Obiettivi della presentazione: (1) Presentare una breve storia dell’ITSM degli ultimi anni; (2) Illustrare i tratti caratteristici dei principali framework e modelli nell’ITSM, tra cui ITIL e DevOps; (3) Proporre la giusta sintesi di diversi approcci ITSM, ricordando sempre che tali approcci rimangono sempre strumento, non obiettivo.
Strumenti e mentalità Agile applicati al mondo delle costruzione, per un approccio innovativo al project management.
Valore per il cliente.
Valore delle persone.
Comunicazione trasparente.
Benessere lavorativo.
Efficacia.
Efficienza.
Security Project Management: Esperienze nella gestione di Vulnerability Asses...Simone Onofri
"ordine e disordine dipendono dall'organizzazione" - Sun Tzu (L'arte della guerra)
Scomodando Sun Tzu stesso, ci si rende spesso conto che non è solo importante l’aspetto tecnico - nel quale Analisti esperti si occupano di identificare e verificare le vulnerabilità dei sistemi di un Cliente - ma anche tutte le attività di organizzazione, pianificazione, le riunioni e la reportistica, spesso temuta anche dagli analyst più navigati. Lo scopo di un servizio di questo tipo non è solo la verifica delle vulnerabilità di determinati sistemi, ma anche un Cliente soddisfatto con la piena comprensione del lavoro svolto.
Durante il seminario - che si basa su esperienze e scenari reali - analizzeremo insieme i vari aspetti organizzativi di Penetration Test e Vulnerability Assessment dal primo contatto alla consegna della reportistica e alla riunione di chiusura delle attività guidati dal buon senso, citazioni di Sun Tzu e da pietre miliari come l’ISECOM OSSTMM (Open Source Security Testing Manual) e l’OWASP Testing Guide. Il tutto con alcune tecniche di project management e comunicazione, utili sia per personale di aziende che erogano servizi di questo tipo, aziende che ne usufruiscono o semplicemente che sono interessate.
Obiettivi della presentazione: (1) Presentare una breve storia dell’ITSM degli ultimi anni; (2) Illustrare i tratti caratteristici dei principali framework e modelli nell’ITSM, tra cui ITIL e DevOps; (3) Proporre la giusta sintesi di diversi approcci ITSM, ricordando sempre che tali approcci rimangono sempre strumento, non obiettivo.
Strumenti e mentalità Agile applicati al mondo delle costruzione, per un approccio innovativo al project management.
Valore per il cliente.
Valore delle persone.
Comunicazione trasparente.
Benessere lavorativo.
Efficacia.
Efficienza.
Security Project Management: Esperienze nella gestione di Vulnerability Asses...Simone Onofri
"ordine e disordine dipendono dall'organizzazione" - Sun Tzu (L'arte della guerra)
Scomodando Sun Tzu stesso, ci si rende spesso conto che non è solo importante l’aspetto tecnico - nel quale Analisti esperti si occupano di identificare e verificare le vulnerabilità dei sistemi di un Cliente - ma anche tutte le attività di organizzazione, pianificazione, le riunioni e la reportistica, spesso temuta anche dagli analyst più navigati. Lo scopo di un servizio di questo tipo non è solo la verifica delle vulnerabilità di determinati sistemi, ma anche un Cliente soddisfatto con la piena comprensione del lavoro svolto.
Durante il seminario - che si basa su esperienze e scenari reali - analizzeremo insieme i vari aspetti organizzativi di Penetration Test e Vulnerability Assessment dal primo contatto alla consegna della reportistica e alla riunione di chiusura delle attività guidati dal buon senso, citazioni di Sun Tzu e da pietre miliari come l’ISECOM OSSTMM (Open Source Security Testing Manual) e l’OWASP Testing Guide. Il tutto con alcune tecniche di project management e comunicazione, utili sia per personale di aziende che erogano servizi di questo tipo, aziende che ne usufruiscono o semplicemente che sono interessate.
L'analisi dei processi costituisce un'attività chiave per essere critici sul proprio operato, per individuare attività che non forniscono alcun valore aggiunto, per portare avanti un programma di miglioramento. Per essere concreti ed oggettivi è necessario che l'analisi oltre a valutazioni di tipo qualitativo e organizzativo produca dei valori numerici che permettano di sostenere con maggior forza iniziative di miglioramento, soprattutto se devono essere supportate da investimenti.
