Check Point® Software Technologies Ltd.(link is external) has emerged as a leading player in Attack Surface Management (ASM) with its acquisition of Cyberint, as highlighted in the recent GigaOm Radar report.
Your organization's leadership has made the decision to commit to a DevOps methodology. The CEO is calling for the company to deliver value faster, customers are demanding more and expecting results immediately, and internal teams are starting to understand the benefits of integrating deployment, operations and support for faster and more reliable results. It's time to evolve, but change won't be achieved by directive alone. The move will take planning, commitment and strong management.
Start with Part 1: What Does Value Stream Management Mean to the CIO?
Feeling the constant pressure to deliver faster and more frequently, without compromising value, companies are looking for a way to control the overall process from the development level up to c-suite leadership. To make it work, they are turning to value stream management (VSM).
In the structure of VSM, the CIO oversees broad strategy from the top while development teams tactically work to get the job done. Yet, to synchronize the two, there needs to be a layer that communicates between them: a management layer. A successful management layer sits in the middle overseeing development and reporting up to the CIO about how everything is going. Essentially, it's the layer that translates the development methodology into the development process. However, being in the middle creates a specific set of challenges that the management layer faces and must get under control in order to succeed.
Making Things Normal Again
The first challenge management faces is overseeing a series of teams, some which are DevOps oriented and some that need to be trained and introduced to the new philosophy. It's difficult to corral these diverse teams under one directive. There needs to be a common language and nomenclature to address the different teams and get everyone working in the same direction. One term for this is “normalize.” In this context, normalize means taking what teams A, B and C are doing and creating a standard way of looking at things so that metrics and statistics can be combined to produce an overall picture that illustrates how everything is going.
Along those same lines, teams also have become more autonomous and smaller, so the problem gets amplified because normalization has to happen across a broader and more disparate set of teams and methodologies. This is hard to do. Not only is it hard, but it also takes a lot of time to gather and normalize the metrics so they can be reported on.
All of that falls to the reporting-up part of the job. The other part of the management layer's job is not just gathering information to report up to the CIO but using the same information to drive teams to improve and embrace their new roles in the DevOps workflow.
Being pulled in two directions like this can be maddening and difficult but it's where the benefits of managing the value stream become real. Results are realized when reporting goes up to the CIO and cycles back down to the delivery process to be acted upon and create improvements. VSM provides the visibility in the organization to achieve that feedback loop of information.
Enforcing the Rules
Another challenge the management layer is expected to handle is around implementing governance. The management layer is where the rubber meets the road for governance. It is responsible for enforcing and ensuring governance in a reliable way without affecting frequency, throughput, velocity or quality. Governance ensures there is a way to verify that all the policies and practices have been enforced and if an audit is ever called for it will take minimal amount of work to comply. Jobs are on the line at this stage. If audits don't get passed, people get fired.
Digging Deep
On top of bringing teams together and overseeing governance, the management level has to deal with the metrics of testing and QA. Waterfall teams are tried-and-true, but to evolve an entire organization, management is tasked with automating as much as possible and shifting activities to the left in the development cycle. Ultimately, this boils down to efficiently mapping value, diligently looking for waste and incorporating those efforts into the metrics and process of delivery.
Understanding the metrics of the value stream and reducing waste are the bread-and-butter metrics of the management layer. The person in a VSM management role acts as an investigative reporter seeking out metrics that signify a problem of inefficacy or an opportunity in value.
To do that, they need something deeper than a report. This is the difference between reporting and analytics. A report is static, it shows the right now. Analytics shows time and allows comparisons across multiple data sets. This needs to be available at every step so managers can zoom into a team, or multiple teams, and see how they are doing and know which ones are doing better and why. This allows them to take learnings or strengths from one team and apply them to another team. What's working, what's not. The management layer is the layer that makes this happen.
The key challenge for the management layer is to ultimately solve "What does quality look like?" and measure it in terms of its impact on productions and operations. When delivering new features, teams need to know that they aren't bringing down other parts in the system. Quality also needs to be measured from the perspective of the end user: "Did they have an experience that was trustworthy?"
The value of the management layer is that the CIO level wants a static picture, but also wants a view of progress over time. Frankly, that's as far as the CIO needs to dig in. The way that the data was made and the systems behind it are the work of the management layer. That is where the understanding digs deep enough to have a meaningful influence. And for the development layer, it can ensure that everything is geared toward delivering quality software faster.
Read Part 3: What Does Value Stream Management Mean to the Product Team?
Industry News
GitHub announced the general availability of security campaigns with Copilot Autofix to help security and developer teams rapidly reduce security debt across their entire codebase.
DX and Spotify announced a partnership to help engineering organizations achieve higher returns on investment and business impact from their Spotify Portal for Backstage implementation.
Appfire announced its launch of the Appfire Cloud Advantage Alliance.
Salt Security announced API integrations with the CrowdStrike Falcon® platform to enhance and accelerate API discovery, posture governance and threat protection.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
StackGen has partnered with Google Cloud Platform (GCP) to bring its platform to the Google Cloud Marketplace.
Tricentis announced its spring release of new cloud capabilities for the company’s AI-powered, model-based test automation solution, Tricentis Tosca.
Lucid Software has acquired airfocus, an AI-powered product management and roadmapping platform designed to help teams prioritize and build the right products faster.
AutonomyAI announced its launch from stealth with $4 million in pre-seed funding.
Kong announced the launch of the latest version of Kong AI Gateway, which introduces new features to provide the AI security and governance guardrails needed to make GenAI and Agentic AI production-ready.
Traefik Labs announced significant enhancements to its AI Gateway platform along with new developer tools designed to streamline enterprise AI adoption and API development.
Zencoder released its next-generation AI coding and unit testing agents, designed to accelerate software development for professional engineers.
Windsurf (formerly Codeium) and Netlify announced a new technology partnership that brings seamless, one-click deployment directly into the developer's integrated development environment (IDE.)