Tuesday, July 28, 2009

Designing An Innovation Incubator To Prevail Over Innovator's Dilemma

The large scale software companies often deal with the tension between incremental and revolutionary innovation. They know that if they only keep listening to their customers' requests the very same customers will put them out of the business. Clayton Christensen has captured this phenomenon in The Innovator's Dilemma. Over a period of time these companies have managed to execute the incremental innovation really well to deliver the same software release after release and occasionally introduce new products. However most of these companies struggle to incubate revolutionary innovation inside the company since it is fundamentally a different beast. The executives are often torn between funding the revolutionary initiatives to ride the next big wave and funding the incremental innovation that the current customers and the market expects. It is absolutely imperative for the executive management to differentiate between these two equally important but very different types of innovation opportunities. Many companies have set up in-house incubators to bring revolutionary innovation to the market but in most cases the incubators are set up as yet another department inside the company that shares the same legacy and bureaucracy. Following are some suggestions on setting up and running an incubator to avoid the innovation disappear down the rat hole:

6x6 cubicle in Iowa won't cut it: There is nothing wrong with Iowa but I won't build an incubator there. Pick a location that emanates entrepreneurial spirit, attracts talent, and is surrounded by good colleges. Scout for a location that has good work-life characteristics where people feel the energy and have social outlets - pubs, hiking trails, good restaurants etc. San Francisco and Palo Alto in the Silicon Valley are a couple of examples of such locations.

I cannot overemphasize the impact of an inspirational physical space that fosters innovation and drives people with insane urge to be creative and build something disruptive. Ditch Steelcase and shop at IKEA. Have a loft-like set-up with open seating, project rooms instead of conference rooms, and have all the furniture on the wheels. Can you write on all the walls? Have alternate comfortable seating all over the places - bean bags, red couches, chairs and coffee tables with tall bar stools. Innovation does not happen in a cubicle. Have an entire team paint the loft with bright colors as a team-building exercise. Pay a mandatory visit to IDEO and d.school in Palo Alto if you haven't already been there.

No process is the new process: The incubator should not inherit your organization's legacy processes. You cannot expect your employees to behave differently to solve a problem if they are restricted by the same process overhead. Throw your application policing process out of the window and let people experiment with whatever works well for them. One of the main reasons why incubators fail because they rely on the organization's product roadmap and capabilities. Don't pick up any dependencies instead simply consider your organization's capabilities as one more source that you can evaluate for your needs. Use open source as much as you can, build your own partner relationships, and OEM whatever you can.

Pizza-size multidisciplinary teams: Can your entire product team be fed on two large pizzas? Smaller and tighter teams reduce the communication overhead, churn, and produce amazing results. Don't follow your corporate headcount calculations. Go for smaller teams. Hire I-shaped and T-shaped people to form a multidisciplinary team. Have a good mix of internal people who understand the business that you are into and the external people that are entrepreneurs or have worked in incubators. Get help from the external recruiters to find the right people since the internal recruiters may or may not have expertise to find and hire the kind of people that you are looking for.

Be agile and design think everything: Design thinking and agile methodology empower the teams to apply an ambidextrous and iterative approach to take on the revolutionary ideas in highly ambiguous environment. Encourage wild ideas, defer judgment, and be iterative. Be visual in storytelling, stay close to your customers and end-users, and have persuasive, catalysts, and performance design. Focus on useful over usable. Have a good-enough mindset and ship often to get continuous feedback to keep improving. Iterate as fast as you can and keep your sprint cycles small.

Seed, Round A, and Round B: This is where many organizations get hung up on an upfront $200M business case to qualify the business opportunity as incubation-worthy. If all the start-ups required to have a detailed upfront business model we would not have had Twitter, Facebook, Google, Craigslist etc. The same incremental business case mindset simply won't work for revolutionary innovation. The disruptive innovation has characteristics that many people haven't seen their in their lifetimes. The organization need to adopt the VC model and embrace the high risk high reward business environment. There will be plenty of failures before you hit a jackpot but that's the fundamental premise of VC funding. Have a separate budget and an investment decision process that provides autonomy to an incubator to make their own decisions without going through a long chain of command. Have multiple rounds of funding to ensure that you are tracking the potential of the innovation right from the seed to the maturity.