ARKON_Omnia Your Fractional & Temporary Managerstefanosabato68
👉 Consulenza di Direzione per strutturare l'iniziativa di Business Plan finalizzato a due diligence dei decision maker Finanziari e/o Industriali.
👉 Fractional management per gestione operativa della iniziativa sino a Exit.
👉 Formazione manageriale e audits post intervento per manutenzione progetto
I servizi sono incaricati da Aziende, Investitori, terze parti delle comunità finanziarie.
GREEN ME - Corsi di formazione professionale gratuiti Sinergie
Corsi gratuiti su efficienza energetica, sostenibilità ambientale e innovazione per professionisti e aziende a Reggio Emilia e Bologna attivi da febbraio 2017.
Scheda per l'iscrizione al termine del catalogo.
Per informazioni: gestione[at]sinergie-italia.com
3i group è un gruppo imprenditoriale che, dal 1984, offre servizi integrati di ingegneria, progettazione, consulenza e formazione sia in campo civile che industriale. Il gruppo è parte di una della rete d’impresa che consente di cogliere nuove opportunità, conseguire obiettivi ulteriori e fornire al cliente un servizio ancora più completo.
L’identità del gruppo 3i è rappresentata dalla multidisciplinarietà delle competenze e dall’efficace integrazione delle differenti professionalità che lo compongono.
"Smart maintenance". Una piattaforma di Realtà Aumentata per il Training e le...Graziano Terenzi
Il white paper mostra come le applicazioni AR forniscano una tecnologia che supporta e velocizza le operazioni sul campo aumentando, nel contempo, i livelli di performance e di effettività. Alcune statistiche indicano miglioramenti della performance fino al 30% con gli operatori che riportano un più alto livello di coinvolgimento. Le applicazioni dell’AR a supporto dei tecnici sul campo hanno il potenziale di ridurre i costi fino al 25% grazie ad una più efficiente manutenzione, sostituzione di componenti, identificazione e definizione di nuove connessioni, risoluzione di blocchi o configurazioni errate, e ad un minore affidamento sul personale di backend e sulle risorse di sistema. Inoltre l’utilizzo dell’AR offre l’opportunità per un più rapido miglioramento della qualità dei dati aziendali, grazie alle informazioni raccolte sul campo.
Gli appalti verdi obbligatori e le opportunità delle certificazioni ambiental...CONFINDUSTRIA TOSCANA NORD
Gli appalti verdi obbligatori e le opportunità delle certificazioni ambientali - presentazione di Francesco Baldoni, certificatore Emas - Lucca 13 aprile
The missing links in software estimation: Work, Team Loading and Team PowerLuigi Buglione
This presentation investigates the theoretical foundation of the basic concepts used in software effort estimation, productivity measurement and benchmarking. By elaborating on how similar concepts are defined and used in well-established engineering fields, we aim to shed light on some inconsistent and fallacious use of concepts and units of measure, resulting misconceptions and their consequences in project planning. Particularly, we focus on ‘Work’, ‘Team Power’ and ‘Team Loading’, analyzing the way many studies from the ‘70s on faced such issue. Too often projects fail for being late and not always adding new resources allows respecting established milestones as well as the established quality levels. After setting the theoretical layout, we present the results of an empirical investigation we made using the data in the International Software Benchmarking Standards Group (ISBSG) dataset D&E (Development & Enhancement) v13, using both COSMIC and IFPUG data for Business and Real-Time applications. The results indicate that a considerable number of projects might have been poorly planned and utilized human resources inefficiently, and hence paid much higher costs. Hence, we suggest software companies to revisit the productivity data of the past projects as well as evaluating the new ones by measuring Team Power, Team Loading and comparing to Team Size utilized.
