#64 – RISK AND ORGANIZATIONAL MINDSET: LEARN TO THINK LIKE A COMMODITIES TRADER – GEARY W. SIKICH

UntitledINTRODUCTION
Our concept of risk management needs to change.  I’m not saying that the current practice is wrong; it just provides us with too much static risk assessment and the creation of many false positives in risk reports.  One may ask why I chose the use the example of commodities traders for a new risk mindset.  The answer is rather simple; commodities traders view risk as a rapid change agent.  That is to say, risk changes in likelihood, velocity, impact and exposure over time. Continue reading

#64 – RISK BASED THINKING + PROCESS APPROACH = KEEPING IT REAL – T. DAN NELSON

T. Dan NelsonAn organization’s context and existing plans for operating are important to consider when defining a management system and its associated internal processing requirements.  An organization’s context depends on its product, industry, competence levels of personnel, complexity of operations, size, etc.  All of these are important considerations when defining a management system and deciding what documentation is appropriate. Continue reading

#63 – ROI IN SOFTWARE PM TOOLS & SOFTWARE QC – CAPERS JONES

Capers Jones pixThe construction of large software systems is one of the most hazardous activities of the business world.  The failure or cancellation rate of large software systems is over 35%.  Of the large systems that are completed, about two thirds experience schedule delays and cost overruns.  Yet some large systems are finished early, meet their budgets, and have few if any quality problems.  How do successful projects differ from projects that fail?  Better project management and better quality control are the most important differences between success and failure in the software world.  Thus excellence in software project management has a very favorable return on investment (ROI) due to cost avoidance. Continue reading

#63 – EXPOSING UNCERTAINTY ABOUT RESOURCES IN ISO DIS 9001:2015 – DAVID HOYLE

David in Office (2)There should be no uncertainty about what resources  are required to be determined and provided in implementing the requirements of ISO 9001. Unfortunately, there is considerable uncertainty on the subject as I reveal  as I examine the clauses of ISO DIS 9001 .

The first mention of resources in the standard is in clause 0.4 where in explaining the P in PDCA, it is suggested we “establish the resources needed to deliver results in accordance with customers’ requirements and the organization’s policies”.  Nothing wrong here except this is not a requirement as the clause simply explains a methodology. Continue reading

#63 – CYBER SECURITY CONTROL EFFECTIVENESS – MARK BERNARD

Mark BernardCyberSecurity requires the effective identification of risks and efficient implementation of controls designed to mitigate those risks. The efficient design and architecture of integrated control frameworks is crucial to limiting the potential negative impact on agility and competitiveness of many organizations. Continue reading