
I recently took over on the Infrastructure team, I had to admit, the complexity was much higher than expected. In any case I worked out some priorities, which I think may apply in any situation Here’s the list:
- Asset management: You need to know where you sit. Assets are the basic blocks of anti IT infrastructure. A correct asset management is needed in order monitor, track and plan for the infrastructure. Once the list is clear and it is clear what software runs on a platform, and how various groups use it, then it will easy a service monitoring and a proactive approach towards the business. Needless to say asset management is vital for your finance department, as usually the highest part of the budget comes out from this voice.
- Service monitoring: Once you know your asset, you need to monitor what’s happening at each client, as well as working on the tasks required to maintain the right level of service. A service manager is usually needed to perform this task, as it requires a full dedicated manager with both technical and soft skills, in order to handle critical situation with the costumers.
- Change management: Activities in this process area involve managing and implementing all changes in applications and hardware. This area is the core of the daily work. A strong process need to be in place in order to handle every aspect linked to a change in production (documentation, service management, asset management…)
- Security and compliance: In this area there are two families of activities the first is securing the whole IT asset against external threats (which means setting up a serious patch management and configuration management, as well working in strict contact with the Information Security dept) and the second setting up a strong authentication process in order to manage how users access to IT facilities.
- Governance: Governance is the glue that puts all the pieces explained up together. Governance is related mainly to budget management as well as to following a correct strategy. Compliance to industry and government regulations (like Sarbanes-Oxley, Health Insurance Portability and Accountability Act, and Payment Card Industry Security Standards) is also a relevant process within the governance.