Risk Management: Achieving Higher Maturity & Capability Levels through the LE...Luigi Buglione
A common challenge in life is to evaluate and deal with risks. Even though Risk management is fundamental to any activity, it is too often evaluated and managed from a qualitative rather than a quantitative perspective. In order to improve, too often organizations are seeking compliance against a single model/approach, forgetting that most often ‘one model doesn’t fit all’ and that the target process model is the organizational one, strengthened by external best practices. An approach to process improvement that takes this into consideration is LEGO (Living EnGineering prOcess). LEGO extracts the most useful Elements of Interest (EoI) from several types of maturity models into an organizational Business Process Model (BPM) in order to facilitate to the achievement of higher organizational maturity and capability levels, that’s the definitive intended target to be improved. This paper applies the LEGO approach to Risk Management, analyzing several Risk Management Maturity Models and unifying their practices in order to come up with a more comprehensive process model on risk management integrating multiple views.
L'analisi dei processi costituisce un'attività chiave per essere critici sul proprio operato, per individuare attività che non forniscono alcun valore aggiunto, per portare avanti un programma di miglioramento. Per essere concreti ed oggettivi è necessario che l'analisi oltre a valutazioni di tipo qualitativo e organizzativo produca dei valori numerici che permettano di sostenere con maggior forza iniziative di miglioramento, soprattutto se devono essere supportate da investimenti.
ARKON_Omnia Your Fractional & Temporary Managerstefanosabato68
👉 Consulenza di Direzione per strutturare l'iniziativa di Business Plan finalizzato a due diligence dei decision maker Finanziari e/o Industriali.
👉 Fractional management per gestione operativa della iniziativa sino a Exit.
👉 Formazione manageriale e audits post intervento per manutenzione progetto
I servizi sono incaricati da Aziende, Investitori, terze parti delle comunità finanziarie.
GREEN ME - Corsi di formazione professionale gratuiti Sinergie
Corsi gratuiti su efficienza energetica, sostenibilità ambientale e innovazione per professionisti e aziende a Reggio Emilia e Bologna attivi da febbraio 2017.
Scheda per l'iscrizione al termine del catalogo.
Per informazioni: gestione[at]sinergie-italia.com
3i group è un gruppo imprenditoriale che, dal 1984, offre servizi integrati di ingegneria, progettazione, consulenza e formazione sia in campo civile che industriale. Il gruppo è parte di una della rete d’impresa che consente di cogliere nuove opportunità, conseguire obiettivi ulteriori e fornire al cliente un servizio ancora più completo.
L’identità del gruppo 3i è rappresentata dalla multidisciplinarietà delle competenze e dall’efficace integrazione delle differenti professionalità che lo compongono.
"Smart maintenance". Una piattaforma di Realtà Aumentata per il Training e le...Graziano Terenzi
Il white paper mostra come le applicazioni AR forniscano una tecnologia che supporta e velocizza le operazioni sul campo aumentando, nel contempo, i livelli di performance e di effettività. Alcune statistiche indicano miglioramenti della performance fino al 30% con gli operatori che riportano un più alto livello di coinvolgimento. Le applicazioni dell’AR a supporto dei tecnici sul campo hanno il potenziale di ridurre i costi fino al 25% grazie ad una più efficiente manutenzione, sostituzione di componenti, identificazione e definizione di nuove connessioni, risoluzione di blocchi o configurazioni errate, e ad un minore affidamento sul personale di backend e sulle risorse di sistema. Inoltre l’utilizzo dell’AR offre l’opportunità per un più rapido miglioramento della qualità dei dati aziendali, grazie alle informazioni raccolte sul campo.
Gli appalti verdi obbligatori e le opportunità delle certificazioni ambiental...CONFINDUSTRIA TOSCANA NORD
Gli appalti verdi obbligatori e le opportunità delle certificazioni ambientali - presentazione di Francesco Baldoni, certificatore Emas - Lucca 13 aprile
The missing links in software estimation: Work, Team Loading and Team PowerLuigi Buglione
This presentation investigates the theoretical foundation of the basic concepts used in software effort estimation, productivity measurement and benchmarking. By elaborating on how similar concepts are defined and used in well-established engineering fields, we aim to shed light on some inconsistent and fallacious use of concepts and units of measure, resulting misconceptions and their consequences in project planning. Particularly, we focus on ‘Work’, ‘Team Power’ and ‘Team Loading’, analyzing the way many studies from the ‘70s on faced such issue. Too often projects fail for being late and not always adding new resources allows respecting established milestones as well as the established quality levels. After setting the theoretical layout, we present the results of an empirical investigation we made using the data in the International Software Benchmarking Standards Group (ISBSG) dataset D&E (Development & Enhancement) v13, using both COSMIC and IFPUG data for Business and Real-Time applications. The results indicate that a considerable number of projects might have been poorly planned and utilized human resources inefficiently, and hence paid much higher costs. Hence, we suggest software companies to revisit the productivity data of the past projects as well as evaluating the new ones by measuring Team Power, Team Loading and comparing to Team Size utilized.
