Information Technology in Government of Canada

IT Vision and Strategy

A Policy Approach to theGC Wide IT Program

For GTECCIOB - ITD

October 2008RDIMS 695587

Chuck HenryChief Technology Officer

Government of Canada

Treasury Board Secretariat

2

GC IT Program History

Strategic, horizontal and expenditure reviews identified:

1. IT spend $5.2 billion per year; 12 - 14 % of the gross operating expenditure of the government.

2. Need to manage IT on “Enterprise” basis as an opportunity for efficiency, effectiveness and savings

3. Major inter-related themes:• Effective Governance • Consolidation • Shared Services• Mature Business Processes

4. Need for mandatory instruments, as a means to realize these objectives

3

GC Wide IT Issues

1. Aging Workforce and competition for new workers.

2. Environmental Impact of under-utilized computing

3. Lack of consistent, ongoing infrastructure investment and renewal (i.e. evergreen issue)

4. Security impact of having a broad attack surface consisting of hundreds of data centres and networks

5. Business Continuity Impact of needing hundreds of IT BCP plans due to the hundreds of data centres and networks

6. Lack of agility / adaptability to emerging requirements

4

Notes: All figures (except Salaries) are generated from the normalized Spend Cube extracts with enhancements through the

Extrapolation model to reflect total GC Spend Salaries Expenditures provided by TBS

The Opportunity Space: GC IT Spend

FY02-03 FY03-04 FY04-05 FY05-06

$0

$500,000,000

$1,000,000,000

$1,500,000,000

$2,000,000,000

$2,500,000,000

$3,000,000,000

$3,500,000,000

$4,000,000,000

$4,500,000,000

$5,000,000,000

GC Total IT Expenditure (Nominal & Validated)

5

The Opportunity Space: CS Age Distribution

6

Aligned

Shared

Common

Today Tomorrow

Unaligned

Moving Towards

CIOB Support for the GC IT Community

7

GC TechnologyArchitecture

1. Enable dept innovation

GC TechnologyArchitecture

1. Enable dept innovation

GC CIO & IT Community Partnership:

1. Accountable for program2. “Evolve” GC IT Architecture

GC CIO & IT Community Partnership:

1. Accountable for program2. “Evolve” GC IT Architecture

Risks Managed1. Aging Workforce and competition for new workers.2. Environmental Impact of under-utilized computing3. Lack of consistent, ongoing infrastructure

investment and renewal (i.e. evergreen issue)4. Security impact of having a broad attack surface

of hundreds of data centres and networks5. Business Continuity Impact of having hundreds of

IT BCP plans for the hundreds of data centres and networks

6. Lack of agility / adaptability to emerging requirements

Risks Managed1. Aging Workforce and competition for new workers.2. Environmental Impact of under-utilized computing3. Lack of consistent, ongoing infrastructure

investment and renewal (i.e. evergreen issue)4. Security impact of having a broad attack surface

of hundreds of data centres and networks5. Business Continuity Impact of having hundreds of

IT BCP plans for the hundreds of data centres and networks

6. Lack of agility / adaptability to emerging requirements

Holistic Planning1. Align GC & Dept perspectives

Holistic Planning1. Align GC & Dept perspectives

Consistent IT Management& Implementation

1. Based on ITIL & COBIT

Consistent IT Management& Implementation

1. Based on ITIL & COBIT

GC IT Program – Manage as an EnterpriseCollaboratively develop and consistently use an IT Management

program across the GC that provides GC wide risk and opportunity management

8

TRANSPARENT1. Common data structures2. Sharing information 3. Unit level accountability

TRANSPARENT1. Common data structures2. Sharing information 3. Unit level accountability

EFFICIENT1. Consolidated2. Simpler / less complex

environment 3. Green4. Low cost

EFFICIENT1. Consolidated2. Simpler / less complex

environment 3. Green4. Low cost

RISKS MANAGED1. Aging Workforce and competition for new workers.2. Environmental Impact of under-utilized computing3. Lack of consistent, ongoing infrastructure

investment and renewal (i.e. evergreen issue)4. Security impact of having a broad attack surface

of hundreds of data centres and networks5. Business Continuity Impact of having hundreds of

