Effective Change Management Strategies A Maintenance Strategy for

Similar documents
Achieve Continuous Compliance via Business Service Management (BSM)

Process Management in SCM. Author: Nina RajKumar

<Insert Picture Here> E-Business Suite Konfigurationsmanagement leicht gemacht mit dem Application Change Management Pack

Managing BI Volume & Complexity for Better Service

Automating Your Hyperion EPM and BI Environments. Tom Tortolani, VP Products January 2010

Flosum FLOSUM. Application Lifecycle Management

Cisco Tidal Intelligent Automation for SAP

Bitnami Stacksmith. What is Stacksmith?

Identity & access management solution IDM365 for the Energy & Utility sector

Rapidly Reduce Segregation of Duty Violations in Oracle EBS R12 Responsibilities Session ID#: 15042

Cisco Tidal Enterprise Reporter

A Simplified and Sustainable Approach to NERC CIP Compliance with Cyberwiz-Pro. NERC CIP Compliance Solutions from WizNucleus

BMC - Business Service Management Platform

Configuresoft RSCA Program. Security and Compliance Assessment Provides Immediate Business Value. Abstract TECHNICAL BRIEF

Benefits of Deploying Oracle E-Business Suite on Oracle Cloud At Customer O R A C L E W H I T E P A P E R D E C E M B E R 2017

Protect your Enterprise & Meet the Regulatory Compliance Requirements

JBoss Operations Network Management Simplified. Sumit Bhat Support Relationship Manager Red Hat

Jakarta ServiceNow Governance Risk Compliance. Last updated: February 13, 2019

Integrating Configuration Management Into Your Release Automation Strategy

Stat Production Services for PeopleSoft (Onsite and Remote)

CA Network Automation

MAY 16 & 17, 2018 CLEVELAND PUBLIC AUDITORIUM, CLEVELAND, OHIO

Cisco Intelligent Automation for Cloud

<Insert Picture Here> Latest on Oracle Application Change Management Pack for Oracle E- Business Suite

Title: Configuration Management: The Core of IT Operations Session #: 495 Speaker: Donna Scott Company: Gartner

Tools and technology usage in PFMS application lifecycle management process

10/18/2018. London Governance, Risk, and Compliance

Atlant s atwatch CAPA TM. Corrective and Preventive Action System (CAPA) Product & Services Bundle for

Utilizing Oracle Standard Functionality and other Oracle tools to comply with Sarbanes- Oxley By Olga Johnson City of Detroit

OAUG / DOAG SIG DAY Vienna Sept 27 th 2010 Oracle Governance Risk and Compliance OAUG. August 2010

HP Quality Center 10 Overview

Be Remarkable. CONTRACT LIFECYCLE MANAGEMENT SOFTWARE. Software Overview OVERVIEW. Additional Available Professional Services

Title: HP OpenView Configuration Management Overview Session #: 87 Speaker: Loic Avenel Company: HP

Building a CMDB You Can Trust in a Complex Environment

ServiceNow Order Form Product and Use Definitions

Integrated Application-to-Disk Management

Implementing ITIL Best Practices

Dramatically Improve Service Availability Prioritize issues and prevent problems with consolidated event monitoring and service automation.

10/16/2018. Kingston Governance, Risk, and Compliance

ROLE : INFORMATICA ADMINISTRATOR

CENTRE (Common Enterprise Resource)

Stat Production Services for Oracle E-Business Suite (Onsite and Remote)

PeopleSoft Highlights. PeopleSoft CoE

Keep It Simple. White Paper

Transform records management

Take Control of Your On-Premises and Cloud-Based WebLogic Domains (CON6992)

NICE Quality Central. Unify Your Quality Programs in a Single Application

IBM Rational Extensions for SAP Applications Application lifecycle management for consistent governance

EVM-11-G-001 Does the tool use ITIL 2011 Edition process terms and align to ITIL 2011 N/A. Edition workflows and process integrations?

Vendor Due Diligence: Keep The Risk Out!

Integrated IT Management Solutions. Overview

Migrating to SAP BusinessObjects BI 4.x with APOS Well Managed BI Solutions. Tom Woodhead, APOS Systems

Identity & access management solution IDM365 for the Public Sector

What does an external auditor look for in SAP R/3 during SOX 404 Audits? Ram Bapu, CISSP, CISM Sandra Keigwin, CISSP

Oracle Fusion Applications Licensing Information

Managing the deployment of the Nintex Platform

Quantifying the Value of Software Asset Management

Small Business CRM Evaluation Guide

Gain visibility, control, and strategic advantage with next generation spend management.

Delivering Business-Critical Solutions with SharePoint 2010

Providing full life-cycle identity management. August idm365.com

Copyright 2014, Oracle and/or its affiliates. All rights reserved. 2

WCIRBCalifornia. Job Description. Business Intelligence (BI) Engineer. Department: Summary

Contents. About Us. Domain, Technology & Services. Global Presence. Value Proposition. Success Stories. Technology Offerings.