Risk Management: Achieving Higher Maturity & Capability Levels through the LE...Luigi Buglione
A common challenge in life is to evaluate and deal with risks. Even though Risk management is fundamental to any activity, it is too often evaluated and managed from a qualitative rather than a quantitative perspective. In order to improve, too often organizations are seeking compliance against a single model/approach, forgetting that most often ‘one model doesn’t fit all’ and that the target process model is the organizational one, strengthened by external best practices. An approach to process improvement that takes this into consideration is LEGO (Living EnGineering prOcess). LEGO extracts the most useful Elements of Interest (EoI) from several types of maturity models into an organizational Business Process Model (BPM) in order to facilitate to the achievement of higher organizational maturity and capability levels, that’s the definitive intended target to be improved. This paper applies the LEGO approach to Risk Management, analyzing several Risk Management Maturity Models and unifying their practices in order to come up with a more comprehensive process model on risk management integrating multiple views.
L4A - Lean for (being) Agile - Some thoughts and tips for a progressive path ...Luigi Buglione
‘Agile’ risks to be a very (ab)used term in the ICT (and not) community during last years. Agile means – as in the Agile Manifesto – to be responsive, working in team and be ready to change. But what do we need for really being agile? The answer is simple: start to be (before) LEAN in order to be (after) AGILE. Too often these two terms risk to be meant as synonyms, but they are different and complementary to each other. The presentation will show a possible path to do that, adopting Lean techniques as suggested by Six Sigma for reducing wastes (the seven ‘muda’) and only then adopting Agile ones, also applied to Functional (and not) Sizing Methods, such as Function Points and SNAP. Note from the conference organizers: “Muda” is a Japanese word meaning “waste”. The Toyota Production System identified seven types of “muda”.
From Software to Service Sustainability: a still Broader PerspectiveLuigi Buglione
This paper proposes an approach to enlarge the view from software (products) to services, because a service is a broader container than a project and can include software as well as other assets to be managed from an Asset Management perspective. Hybridizing typical software and service management models and frameworks could help organizations in a better management of their assets, stressing more the (inner) value of intangibles and of a good mid-long term strategy, passing for a valuable proposition of MVVs (Mission-Vision-Values).
In Information and Communication Technology (ICT) a ‘deliverable’ may be either software (perceived as an ‘output’) or a service (perceived as an ‘outcome’). On the one hand, the differences between software and service have led to the design of parallel models and lifecycles with more commonalities than differences, thereby not supporting the adoption of different frameworks. For instance, a software project could be managed applying best practices for services (e.g. ITIL), while some processes (e.g. Verification & Validation) are better defined in models of the Software Management domain. Thus, this paper aims at reconciling these differences and provides suggestions for a better joint usage of models/frameworks. To unify existing models we use the LEGO approach, which aims at keeping the element of interest from any potential model/framework for being inserted in the process architecture of the target Business Process Model (BPM) of an organization, strengthening the organizational way of working. An example of a LEGO application is presented to show the benefit from the joint view of the ‘software + service’ sides as a whole across the project lifecycle, increasing the opportunity to have many more sources for this type of improvement task.
A Murphological View on Software Measurement: a serious joke or a funny seri...Luigi Buglione
The 30-year experience from the Software Measurement field explains that a strong resistance usually comes from project team members, supposing the real objective is a personal evaluation on their performance and not a neutral measurement for a concrete process improvement. Concurrently, from the middle ‘80s a series of SPI models - such as the Software Capability Maturity Model (Sw-CMM) and nowadays its evolution, the CMMI –provided a guide for realizing a real improvement, where measurement played an important role, before as a Common Feature, then as a separate process (MA – Measurement and Analysis) at Level 2. But a certain resistance still remain alive also after these years.
