Becoming you Client's IT - Selling Managed ServicesWritten by David Stelzl, CISSP
If you are attending trade shows or reading technology news, you know that managed services in SMB market is a hot topic right now. There are a number of solutions out there that offer a platform for building managed and monitoring services; with an emphasis on SMB market. This is important because many are asking "How do I improve my financial stability, maintain market share, and increase company's valuation"?If you have already started selling managed services of some type, you know that there is more to it than buying a monitoring tool, installing it in your office, and getting a junior sales person to make thousands of phone calls. There has to be a value proposition that is compelling to what has been called, "The post chasm buyer". It has to actually meet a business need, provide a return on investment, or move a customer closer to some federal security requirement. Before you move forward, there are four key questions you need to ask: 1. What will you offer? You know how most SMB companies don't have time to keep up with their IT environment? Patches are often out of date, security is very weak, main business systems are not highly-available, backups have never been checked, and there is either one or just a part time person dedicated to keeping everything going (a major security risk in itself). Now you need a program that solves problem. Its not monitoring, its much more. You need a program. Your program consists of everything you can do to help a manager or business owner forget about IT. Systems have to be assessed for areas of risk (security holes, points of failure, inadequate procedures and personnel, etc.). Then, your client's infrastructure needs to be repaired, optimized, stabilized, and cleaned up from spyware, RATs (remote access trojans), and other security/availability problems. Finally, a program to keep things going must be put into place. This might include periodic planning meetings, reports that forecast disk space and bandwidth constraints, quarterly or monthly onsite proactive maintenance (some of this might be done remotely or through automated systems), and of course, 7 by 24 monitoring. The bottom line is, post chasm buyers are not going to buy monitoring; they are going to buy uptime. 2. How will you build it? You might have something in place right now - perhaps you do it all yourself. But as Mack Hanan pointed out in his book "Consultative Selling", a book written in 1972 on selling profit improvement, selling hours for dollars is always a commodity and will not build a long term profitable business. You need leverage. Start by listing everything you could do for a company on a periodic basis and categorize it by system. You might have servers, workstations, network components, etc. Then you have administrative tasks that parallel these devices; Helpdesk services, planning and strategy, user awareness training, etc. I recommend that you add security as a separate section where we will list higher level security options in addition to items that will fall under each component. Now figure out what you can automate through tools that are out on market today. Once you have offerings list, you will want to begin building on a platform that has many of these functions built right into it. Your core offering should include monitoring functions, while also addressing security. In a recent workshop I conducted at Level Platforms Headquarters in Ottawa, Peter Sandiford, CEO of Level Platforms made comment that, “Solution providers need to stay on top of not only performance issues but also exploding number of critical threats that can cripple their entire operations. The distinction between an MSP (Managed Service Provider) and an MSSP (Managed Security Services Provider) has disappeared." In response, Peter's organization has put together one complete integrated solution using a monthly subscription price; a pricing model that should help all of us begin process without a large cash outlay.
| | Making The Decision To Automate Your Software TestingWritten by Danna Henderson
Not every software testing project can or should be automated. Before your department accepts a new test automation project, you should establish a process by which projects are reviewed and either accepted or rejected. This can be done with a simple Test Automation Acceptance Checklist.Repeatable Test Cases with Static Data The true cost benefit of test automation is achieved only when same scripts are executed multiple times. The first execution is very expensive because it includes one-time cost of automation tools and 100% of Test Automation engineer’s time. When scripts are executed again, cost of test automation declines sharply. The tool has already been purchased and scripts have already been coded. If there have been changes in application, scripts may require maintenance before being executed. Maintenance on minor software updates should be minimal. Because test automation is only successful when scripts can be executed multiple times, only application which require same test cases to be executed with same data are good candidates for automation. For example, a mortgage application that needs to be regression tested on a weekly basis could be a good candidate for test automation. Script maintenance is minimal and scripts can enter a mortgage application using same group of test data in a fraction of time it would take a manual tester to test same functionality. On other hand, a mortgage origination system, which cannot use same test data for each iteration would not be a good automation candidate. Due to nature of mortgage systems, data could be staged in various states of approval or rejection, based on current data and departments who have already processed their part of mortgage application. If script cannot easily figure out what data to enter in software, it is not a good automation candidate. Another problem with automating this type of complex system is that test environment often contains a sampling of production data that is refreshed on a periodic basis. Sometimes this can be overcome by rebuilding test data when test environment is refreshed. The feasibility of rebuilding test data on a regular basis depends on complexity of application. You will have to make that decision on a case-by-case basis. Application or Environmental Stability Environmental stability is crucial to a successfully automating a software testing project. Scripts cannot be coded in a timely manner if application environment is unavailable, experiences frequent down-times, or excessive defects and errors. Little or No Application or Environment Downtime It takes longer to write scripts than it does to manually test same functionality. Most automation tools are watered down version of C or Visual Basic, which means that writing automated scripts is essentially programming and takes adequate time and specialized skills. Unlike manual test cases, which can sometimes be written based off requirements and mock-ups, automated tools require actual application. When a test environment is unavailable, automation engineers cannot create scripts, which prolongs project and ends up costing more.
|