IT BCP plans for the hundreds of data centres and networks

6. Lack of agility / adaptability to emerging requirements

RISKS MANAGED1. Aging Workforce and competition for new workers.2. Environmental Impact of under-utilized computing3. Lack of consistent, ongoing infrastructure

investment and renewal (i.e. evergreen issue)4. Security impact of having a broad attack surface

of hundreds of data centres and networks5. Business Continuity Impact of having hundreds of

IT BCP plans for the hundreds of data centres and networks

6. Lack of agility / adaptability to emerging requirements

EFFECTIVE 1. ‘Act as One’2. Interoperability3. Modular4. Guided by ITIL5. Accessible

EFFECTIVE 1. ‘Act as One’2. Interoperability3. Modular4. Guided by ITIL5. Accessible

INNOVATIVE1. Sharing / Leveraging

Community Ideas 2. Agile / adaptable to new

business requirements

INNOVATIVE1. Sharing / Leveraging

Community Ideas 2. Agile / adaptable to new

business requirements

GC IT Program Opportunity to be:

Collaboratively develop and consistently use an IT Management program across the GC that provides GC wide risk and opportunity

management

9

Aligned Shared orCommon

DataCYBER AUTH

ERP / SOAIT SPEND

(ITERATION)KPIs

COMMUNITY B

XX%

COMMON

100%

ALIGNED

YY%

SHARED

EMAIL

EMAIL

APP B

APP B

APP A

APP A

Dept A

Dept B

COMMUNITY A

IT ARCHITECTURE THAT IS:

FLEXIBLE

ADAPTIVE

SECURE

RELIABLE

GREEN

UNIQUE EFFICIENT EFFECTIVE INNOVATIVE TRANSPARENT

Dept A

Dept B

~ 15% SHARED INFRASTRUCTURE

Shared orCommon

InfrastructureDCEDCC

GENS

Shared Ideas

GCPedia

GC IT Strategy – An Evolutionary IT Program

10

KEY PERFORMANCEINDICATOR (KPI)MEASUREMENTS

MANAGEMENTACCOUNTABILITY

FRAMEWORK (MAF)

VISION & STRATEGY(act as one)

MIT POLICYMIT POLICY

IT Governance

IT Planning

IT Management (ITIL, CoBIT)

Technology Architecture

GC IT Program based on..

ITD: Information Technology Division of CIOB, owners of the Management of IT policy and MAF Indicator 13

11

GC IT Program: Community Guidance

1. Role of CIO & CTO and IT community partnership:• Ownership and evolution GC IT Architecture

2. Planning• Align GC and department perspectives• Consistent format and content

3. Pace of adoption for ITIL & COBIT• Expand directive implementation plan• Baseline methodology & KPIs• State of IT in GC

4. GC Technology Architecture• Principles• Alignment strategy / pace of adoption• E-forms, open source, Green IT etc

12

13

GC IT Plan Format

MAF V - IT PLAN TEMPLATE ITEM

statement of vision in a time horizon with specific goals and objectives

alignment to business plan and GC wide objectives

opportunity assessment (criteria & prioritization)

risk based approach

cost analysis of savings, reallocation, trends

resource planning details (expenditures, variance, historical)

outcomes (measurable through performance measurement)

implementation plan (priority & sequencing, feasibility & achievability)

portfolio / governance approach (projects, reporting & monitoring)

BUSINESS• BUSINESS & ACCOUNTABILITY:• GOVERNANCE: • FINANCIAL:• HUMAN RESOURCE:• PERFORMANCE MEASUREMENT: IT BUSINESS• IT SPECIFIC PERFORMANCE MEASUREMENT• TECHNOLOGY ENVIRONMENT (TECHNOLOGY CHOICES & SERVICES BASED) :

ACTION • IMPLEMENTATION PLAN:• CAPACITY & SUSTAINABILITY ASSESSMENT• RISK MANAGEMENT NEW REQUIREMENT MAF VI:• Implementation storyline • Capacity and sustainability assessment• Risk management • Annual update (planned versus actual)

14

Proposed GC ITIL Implementation

Priority Areas CURRENT Year 1 Year 2

Assets and Inventory Management Plan Implement Fully integrated

Baselining & Costing IT Services Plan Implement Fully integrated

IT Service Catalogue aligned to Profile of GC IT services

Plan Implement Fully integrated

Service Level Agreements for provision of IT services

Plan Implement Fully integrated

Service Request process for new or enhanced IT services

Awareness Plan Implement

Transparent pricing model Awareness Plan Implement