{"id":11153,"date":"2022-09-06T07:04:10","date_gmt":"2022-09-05T21:04:10","guid":{"rendered":"https:\/\/nsrd.info\/blog\/?p=11153"},"modified":"2022-09-06T07:04:13","modified_gmt":"2022-09-05T21:04:13","slug":"the-tender-art-of-process-re-evaluation","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2022\/09\/06\/the-tender-art-of-process-re-evaluation\/","title":{"rendered":"The Tender Art of Process Re-Evaluation"},"content":{"rendered":"\n<p>Data protection is a topic commonly pushed out to tender. And I understand why: depending on how far forward into the future you&#8217;re looking, it may be a multi-million dollar exercise (or much more). It affects much of your IT systems, and increasingly, has to straddle on-premises and the public-cloud.<\/p>\n\n\n\n<p>And that&#8217;s why most businesses run tender processes for data protection completely <em>wrong<\/em>.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Tell me which of these criteria you can meet. (Functional, and non-functional requirements.)<\/li><li>Tell me how much time it will take to have it ready.<\/li><li>Tell me how much it will cost.<\/li><li>Tell me all this with extreme haste.<\/li><li>Tell me all this with extreme accuracy.<\/li><li>Tell me all this with extreme brevity.<\/li><\/ol>\n\n\n\n<p>This isn&#8217;t the way to get the best result. At best, it&#8217;s a way to evolve the status quo. <\/p>\n\n\n\n<p>Let&#8217;s look at the Extreme Haste\/Extreme Accuracy\/Extreme Brevity (4, 5 and 6) aspects first. This is like the so-called &#8216;golden triangle&#8217; business rule: &#8220;You can have it fast, cheap, or good. Pick two.&#8221;<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p><em>&#8220;You people respond to tenders all the time. So it doesn&#8217;t matter that we issue the [190 page] tender at the start of Easter with a 10 day deadline. You&#8217;ll have all the answers [to the 450+ questions] already.&#8221;<\/em><\/p><cite>Actual statement.<\/cite><\/blockquote>\n\n\n\n<p>Perhaps unsurprisingly, while there is a lot of overlap between questions asked in tenders, even in industry verticals, that doesn&#8217;t mean all such answers are to hand immediately. It also doesn&#8217;t mean that people have all the time in the world to answer. So, my honest advice here is: if you&#8217;re after <em>accurate <\/em>answers, ditch the <em>haste<\/em>. If you&#8217;re after <em>accurate <\/em>answers with <em>nuance<\/em>, ditch the <em>brevity<\/em>. (If all you&#8217;re after is <strong>haste<\/strong>, the onus is on you to be <em>brief<\/em>, and <em>accurate<\/em>, with what you want.)<\/p>\n\n\n\n<p>(Oh, and everyone deserves their free time. Everyone has weekends, family time, plans and a general need to have downtime. Eating into that time isn&#8217;t productive.)<\/p>\n\n\n\n<p>So now let&#8217;s look at the rest of the tender process.<\/p>\n\n\n\n<p>Tenders are, for the most part, a laundry list of functions you&#8217;d like. I&#8217;m going to suggest something controversial here: <em>who cares?<\/em><\/p>\n\n\n\n<p>Sure, <em>everyone <\/em>cares. Your people who write the questions <em>care<\/em>. The respondents who write the answers <em>care<\/em>. Your people who read the answers <em>care<\/em>. But, respectfully, why?<\/p>\n\n\n\n<p>To see what I&#8217;m driving to, we need to understand the difference between <strong>syntax <\/strong>and <strong>semantics<\/strong>. <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>[<em>T]he&nbsp;<strong>main difference<\/strong>&nbsp;between syntax and semantics is that&nbsp;<strong>syntax<\/strong>&nbsp;is&nbsp;<strong>concerned with structure<\/strong>&nbsp;while&nbsp;<strong>semantics<\/strong>&nbsp;is&nbsp;<strong>concerned with meaning.<\/strong><\/em><\/p><cite>Pediaa, October 12 2015, <a href=\"https:\/\/pediaa.com\/difference-between-syntax-and-semantics\/\" target=\"_blank\" rel=\"noopener\">https:\/\/pediaa.com\/difference-between-syntax-and-semantics\/<\/a><\/cite><\/blockquote>\n\n\n\n<p>You see, asking about <strong>functions<\/strong>, <strong>time <\/strong>and <strong>money <\/strong>is trying to reduce your problem to one of <strong>syntactical<\/strong> accuracy, when your outcome needs to be <strong>semantically <\/strong>accurate. <\/p>\n\n\n\n<p>While it&#8217;s true that many tenders include non-functional requirements as well as the functional ones, the non-functional requirements usually lack the <em>context <\/em>required to achieve true meaning.<\/p>\n\n\n\n<p>And now we get to the most important word in the title of this blog post:<\/p>\n\n\n\n<p class=\"has-text-align-center has-x-large-font-size\"><em>Process<\/em><\/p>\n\n\n\n<p>Tendering for a new data protection solution should be laser focused on process. Technology, cost and time should flow from process, not the other way around.<\/p>\n\n\n\n<p>When preparing for a tender, there are three things you should be asking yourself about your processes:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>What business processes do we have that <em>must <\/em>be adhered to by any new data protection solution?<\/li><li>What business processes do we have that have evolved to suit our current data protection solution, and <em>could<\/em> change?<\/li><li>What business processes do we have that have been forced on us by our current data protection solution, and we <em>want<\/em> to change?