Explore all exit strategies: Don't expect to go-to-market with everything that comes out of an incubator. The mainstream product teams in your organization may or may not embrace and support the innovation citing the reasons "not invented here" or "too radical". Focus on your customers and success stories. If you are successful people will come to you instead of you selling the outcome to the organization. Be courageous and kill the products that are not working out and experiment with other exit strategies such as spin-offs, outright sale etc. Try to keep the product portfolio moving. High volume and turnover is a good thing for an incubator. Financial success is not the only success that counts; happy customers, re-invigorated organization, and global visibility as an innovation player are equally important KPI.

Reward high risk behavior: People work for uncertain and highly ambiguous projects for two reasons - higher reward for higher risk and passion to build something new. Design your compensation structure that is fundamentally different than your corporate title-driven compensation and includes a generous equity option. The titles don't mean much when it comes to an incubator. What really matters is the skills, attitude, and the knowledge that people bring to the table. The career path in an incubator is very different than a conventional corporate ladder. Make sure that all the people that are part of an incubator truly understand what they are signing up for and are passionate for the work rather than simply waiting to be a "Chief Innovation Officer".

Friday, July 17, 2009

Debunking The Cloud Security Issues

Forrester recently published a report on the security of cloud computing that grossly exaggerates the security threats. To point out few specific instances:

"Users who have compliance requirements need to understand whether, and how, utilizing the cloud services might impact your compliance goals. Data privacy and business continuity are two big items for compliance. A number of privacy laws and government regulations have specific stipulation on data handling and BC planning. For instance, EU and Japan privacy laws demand that private data—email is a form of private data recognized by the EU—must be stored and handled in a data center located in EU (or Japan) territories"

This is a data center design 101. One of the biggest misconceptions the organizations have about the cloud computing is that they don't have control over where their information is being stored. During my discussion with the Ron Markezich, corporate vice president of Microsoft Online, at the launch of Microsoft's Exchange on the cloud he told me that Microsoft already supports the regional regulatory requirements to store data in regional data centers. Cloud is fundamentally a logically centralized and physically decentralized medium that not only offers utility and elasticity but also allows the customers to specify policies around physical locations.

"Government regulations that explicitly demand BC planning include the Health Insurance Portability and Accountability Act (HIPAA) ...."

Amazon EC2 fully supports HIPAA [pdf] with few customers already using it. It is rather strange that people think of cloud as a closed and proprietary system against an on-premise system. A CIO that I met few weeks back told me that "on-premise systems are like an on-premise vault that you don't have a key to". The cloud vendors are under immense pressure to use open source and open standards for their infrastructure and publicize their data retrieval and privacy policies. In fact many people suggest that the United States should force the public companies to put their financial information on the cloud so that SEC can access it without any fears of the companies sabotaging their own internal systems. The cloud vendors have an opportunity to implement a common compliance practice across the customer. The customers shouldn't have to worry about their individual compliance needs.


"The security and legal landscape for cloud computing is rife with mishaps and uncertainties."

And the rest of the landscape is not? What about T.J. Maxx loosing 45.7 million credit and debit cards of shoppers, Ameritrade loosing backup tapes that had information of 200,000 of its customers, and UPS loosing Nelnet's backup tape that had personal information of approximately 188,000 customers?

"With the rising popularity of cloud computing and the emergence of cloud aggregators and integrators, the role of an internal IT security officer will inevitably change—we see that an IT security personnel will gradually move away from its operations-centric role and step instead into a more compliance and requirements-focused function."

