Book editing.

Today has been a… varied day. Mostly, it has been spent working on editing a book for nonprofits around leadership.  Of course, I’m working on the IT governance chapter.  We are nearly done.  450 pages, 115,000 words with one chapter to come from one of our authors.  I am busily converting everything over to the publisher’s preferred citation style (Chicago footnote) and checking for typos and grammars.

This is a practitioner book so there are several really good cases around leadership (the theme of the book). Once it’s been published I’ll be able to say more, but right now I’m just happy that it’s starting to look like a coherent whole.  Let’s see what my editors think.  

Of droughts, and flooding rains, of businesses and broken business continuity plans.

Well, this is a blog entry, and I have a thing for bad business poetry.  In Brizvegas, as you may have heard, we’ve had droughts a-plenty until the last two years, and then the flooding rains that just created a seeping, growing, black mess that crept stealthily towards everyone’s place of business or abode.

Well, that might seem a little melodramatic, but you know what?  It’s not.  We’re all affected here in Brizvegas, even in little ways such as losing our carparks (my wife doesn’t think that’s so little) or daycare centre (my daughter, yes, same attitude as her mother).  My house was perfectly fine, halfway up Mount Cootha, but I went for a ride on my pushbike to see how my daughter’s daycare centre was faring.  As I rounded a corner and ran into deep, black water quite some time before I rather thought I would.  Squealing on the brakes, I thought to myself, ‘That’s not good!’

I also came to the realisation that my five-year old daughter was not going back to daycare tomorrow.

And so from my back deck, all seemed fine as I looked over the tall trees of Mt Coot-tha, but at the same time some people were cut off from food and petrol – friends of mine were refused service after the floods because they ‘looked grotty’. Well, how would you look after 5 days without power or a shower?

It was an odd flood, bright sunny day, and yet still I noticed the Lexus dealership madly moving cars, and the people at the Brumby’s bakery madly moving flour to the only bakery down the road that wasn’t flooded (it appears they rather had some trouble finding the key, and saved the flour only just in time or the western suburbs would have had to start eating crushed up gumleaves spiced with mud. And then having to drink the wooded Chardonnay left in the wine rack – oh the humanity!)

But the point (and there is one!) is that we precisely do not know what will ever happen to our homes or places of business.  Some of us thought we were really very safe at the time.  That idea’s comforting, but not always true (I can see a mountain full of trees from my back deck – so one day bushfires are on the cards).

Here’s a video I took of a house normally way, way above the river:

All of us banana-benders are looking at each other now, after inland tsunamis, floods-that-weren’t-supposed-to-happen, and Cyclone Yasi, and saying that if we had a blizzard come down Queen Street we’d let loose a suitable expletive and get down to it.

So how do you as a business prepare for these things?

Well, fortunately we do have best practice approaches available such as COBIT and ITIL.  A year or so ago, when I was lecturing at QUT in IT Governance, I asked the students to use COBIT’s framework to help with the development of a business continuity plan.  This is what it, rather drily, says:

DS4.2 IT Continuity Plans: Develop IT continuity plans based on the framework and designed to reduce the impact of a major disruption on key business functions and processes. The plans should be based on risk understanding of potential business impacts and address requirements for resilience, alternative processing and recovery capability of all critical IT services. They should also cover usage guidelines, roles and responsibilities, procedures, communication processes, and the testing approach.

The exercise for the student was to take a look around their bedroom and work out what they might lose, what they could afford to lose, and how they might get back on deck.  I seem to recall one student came up with a contingency plan that involved explaining to his lecturer how he didn’t need to submit the assignment that week – I believe I may have said he needed to improve that excuse for his risk register.

Anyway, business continuity plans are things that are really hard if you don’t know where to start.  So I took that reasonably vague statement above from ITGI’s COBIT and turned it into something like the below.  Feel free to borrow it as a template if you like for your business.  It’s not great, it’s not fantastic, but it’s a start, and at least you get thinking about what you need to do in the event of problems like droughts, flooding rains, bushfires, cyclones, blizzards, alien invasion, or inland tsunamis.  Try adapting this for your purposes:

And so I’m going to leave this blog entry right about here, now that I’ve gotten to use some great phrases like ‘a seeping growing black mess’ (seriously, anyone who saw that floodwater will agree that it was pretty yuck).  Readers, please take a look or download the example business continuity plan – a BCP doesn’t need to be hard, it just needs to work.  In fact, if it’s big and hard and ugly, it’s likely it’ll never work.  ‘Keep it Simple, Silly’ is the appropriate rule of thumb.  It’s a good start for some businesses, possibly not for others.

