. The organization is, therefore, confused about the value of project management as well as the role of programmers, analysts, developers, and line managers. They are more than likely confused about other things as well.

With the notable exception of start-ups where one person is filling many roles in the nascent organization, roles become more specialized for a reason: The role requires full-time focus and specialized skills, experience, and background for success. Organizations ignore this axiom at their peril.

There are other possible explanations from the organizational stand point. For example, they may not, in fact, actually want a project manager. The organization needs someone to assume the title so the organization looks good in an audit or so executives can say to their Board of Directors, "Yes, we're using Project Management best practices... look at all our project managers!" In any event and regardless of the rationale, success is unlikely for the project, the executives, or the organization using this tactic.

Wrap Up


How many job descriptions for Graphic Designers say "Must have three years experience building pencils?"

How many times while interviewing a building architect does the question come up, "When was the last time you made a brick and where did you get your certification in brick making?"

How many times does a job description for a plumbing assistant require, "experience building pipe wrenches?"

Does a sales person for a liquor distributor need to be able to run a distillery? Grow grain?

When these kind of requirements are put in the context of job descriptions or roles with greater general understanding, the oxymoron becomes obvious.

Domain knowledge is one thing -- understanding the structural characteristics of different grades of brick for an architect or builder; understanding the architecture of .NET applications for a project manager -- but going to the extreme lessens the value received and increases the risk of project failure greatly.

Add to Technorati Favorites Subscribe

Friday, April 24, 2009

Social Media for Project Managers

One of the biggest challenges in the project world has been and remains communications -- poor communications defeats otherwise excellent project teams. While more communication is not necessarily better communications and overlooking the needs of target audiences in crafting specific communications is certain disaster, social media of all types provide a real-time, powerful tool to PMs, stakeholders, and project teams.

In much the same way that web enabled tools like email, tele/video conferencing, VPN, and IM have been used in the past to facilitate virtual teaming, social media tools present the promise of greatly enhanced community, continuity, and collaboration through communication within teams. It is already doing so in our social, marketing, and business lives.

The power of Twitter, as one example, lies not only in real time conversation but in its search capability. Hash tag, keyword, and @ searches of both current and past twit stream allow users (and project managers) to see specific data, set up alerts for specified content, and coordinate or integrate results. Team members or stakeholders using #status, #issue, #[WBS item], #[project name], and @projectmanager are some examples.

Wikis for projects hold great promise in opening the door to real, usable lessons learned in the enterprise. If set up and managed correctly, this kind of wiki becomes a living repository for project information about what works, what doesn't, and how to fix it when it goes wrong.

What if everyone in the enterprise had a blog and knew how to use it? Projects with blogs, comments, and feeds are not uncommon -- a blog may become the status report or burn down chart for anyone with access. Content can be pushed to subscribers and comments allow interaction. Single entries can be printed to PDF for archiving. Properly indexed blogs (keywords) are searchable.

Some projects with widely distributed teams have used Facebook successfully. In addition to the personal status updates on Facebook, there are many choices of tools either built-in or available as add-ons.

Tools such as Ping.fm and others provide a single interface for posting to all media -- blogs, Twitter, or Facebook and can be a source book of all postings.

Public SM tools, however, are probably not for projects. Organizations should set them up in their own environment, behind company firewalls. Accessible for team members is via intranet, VPN or whatever secure protocol is in use. Public posting of project information is dangerous, probably violates company security policy, and may be a huge liability.

That said, SM provides an real-time, powerful, interesting and valuable set of tools for project managers and teams. Community, continuity, and collaboration through communication is the future.



Add to Technorati Favorites Subscribe

Thursday, April 9, 2009

Power Grid Going to NSA

Interesting article on Wired about cyber security and the power grid.

Those impish Chinese government cyber-saboteurs we last saw posing as 20-foot high trees to trigger the 2003 northeast power outage have returned in an all new adventure, this time in the pages of the Wall Street Journal.

Read More on Wired

Posted using ShareThis

Add to Technorati Favorites Subscribe

Thursday, April 2, 2009

Quotable: 20090402

A little risk management saves a lot of fan cleaning. ~ Anon

Add to Technorati Favorites Subscribe