Staying in current operational role still requires the IT to be compliant. Just because the information is stored on-premise it does not automatically make the system compliant. I would expect the the role of operational IT to change from a tactical cost center to a strategic service provider. If the IT does not embrace this trend they might just become a service consolidation organization. The role of a security officer will evolve beyond the on-premise systems to better understand the impact of the cloud and in many cases help influence the open cloud standards to manage and mitigate the security risks.

"In other cases, the division is not quite so clear. In software mashups, or software components-as-a-service, it can be difficult to delineate who owns what and what rights the customer has over the provider. It is therefore imperative that liability and IP issues are settled before the service commences."

I partially agree. The customers should absolutely pay attention to what they are signing up for and who will own what. The critical aspect of the IP is not the ownership but the IP indemnification. After the SCO case customers should know what are their rights as a customer if someone sues a cloud provider for IP infringement.

"Other contractual issues include end-of-service support—when the provider-customer relationship ends, customer data and applications should be packaged and delivered to the customer, and any remaining copies of customer data should be erased from the provider's infrastructure."

This is what happens when we apply the same old on-premise contracts to the new SaaS world. There are no copies of the software to be returned. Customer simply stop receiving the "service" when the relationship ends. Vendors such as Iron Mountain advocates the role of a SaaS escrow for business continuity reasons. It is up to the customers to decide what level of escrow support they need and what's their data strategy once the relationship with a SaaS vendor ends. It is certainly important to understand the implications of SaaS early on but there is absolutely no reason to shy away from the cloud.

Thursday, July 9, 2009

Chief Sustainability Officer - the next gig for a CIO

CIO no longer means Career Is Over. CIOs should not underestimate their skills and organizational clout to lead the company in its sustainability efforts by being a Chief Sustainability Officer (CSO).

Leverage relationship with the business: As a CIO you work closely with the business and have holistic understanding of the challenges that the business faces and the growth opportunities that they aspire to go after. You can leverage the relationship with the business to own and execute the sustainability strategy and effectively measure and monitor the progress using the expertise and investment into the IT systems. You can walk your business folks through your scenario-based architecture to help them quantify the business impact of the sustainability initiatives and estimate the required transformation efforts.

Start with Green IT and lead the industry: Start with the area that you are most familiar with. Reduce the carbon footprint of your IT systems by improving the PUE of the data centers and better manage energy consumption of the desktops. If you do decide to disinvest into the data centers and move tools and applications to the cloud it will not only reduce the energy cost but would also result in consuming cleaner energy. Share your best practices with your industry peers and lead your industry in the sustainability efforts.

Make Sustainability a business differentiation: For many organizations sustainability is not just a line item in the corporate responsibility report, it is actually the future growth strategy and a sustainable competitive advantage over their competition e.g. sustainable supply chain, higher operating margins, end-to-end environmental compliance etc. As a CIO you have the right weapons and skills in your arsenal to transform the organization in the sustainability initiatives. You could innovate your company out to grow leaps and bounds by focusing on the sustainability. This could be a blue ocean strategy for many organizations that are struggling in the red ocean to beat the competition. You do have an opportunity to empower your customers in their mission to be sustainable by providing them the data that they need e.g. a bill of material with the carbon footprint and recycle index, realtime energy measurement etc.

Redefine the program management office: The sustainability projects are very similar to IT projects in many ways - make a large set of stakeholders to commit without having much influence on them, work with internal employees, customers, and partners etc. Traditionally you have been running the program management office for technology and information management projects. Apply the same model and leverage skills of your program managers to run sustainability projects internally as well as externally. Sustainability is fundamentally about changing people's behavior. Promote alternate commute program tools such as RideSpring, carbon social networks such as Carbonrally, and employee-led green networks such as eBay Green Team. Run targeted campaigns to reduce energy and paper consumption, increase awareness, and solicit green ideas. Right kind of tools with an executive push and social support could create a great sustainable movement inside an organization.