But please don’t find yourself caught on the hop and having to remove those files from the basement where they’re stored to the top floor of your building in your pyjamas and best thongs, like some people I’ve heard of.  Or the people at the Lexus dealership, who were frantic because they couldn’t find the keys to the four wheel drive blocking the driveway.

PS:  I hope I rickrolled somebody in one of those links up above…

ITGI Roundtable Conference article now available

I see that ITGI has posted the transcript of the roundtable we did back in September 2008 or so.  It covers off some of the leading lights in IT Governance in Brisbane – and then I’m there as well:

  • Tony Hayes, FCPA, Queensland Government, Australia
  • Micheal Axelsen, FCPA, Director, Applied Insight Pty Ltd., Australia (that would be me)
  • Ashley Goldsworthy, AO, OBE, FTSE, FCIE, FCPA, Professor, Australia
  • Duncan Martin, CISA, ACA, CIA, CPA, Chief Financial Officer, The Rock Building Society Ltd., Australia
  • Glen McMurtrie, CISA, CBM, CFE, Principal Internal Auditor, Department of Communities, Australia
  • Simon Middap, Group Manager, ICT and Projects, ENERGEX Ltd., Australia
  • John Thorp, CMC, I.S.P., The Thorp Network Inc., Canada

It reads fairly well – I do remember it as an interesting conversation. 

The transcript is available on and is available as a pdf here.


Answering assignments at a University Undergraduate level

Anyone who has been following my twitter lately will have come to the realisation that one of the things I have been doing for fun and profit lately is lecturing in IT Governance at Queensland University of Technology.

I have to say, as for the fun and profit side of things, I don’t think I can recommend it as a hobby for anyone J. Although you probably already knew that.

I have just finished marking the assignments, and what has struck me is the apparent difficulty that exists for students answering an assignment, so I thought I’d do a bit of a pointer overview for anyone who ever intends to submit an assignment to me in the future. With any luck, I’ll expand this blog post into something more by the time I get to lecture again in the subject next year.

Honestly, I think I will spend an hour in one lecture just going through this overview so that assignments (and by extension, exams) are answered well.

The following pointers are relevant as far as I am concerned if you are ever intending to provide an assignment that gets an above-average to good grade. If you follow these pointers you should at least pass the subject.

Listen to the lecturer

The lecturer wants you to do well. Certainly, I at least know that I’d rather mark good assignments than bad ones. So, attend lectures and listen when subtle (and not so subtle) hints are made regarding the assignment.

Phrases like ‘be sure to read the question’, and ‘only answer the question’ come to mind. Other magic phrases come to mind like ‘This would make a good assignment question’, and ‘Be sure to know what a <insert special word here> is’.

And turn up to lectures and asking questions is a sure way to get an insight into what the lecturer is on about. Not everything can be in the Powerpoint.

Know the marking scheme

Understand the marking scheme, and write so that you address it. For instance, with this most recent assignment, 40% of the total marks were for knowledge, 40% were for analysis, and 20% were for research and communication.

So every answer you give has to address this marking criteria.

Just so you know, Googling and copy-and-paste don’t count much as knowledge unless you’re taking a cut-and-paste class. To me, to demonstrate knowledge you have to provide some facts that answer the question, certainly, but it needs to be your own words (and back it up with research where you need to).

To demonstrate your powers of analysis, you have to answer the question ‘why’? It isn’t good enough to say, ‘do X’, or ‘this applies’ – answer the question why do it, or why does it apply? If your answer doesn’t demonstrate at least some reasoning, you’re going to be missing out on the question. This applies unless the question explicitly states you don’t need to follow the marking scheme for that question.