Recently, in the Management field (and also in ICT) more than “serious” books and reference guides it seems that (apparent) semi-serious publications such as the Dilbert strips by Scott Adams are referenced in technical presentations and papers as a starting point for commenting daily ICT malpractices. If so, another good source for “joking” with such serious things are some of the most know laws, the “Murphy’s laws”, originally written by Arthur Block and after created/modified by plenty of people worldwide and published over the Internet in a sort of “GNU licence for humour”.
This paper tries to propose a “murphological view” on Software Measurement issues, commenting some related measurement-related laws and providing links with main SPI practices at the aim to reduce the percentage of failures in application of Software Measurement programs, as noted by H.Rubin some years ago.
Do we really re-use our knowledge (or not)?Luigi Buglione
Looking back to the last 25 years in IT, one of the most used, practical IT ‘inventions’ has been the ‘cut & paste’ mechanism, that’s a reuse of a previous artefact. But looking to ICT organizations in these turbulent years – no matter if they deal with software and/ services – many of them seem to do not be designed for resilience. From a root-cause analysis (RCA), one of the main ‘bones’ for improvement is the lack of reuse of organizations’ experience, in terms of historical data, artefacts, processes, etc.
Thus, re-using the ‘internal knowledge’ (before thinking to software reuse) is – as many Process Improvement models like MPS.BR (both the SW and the SV constellations) affirm – one of the real ‘wheels’ driving an organization to achieve success, measured not only by ROI but also by VOI (Value on Investment), because the more and more relevance in understanding the role and value of intangibles in our business.
The keynote presentation will move from evidences and well-known industrial stories for discussing and understanding where knowledge has (or not) been the key driver for organizational success, which possible barriers to that and how multi-model approaches as LEGO (Living EnGineering prOcess) could help an organization in achieving such goals in an easier way, betting mostly on people knowledge, as the ‘building perspective’ also looking to the Balanced Scorecard (BSC) schema and logical flow.
Balanced Measurement Sets: Criteria for Improving Project Management PracticesLuigi Buglione
The availability of a measurement framework right at the early stage of a project can have a very positive impact in the management of software development process. In this paper, we cope with this problem proposing a methodology that can allow an early adoption of balanced measurement sets, which will be iteratively refined at each iteration of the process. The proposed methodology can be implemented and supported by open source tools like the Spago4Q platform.
PIF or SNAP? That's the Question! Or maybe it's not? - A panelLuigi Buglione
The presentation introduced a panel organized at IWSM-MENSURA 2014 by MAIN (Metrics Associations' International Network - www.mai-net.org) about the value and way to deal with NFRs in a software project, using a series of PIF (Productivity Impact Factors) for calibrating your project effort or a specific sizing unit? That's the (discussed) question!
Software Sustainability: a Broader PerspectiveLuigi Buglione
In this presentation the approach to address software sustainability evaluation is discussed. We believe that software sustainability is a complex business to be addressed by including the largest set of indicators from software development, use, maintenance and disposal.
An ISO/IEC 33000-compliant Measurement Framework for Software Process Sustain...Luigi Buglione
ICT can provide a definitive contribution in reducing CO2 emissions and, in general, in the environment preservation. Because its pervasiveness in today’s life, software in particular plays an important role in achieving such a goal. Software process is the combination of those practices, directly or indirectly involved in software development, operation, and maintenance.
In previous papers the authors addressed the topic of evaluating the sustainability of software products. In this paper the focus is on the evaluation of the sustainability of the software process, i.e. the measurement of the extent the process is performed by having care of the environment and by minimizing its impact on the environment. To do that, a sustainability measurement framework for software process is defined. Such a framework is composed by Sustainability Levels, Sustainability Process Attributes and being compliant with the requirements stated in the new ISO/IEC 33000 series standard for software process assessment.
Measurement Process: Improving the ISO 15939 StandardLuigi Buglione
Over the past few years ISO has published a number of specific standards detailing processes included in a generic form in software development life cycle models. ISO 15939 on the Measurement process itself is an example of such specific ISO standard. This paper presents some suggestions for improvements to its Measurement Information Model and to the measurement plan within the planning process of ISO 15939.