Data Protection Management (DPM)

Qualys Compliance Solutions

<Insert Picture Here> Business-Driven IT Management with Oracle Enterprise Manager

Title: Introducing Enterprise Discovery 2.1 Session #: 537 Speakers: Matt Schvimmer, Matthew Darwin Company: HP

OIC LLC is our Oracle Partner name. It stands for Oracle Independent Consultants (OIC) LLC.

Harden and Standardize Your Database Configurations Across Clouds CON6978

SOA Management Pack: Runtime Governance, and Improved Manageability of all Aspects of Your Business Flows

Desktop Activity Intelligence

Change and Release Management

IBM QRadar SIEM. Detect threats with IBM QRadar Security Information and Event Management (SIEM) Highlights

Achieving Application Readiness Maturity The key to accelerated service delivery and faster adoption of new application technologies

Electronic Personnel Actions for PeopleSoft

Achieve Your Business and IT Goals with Help from CA Services

Release & Deployment Management PinkVERIFY

ebusiness Applications Change Management Automation

Snow optimizer for SAP software

Oracle Business Intelligence Applications

An IBM Proof of Technology IBM Workload Deployer Overview

Qualys Compliance Solutions

SOX perspective of internal control & COSO, COBIT Control frameworks.

Los Rios Community College District Adopted: November 2013 Revised: June 2014

Verint Engagement Management Solution Brief. Overview of the Applications and Benefits of

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into

Compliance in Multiple Regulatory Settings. a Holistic Approach

IBM Tivoli Endpoint Manager for Software Use Analysis

Vendor Cloud Platinum Package: Included Capabilities

HP Cloud Maps for rapid provisioning of infrastructure and applications

white paper An Overview of SURE A Software Configuration Management Solution for Developers of Composite Applications for ClearPath Systems

TREND BRIEF VIRTUALIZATION AND THE DIGITAL WORKSPACE

Sarbanes-Oxley: Company Case Study - Viacom Inc. IT General Controls - Sustaining Compliance Efforts. Anthony Noble VP, IT Internal Audit

The ABCs of. CA Workload Automation

Cisco Intelligent Automation for Cloud

1. EDM OVERVIEW. 1.1 EDM Objectives. 1.2 System. 1.3 Implementations

Scalr empowers enterprises to safely and rapidly deploy to the cloud by addressing the four major problem areas:

SAP s Quality & Testing Platform Complete Solution of Products and Professional Services

Radix Viso MDM.

Transcription:

Effective Change Management Strategies A Maintenance Strategy for Technical and Functional Teams Michael Parker VP of Professional Services, Newmerix Corp

Your Speaker Michael Parker Newmerix VP of Professional Services 8 years with PeopleSoft Global Services and 12 years working with PeopleSoft products and technology Hundreds of PeopleSoft implementations and upgrades Deep knowledge of PeopleSoft application management best practices 19 years of experience with HR processes and best practices

Newmerix The Newmerix product suite reduces the cost and complexity of managing the ongoing, extensive changes inherent in packaged application environments. Our solution results in greater visibility and control over the application lifecycle and improved business agility.

Enterprise Applications Require Change Business Process Changes Overcome Competition Improve Service Cut Costs Improve Quality M&A Vendor Driven Changes from Oracle and SAP New Applications Support Packs Patches Upgrades Compliance and Best Practices Federal, Provincial, and Municipal Regulations Best Practices (COBIT, ITIL, COSO)

The Lifecycle of Change

Functional Users Involved Throughout the Change Process DEMO DEV TEST PROD Technical Team Requirements Functional Team Requirements Test Scripts Test Scripts Approvals Approvals

Challenges of Vendor-Driven Changes #1: IT/Biz Relationship Communicate changes to all involved #2: Workflow Control Define & enforce standard development workflows #3: Approvals Enforce approvals at key gateways #4: Impact Analysis #5: Separation of Duties #6: Systematic Testing #7: Documentation/ Audit Reporting #8: Restore Process Determine the impact of a change before migrating into any environment Define & enforce which users can perform specific activities in specific environments Conduct comprehensive, systematic testing of changes before deploying Document, track and report all changes related to the development process Version all assets and establish restore capability in the development process

Where are Functional Users Needed in the Process? #1: IT/Biz Relationship Communicate changes to all involved #2: Workflow Control Define & enforce standard development workflows #3: Approvals Enforce approvals at key gateways #4: Impact Analysis #5: Separation of Duties #6: Systematic Testing #7: Documentation/ Audit Reporting #8: Restore Process Determine the impact of a change before migrating into any environment Define & enforce which users can perform specific activities in specific environments Conduct comprehensive, systematic testing of changes before deploying Document, track and report all changes related to the development process Version all assets and establish restore capability in the development process

#1: IT/Business Relationship Manual Changes are communicated via emails, verbally at change control meetings, etc. unauditable and unenforceable End users service requests and enhancements enter a black hole with no way to track status or progress No method to centrally collect, categorize, prioritize, organize and track change requests Automated All change requests routed and prioritized based on predefined policies End users can submit and view the status of service requests they ve submitted, creating a two-way communication between business users and IT