Chief Sustainability Officer is an emerging title. Your ability to work across the organization, leverage relationship with the business to sell them on the sustainability goals, and manage the tools that are penetrated in all parts of your organization make you well suited for this role. A CSO does not necessarily have to be a domain expert in sustainability. In fact I would expect a CSO to be a people-person that can make things happen with the help of the sustainability experts and visionaries.

Now you know what your next gig looks like.

Monday, June 29, 2009

Structure 09 - Cloud Computing Is Here To Stay And Grow

I was invited as a guest blogger to Structure 09 - a day long event by GigaOM focusing on cloud computing. It was a great event with an incredible speaker line-up of thought leaders in the domain of cloud computing. The panel and keynote topics included persistence on the cloud, hosting web apps on the cloud, infrastructure design etc. I won't attempt to summarize everything that I saw and heard, instead here are some impressions:

Solving interoperability with Open Source: A founding developer of Wordpress, Matt Mullenweg, strongly advocated open source for the cloud for two reasons. The first reason is to achieve interoperability and the second is to ensure the business continuity when certain vendors cease to exist. As I have argued before there is a strong business case for open source on the cloud. It was great to see the reaffirmation that other thought leaders feel the same way.

Operational excellence: Javier Soltero, CTO of Management Products at SpringSource, emphasized the operational excellence as a key differentiation for a company to achieve a competitive advantage. Vijay Gill, a senior manager Engineering and Architecture at Google, also feels the same way. He believes that having the lowest cost platforms capable of providing good enough service is going to be a competitive advantage for the companies. For good software, you need great engineers – and most companies aren’t set up to do that. The technological challenges can be solved but it is the smart people writing smart code that will provide the competitive advantage to the cloud infrastructure companies.

Vertical clouds: We are likely to see more and more cloud offerings that are optimized for the vertical functionality e.g. run your Ruby apps on the cloud, analytics on the cloud, storage on the cloud etc. The IT should focus on becoming a service provider against merely a cost center. Chuck Hollis, CTO of Global Marketing, EMC Corporation believes that if IT does not embrace the cloud technology stack, they will most likely become an organization that manages the consolidation of all the cloud services. James Lindenbaum, co-founder and CEO of Heroku, emphasized that the developers should focus on core - what they are really good at and not worry about how the code will scale on the cloud. The bad code is bad code regardless of where it runs.

Hybrid cloud: The debate between private and public cloud continued. The proponents of the public cloud such as Greg Papadopoulos, CTO of Sun Microsystems, argued that most public clouds are run more securely than most private enterprise clouds. I completely agree. One of the ideas that was pitched is to have SEC force the public companies to put their data on the cloud. If, for compliance reasons, the data needs to be retrieved the government has a better shot at retrieving this data from a public cloud against a private and proprietary system that could potentially be sabotaged. The proponents of the private cloud such as Michael Crandell, CEO and founder of RightScale, cited security as a barrier and suggested approaches such as silo clouds that are dedicated for a given customer that do not share data with other customers.

I believe that hybrid deployments are here to stay. Successful cloud and SaaS vendors will be ones who can create seamless experience for the customers and end users from top to the bottom of the stack such that the customers still retain their current on-premise investment, keep their data that they don't want on the cloud, and significantly leverage cloud for all their other needs.

It was a lot of information packed into one day event. However on the lighter side Om's conversation with Marc Benioff included Marc poking fun at Oracle and Microsoft. Marc is witty and he has great sense of humor. Check out his conversation:

Thursday, June 18, 2009

Cloud Computing At The Bottom Of The Pyramid

I see cloud computing play a big role in enabling IT revolution in the developing nations to help companies market products and services to 4 billion consumers at the bottom of the pyramid (BOP). C.K.Prahlad has extensively covered many aspects of the BOP strategy in his book Fortune At The Bottom Of The Pyramid that is a must-read for the strategists and marketers working on the BOP strategy.