The LEGO Strategy: Guidelines for a Profitable DeploymentLuigi Buglione
When dealing with improvements, organizations seek to find a break-even point for their applications as early as possible in order to maximize the return from their investment. However, in some cases such a strategy can lead to a long term failure by not realizing the full benefits, when focusing only on a short term. The LEGO (Living EnGineering prOcess) approach – a method for building your own process meta-model based on multiple inputs – is a way to make an organization more efficient and effective, optimizing resources, as well as time and costs through looking at its entire Business Process Model. This paper introduces the elements for designing a strategy for a more valuable deployment of a process improvement initiative, in order to optimize the choice of the models and elements to be considered as an input to the LEGO approach
ICEBERG: a different look at Software Project ManagementLuigi Buglione
Every project – whatever the application field – should be managed taking into account at least four dimensions: Time, Cost, Quality and Risk. To manage these dimensions, a key tool for a Project Manager is to increase project visibility, defined as the amount of information about the project associated with its probability of occurrence. This paper uses the “iceberg” metaphor to introduce the ICEBERG (Improvement after Control and Evaluation-BasEd Rules and Guidelines) approach that can help Project Managers through the use of standard (de jure and de facto) ICT methods and techniques. This approach focuses not only on the management, and measurement, of resources, process and product, but also of the project and the organization itself. A list of candidate measures related to these 5 entities is suggested for a comprehensive software measurement plan in order to reduce project risk.
Improving Measurement Plans from multiple dimensions: Exercising with Balanci...Luigi Buglione
“Tracking & Control” activities in software projects are most often based, in industry, on just two dimensions of analysis: time and cost. Most often, ‘tracking & control’ excludes other dimensions (such as quality, risks & impact on society, stakeholders’ viewpoint in a broader sense) taken into account in Performance Management models such as EFQM or the Malcolm Baldridge model. How can balancing those multiple concurrent control mechanisms across several dimensions of analysis be done? Balancing Multiple Perspective (BMPs) is a procedure designed to help project managers choose a set of project indicators from several concurrent viewpoints. This paper also presents the related questionnaire with a list of 14 candidate measures helping to compare the “as-is” situation and to figure out what will be the desired one, including cost figures to be possibly considered in the budget for next projects.
Improving the User Story Agile Technique Using the INVEST CriteriaLuigi Buglione
Although the Agile Software Development (ADS) approach has been around for the last 15 years, it is only recently that attention has moved towards Agile Software Management (ASM) for tackling some of the management-related weaknesses, such as estimating on the basis of User Story points. This paper presents an application of the INVEST criteria (Independent – Negotiable – Valuable – Estimable – Small –Testable) for improving the measurement technique of User Stories, introducing sizing units and a technique to negotiate requirements. It includes a discussion on an approach to balancing the six criteria used to evaluate a set of User Stories in a Sprint.
During the past 20 years Maturity & Capability Models (MCMs) become a buzzword in the ICT world. Since the initial Crosby’s idea in 1979, plenty of models have been created in the Software & Systems Engineering domains, addressing various perspectives. By analyzing the content of the Process Reference Models (PRM) in many of them, it can be noticed that reuse-related issues have unfortunately often little importance in the appraisals of the capabilities of software organizations while in practice they are considered as significant contributors in traditional process and organizational performance appraisals. While MCMs represent a good mean for assessing the status of a set of processes, integrating two or more models with a common area of focus can offer more information and value for an organization. The aim of this paper is to present some information about Reuse best practices and models, keep the best components from each model and – using the LEGO (Living EnGineering prOcess) approach to process improvement - merge those best practices from several types of maturity models into an organizational Business Process Model (BPM) in order to achieve in an easier and faster way higher organizational maturity and capability levels.
Sustainability of software depends on several factors including the processes deployed to develop, operate, maintain and dispose software systems. To make such sustainability-related processes actually deployable and controllable, specific green metrics and indicators are necessary. In this paper we propose a sound methodological approach to derive green metrics and we provide also a significant set of metrics, derived according to such an approach, able to address different aspects of software sustainability.
1. www.eng.it
La Resilienza e i Modelli di Maturità
Luigi BuglioneBuglione, Ph.D.
Process Improvement & Measurement Specialist
Industry & Service Business Unit
Engineering.IT
Seminario AICQm
Dalla Qualità alla Sicurezza Sociale:
le nuove norme sulla Continuità Operativa
Napoli, 5 Giugno 2013