#2: Workflow Control Manual Change procedures are maintained via Word/Excel prone to missed steps Change procedures are not enforceable, creating SOX compliance/fraud issues Automated Predefined change control workflows manage each step in the change process through each environment Different workflows can be established for different types of changes

#3: Approvals Manual Approvals communicated via emails, verbally at change control meetings, or in paper forms unauditable and unenforceable Changes can get to production without the required approvals Automated All approval requests routed and prioritized based on predefined policies Changes are locked down unable to complete migration until approvals are formalized with electronic signoffs and authentication

#4: Impact Analysis Manual Tedious process that requires comparison between multiple file types and environments App Designer provides compare reports for only metadata objects External file objects (SQRs, COBOLs, etc.) not included in App Designer compare reports Mapping technical changes to functional business processes based on vendor documentation Automated Impact analysis for all relevant objects (metadata and external files) in a consolidated view Three-way diff-merge provides visibility across multiple environments Automatically mapping technical changes to functional business processes

#5: Separation of Duties Manual Separation may be documented, but not enforced Each environment maintains separate access control Access control changes (new hires, terminations, etc.) must be updated for each environment SOX compliance is difficult to maintain Automated Secure application enforces who can make changes in each application environment, who approves changes, and who migrates changes No overlap between duties

#6: Systematic Testing Manual Takes business users away from their day jobs and requires them to test the same business processes time and again Failed business processes can be missed due to human error Test frequency is limited by resource availability Automated Tests can be recorded once, and run multiple times Automated testing accurately captures error messages, popup messages, etc. that may be missed in manual testing Over time, a robust test bed can be created that tests multiple data sets and variables Consistent testing quality across different testing cycles and resources

#7: Documentation & Auditing Manual Documenting changes is done via email, Word documents is inconsistent and non-compliant with SOX mandates Document version control is usually using a naming convention for documents saved to a server. Establishing a change log during an audit means cobbling together database logs. This does not capture why the change was made Automated All documentation gathered and versioned in a central repository Audit log tracks what changes were made to the application, when the change was made, who made the change, who approved it, who migrated it to production, etc.

#8: Restore Process Manual DBA cuts a copy of the current database prior to applying a change Upon script or process failure the DBA restores the old database by replacing the updated copy with the old copy All changes made between the start of the process and the failure point are lost and must be re-performed Automated Allows users to snapshot a prechange version of every file and object Restoring to previous state is achieved with the click of a button

4 Easy Ways to Gain Control Over Vendor-Driven Changes 1. Standardization 2. Control Points 3. Automation 4. Visibility

Only Newmerix Covers the Lifecycle of Change

Standardization Visually design your change management processes. Design different processes for patches, customizations, or emergency fixes. Automatically recognize which objects are in a patch/project and which steps need to be run. Integrated with AppDesigner so work done in AppDesigner is recognized. Handles both file and metadata objects. Automate!Change lets you design standard change processes

Control Points Each PeopleSoft environment can be configured to automatically enforce separation of duties. Each PeopleSoft environment can be configured to automatically audit any file or metadata changes made to it.

Control Points Gather all service requests in Automate!Control. Design approvals directly into standard migrations. Approve via the web (Automate!Control) or desktop (Automate!Change). Manage all test plans, test cases and test results in one place. Complete document versioning system built in with integration into Excel and Word. Automate!Control lets you collect authenticated approvals from anyone over the web or through Automate!Change.

Automation Automatically deploy PeopleSoft patches or project files. Automatically snapshot files and metadata before moving a patch/project to a new environment. Automate the process of deploying files to file servers, process schedulers and application servers.

Automation Automated testing helps decrease the time required by your functional users, increases the breadth and frequency of testing and can be used by auditors! Use the functional interface to capture your end user knowledge about business processes. Automate!Test uses metadata to understand the changes in your PeopleSoft environment and how they affect your test scripts. The Functional User Interface records what Your users do in PeopleSoft.

Automation Automate!Test uses metadata to understand the changes in your PeopleSoft environment and how they affect your test cases. Metadata features can pinpoint expected failures even in test suites not related to the change. Automate!Test lets you automate the testing of standard business processes. Automate!Test watches changes in metadata to alert you of any changes needed to your test suites.

Automation Generate end user documentation directly from Automate!Test using the business process documentation features. Publish this documentation (Word format) centrally using Automate!Control. Works with functional interface or standard interface.

Visibility Total visibility into Automate!Change. Approve from the web. Generate change management audit reports from the web. Central repository for Automate!Test results.

Visibility Detailed recording of every change management action taken. All user information recorded for each action (who did what and when). Historical data (jobs, actions, migration steps) can be saved for as long as you like.

Newmerix Customers

Q&A Session For questions or a copy of the presentation: info@newmerix.com (Refer to COLLABORATE - PeopleSoft Patches, Service Packs, and Bundles ) To schedule a demo: Newmerix Sales (sales@newmerix.com) (303) 350-3900 Additional Resources: www.newmerix.com

PeopleSoft Patches, Service Packs, and Bundles A Maintenance Strategy for Technical and Functional Teams