This is how I think cloud computing is extremely relevant to the companies that are trying to reach to the consumers at the BOP:

Logical extension to the mobile revolution: The mobile phone revolution at the BOP has changed the way people communicate in their daily lives and conduct business. Many people never had a landline and in some case no electricity. Some of them charged their mobile phones using a charger that generates electricity from a bike. As the cellular data networks become more and more mature and reliable the same consumers will have access to the Internet on their mobile phones without having a computer or broadband at home.

The marketers tend to be dismissive about the spending power of the people at the BOP to buy and use a device that could consume applications from the cloud. BOP requires innovative distribution channels. The telcos who have invested into the current BPO distribution channels will have significant advantage over their competitors. The telcos, that empowered people leap frog the landline to move to the mobile phones, could further invest into the infrastructure and become the cloud providers to fuel the IT revolution. They already have relationship with the consumers at the BOP that they can effectively utilize to pedal more products and services.

Elastic capacity at utility pricing: The computing demand growth in the developing countries is not going to be linear and it is certainly not going to be uniform across the countries. The cloud computing is the right kind of architecture that allows the companies to add computing infrastructure as demand surges amongst the BPO consumers in different geographies. Leaving political issues aside the data centers, if set up well, could potentially work across the countries to serve concentrated BOP population. The cloud computing would also allow the application providers to eliminate the upfront infrastructure investment and truly leverage the utility model. The BOP consumers are extremely value conscious. It is a win-win situation if this value can be delivered to match the true ongoing usage at zero upfront cost.

Cheap computing devices: OLPC and other small handheld devices such as Netbooks are weak in the computing power and low in memory but they are a good enough solution to run a few tools locally and an application inside a browser. These devices would discourage people from using the applications that are thick-client and requires heavy computation on the client side. The Netbooks and the introduction of tablets and other smaller devices are likely to proliferate since they are affordable, reliable, and provide the value that the BOP consumers expect. Serving tools and applications over the cloud might just become an expectation, especially when these devices come with a prepaid data plans.

Highly-skilled top of the pyramid serving BOP: Countries such as India and China have highly skilled IT people at the top and middle of the pyramid. These people are skilled to write new kind of software that will fuel the cloud computing growth in these emerging economies. The United States has been going through a reverse immigration trend amongst highly skilled IT workers who have chosen to return back to their home countries to pursue exiting opportunities. These skilled people are likely to bring in their experience of the western world to build new generation of tools and applications and innovative ways to serve the people at the BOP.

Sustainable social economies: It might seem that the countries with a large BOP population are not simply ready for the modern and reliable IT infrastructure due to bureaucratic government policies and lack of modern infrastructure. However if you take a closer look you will find that these countries receive a large FDI [pdf] that empowers the companies to invest into modern infrastructure that creates a sustainable social economy.

Most of the petrochemical refineries and cement manufacturing plants that I have visited in India do not rely on the grid (utility) for electricity. They have set up their own Captive Power Plants (CPP) to run their businesses. Running a mission critical data center would require an in-house power generation. As I have argued before, local power generation for a data center will result into clean energy and reduced distribution loss. There are also discussions on generating DC power locally to feed the data centers to minimize the AC to DC conversion loss. Relatively inexpensive and readily available workforce that have been building and maintaining the power plants will make it easier to build and maintain these data centers as well. The local governments would encourage the investment that creates employment opportunities. Not only this allows the countries to serve BOP and build sustainable social economy but to contribute to the global sustainability movement as well.

Wednesday, June 10, 2009

Structure 09: Put Cloud Computing To Work

GigaOM has organized an exciting event on cloud computing, Structure 09, on 06/25/2009. I will be at the event as a guest blogger and will be part of the energy and excitement. GigaOM has managed to put on an excellent schedule packed with great speakers including Marc Benioff, Michael Stonebraker, Jonathan Helliger, Greg Papadopoulos, Werner Vogels, and many others. I like the breadth of topics - cloud databases, data center design and optimization, commodity hardware, private cloud etc. I will see you there if you are planning on attending the event and if not come back here for blog posts covering the event. Leave a comment if you would like to see any specific topics or sessions covered.