To demonstrate research and communication, you would firstly be expected to show that you have done some independent research. At an undergraduate level, this probably doesn’t need to be a lot, and in fact it is probably going to be ‘bad’ research. But with things like Proquest around these days there’s really no excuse not to find an article somewhere that demonstrates your point of view. Secondly, you need to write your answer in language that is grammatically acceptable. I know this is tough if English isn’t your first language, but it seems to be tough for non-native speakers as well. To me, to get the answer right, your answers need to be grammatically correct (at an undergraduate level, by grammatically correct I mean tense that is consistent, sentences that are full sentences with a subject, verb, noun, clauses, full stops – that sort of thing).

To me, given the state of the world today you don’t really need to worry too much about using active or passive voice, or even writing great prose (and to be honest, great prose is probably a communication hindrance). Good spelling is a must, but I personally wouldn’t start to ping you until I’d seen a couple of spelling errors every two or three hundred words. Beyond two it’s getting far too sloppy. Think about it – a 5-page report will be about 1,250 words – one typo every 100 words is 13 or so typos in that single assignment. I can live with that, but I can’t give you top marks.

Recall too that paragraphs are your friends, as are dot point lists. If it’s a full assignment, I suspect most lecturers won’t accept dot point answers, but if a dot point list answers the question clearly and easily, use a dot point list after an an introductory paragraph to get the facts out, and then put your analysis in paragraphs.

Format and technical issues

If you have a word limit, stick to it (at least within coo-ee of the word limit, please – more than 10% over the limit is probably going to be a problem for you, not me). To make your case about how you stuck to the word limit, I’d put the word count at the beginning of the assignment, smack dab on the front page.

Have a cover page, headers and footers, and, if your assignment has an appendix, a table of contents is appropriate as well. It will depend on the marking scheme as to whether this affects your mark, but in professional life as well as academic life the ‘duck theory’ applies: if it looks like a duck, walks like a duck, and sounds like a duck, it’s a duck. Make sure the assignment looks the part.

Be sure to give the assignment a good re-read prior to submission to check for spelling errors, word usage, and complete sentences. This means finishing the assignment 48 hours beforehand, letting it sit, and then re-reading it so you’re not so close to the assignment.

Oh, and make sure that little things like page order are done properly, and don’t forget to add your appendices in!

Read the Question

You need to be sure that your answer is actually answering the question that has been asked. This is particularly important when you have a restrictive word limit. Don’t spend a great deal of time defining a term when the question did not ask you to. This can demonstrate knowledge, but will never address analysis and evaluation capabilities, particularly when the definition is virtually copied and pasted.

Be careful that you don’t give the right answer for the wrong question. You can give a good answer, but if it does not answer the question actually asked you will do poorly.

Be certain that your answer addresses the requirements of the question. In answering a question, focus on the verbs that request you, as the student, to do something. Consider the following question:

1. Outline the importance of IT governance to Australian business organisations by accessing current IT governance research. Assess the overall IT governance of Mudflat Plains City Council and provide recommendations regarding steps the organisation could take to improve its IT governance processes.

To do well, the answer had to use words like ‘IT Governance is important because <insert reason>’. Research should be cited too in making this answer (given that the question asked you to do this by ‘accessing current IT Governance research’).

An assessment needed to be provided of IT Governance (e.g. ‘In my assessment IT Governance at MPCC is level 2 in accordance with the maturity model because <list some reasons why>’. Finally the answer needed to provide reasonable steps that could be taken to improve MPCC’s IT Governance processes.

Defining IT Governance is vaguely useful to the answer, but not much, and is not worth spending a great deal of time on as it is not requested in the answer.

I really hope that this helps some students with preparing an assignment at a University level.  I can see that next year I am going to devote a chunk of time to preparing an assignment.

BSB213 Governance Issues in e-Business – Workshop 10 and Workshop 11 Solutions

At the request of a student, I am blogging the solutions to Workshop 10 and Workshop 11 of the subject I have been teaching at QUT.

These are absolutely not intended to be ‘perfect’ answers for the tutorial – they are designed to enhance discussion – but will give students a shot at understanding how to answer a case study.

The workshop solutions are here:

Students (or anyone for that matter) should feel free to email me to discuss these answers.