Here is a lineup of the speakers:

Keynotes
  • Marc Benioff | Chairman and CEO, Salesforce.com
  • Paul Sagan | President and CEO, Akamai
Confirmed Speakers Include:
  • Werner Vogels | CTO, Amazon.com
  • Greg Papadopoulos | CTO, Sun Microsystems
  • Jonathan Heiliger | VP Technical Operations, Facebook
  • Dr. David Yen | EVP Emerging Technologies, Juniper Networks
  • Russ Daniels | VP and CTO, Cloud Services Strategy, Hewlett-Packard
  • Vijay Gill | VP, Engineering, Google
  • Richard Buckingham | VP Technical Operations, MySpace.com
  • Jack Waters | CTO, Level 3 Communications
  • Yousef Khalidi | Distinguished Engineer, Microsoft
  • Dr. Michael Stonebraker, Ph.D. | RDBMS pioneer and CTO, Vertica
  • Raj Patel | VP of Global Networks, Yahoo!
  • Michelle Munson | President and Co-founder, Aspera
  • Lloyd Taylor | VP Tech Operations, LinkedIn
  • Michael Crandell | CEO, Rightscale
  • Jeff Hammerbacher | Chief Scientist, Cloudera
  • Allan Leinwand | Venture Partner, Panorama Capital
  • Jason Hoffman | Co-founder and CTO, Joyent

Sunday, May 31, 2009

Calculating ROI Of Enterprise 2.0 Is Calculating The Cost Of A Lost Opportunity

I get this asked a lot – How do I calculate ROI of Enterprise 2.0? Bruce Schneier says, “Security is not an investment that provides a return, like a new factory or a financial instrument. It's an expense that, hopefully, pays for itself in cost savings. Security is about loss prevention, not about earnings. The term just doesn't make sense in this context.”. Similarly thinking of Enterprise 2.0 as an “investment” looking for a return does not make any sense. At best it is the cost of a lost opportunity.

If you are a CIO looking for a detailed ROI metrics or a simple checklist for Enterprise 2.0 you are probably out of luck. However you could adopt a two-pronged approach. Convince the business that the organization needs Enterprise 2.0 by showing whatever resonates with them e.g. sharing files help reduce email quota, Wiki makes people productive by X percentage, giving them a copy of The Future of Management by Gary Hamel etc. Once you do get a green signal for Enterprise 2.0 deployment, please, don’t be prescriptive to frame the problem or the solution. Instead simply provide the tools at grassroots and let people run with these tools.

For any collaboration, productivity, and social networking tools there is content and there is context that significantly depends upon the individuals that use these tools. For example some people prefer to be human-centric against artifact-centric. Some start interacting and collaborating with other people before exchanging the artifacts and there are others that prefer collaboration that is primarily an artifact-driven. Most of the tools mandate that users make an upfront choice. Even worse the IT makes the decision for them when they decide to purchase a specific tool assuming how people might want to work. This is the reason I like Google Wave since it does not make any assumptions on how people may want to use it. In fact it allows people to weave across people and artifacts seamlessly.

When Google Wave was announced Google spent most of the time demonstrating what it does and spent very little time showing what problems it is designed to solve. They received quite a criticism for that. Many designers questioned Google whether they really know if people want to work this way. Some bloggers called it an act of breathtaking arrogance of blowing off potential competition and touting tech buzzwords. I believe they all are missing the point. Google Wave has broken the grid that the designers are very protective about and has empowered people to stretch their imagination to make mental connections about how this tool might meet their needs that no other tool has met so far.

Would you still ask what’s the ROI?