<\/li><\/ol>\n\n\n\n<p>You&#8217;ll note in each case I&#8217;m stating <em>business processes<\/em>, not <em>IT processes<\/em>. Why? IT processes exist to serve business processes. In the same way that you should plan your business continuity for business, not IT functions, you should likewise make sure you plan for a new data protection solution with a first order priority being evaluation against your business processes.<\/p>\n\n\n\n<p>That means you start by thinking about all the businesses processes that you can&#8217;t change, could change, and want to change with a new data protection solution. Once you&#8217;ve got those identified, <em>then<\/em> you can move on to asking the same can&#8217;t\/could\/want questions for IT processes. I.e.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>What IT processes do we have that <em>must <\/em>be adhered to by any new data protection solution?<\/li><li>What IT processes do we have that have evolved to suit our current data protection solution, and <em>could <\/em>change?<\/li><li>What IT processes do we have that have been forced on us by our current data protection solution, and we <em>want <\/em>to change?<\/li><\/ol>\n\n\n\n<p>Now, this is not to say that syntactical questions in tenders aren&#8217;t important. They <em>are<\/em>. As I explain in <strong><a href=\"https:\/\/www.routledge.com\/Data-Protection-Ensuring-Data-Availability\/Guise\/p\/book\/9780367256777\" target=\"_blank\" rel=\"noopener\">my book<\/a><\/strong>, it&#8217;s <em>Never About the Technology<\/em> and it&#8217;s <em>Always About the Technology<\/em>. In short, you can&#8217;t solve a problem by only thinking about the technology, just as you can&#8217;t solve a problem by only thinking about the process.<\/p>\n\n\n\n<p>Chances are your business is probably very good at writing <em>syntactically accurate<\/em> tenders &#8212; and ones that cover both functional and non-functional requirements. Yet, syntactically accurate tenders simply result in syntactically accurate responses. Moving forward, it&#8217;s time to make sure you&#8217;re writing <em>semantically accurate<\/em> tenders. The great thing is, good syntax contributes towards semantic quality, so it&#8217;s not a case of starting from scratch. This is an additive process.<\/p>\n\n\n\n<p>A colleague of mine regularly uses the phrase, &#8220;add colour&#8221;, or &#8220;add nuance&#8221;. That&#8217;s what a <em>semantically <\/em>accurate tender is about. Think of a syntactically accurate tender as being high resolution greyscale. Imagine how much richer it would be if you could introduce colour to it by providing nuance to the <em>why<\/em> of what you&#8217;re asking for.<\/p>\n\n\n\n<p>Tenders try to add nuance with non-functional requirements, but in our syntax vs semantics discussion, non-functional requirements without a broader scope of process or intent are just a form of meta-syntax. You might think of the way non-functional requirements are typically stated as being sentences, when paragraphs are required. The paragraphs give you that <em>why<\/em>.<\/p>\n\n\n\n<p>To add <em>why<\/em>, you have to start with asking yourself (your business), <em>why<\/em>. To get a more nuanced response that addresses both the syntactical elements of your tender request <em>and<\/em> addresses the meaning of what you want to achieve, you need to provide insight into your processes. This allows respondents to provide true nuance in their responses. To do that properly, you need to have answers to those questions I mentioned before: what business processes <em>can&#8217;t <\/em>change, what business processes <em>could <\/em>change, and what business processes <em>should <\/em>change? You might even go one further and consider what business processes <em>must<\/em> change.<\/p>\n\n\n\n<p>There is absolutely no benefit in investing in new technology solutions if you&#8217;re going to shoe-horn them into exactly the same way you&#8217;ve been doing things for the last ten years. Or, to be more accurate, <em>there is very little chance of benefit<\/em> by following this approach. Sure, there may be some edge case businesses where the processes are already so <em>{chef&#8217;s kiss}<\/em> that there&#8217;s nothing to refine any more. But how often can we look at the business environments around us and think &#8220;there&#8217;s nothing here that could be changed for the better&#8221;?<\/p>\n\n\n\n<p>So let&#8217;s say you isolate those processes and process types as part of a review. And you know:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>What business (and IT) processes must be preserved?<\/li><li>What business (and IT) processes could change?<\/li><li>What business (and IT) processes would you like to change?<\/li><li>What business (and IT) processes must change?<\/li><\/ol>\n\n\n\n<p>The next step is critical: <strong>share them<\/strong>. Make sure they&#8217;re available within the tender for your respondents to read and absorb. Provide the context &#8212; the <em>nuance<\/em> to allow semantically accurate answers to your requirements. Answers that go beyond your stated functional and non-functional requirements, and move into the realm of truly speaking to the way you want to evolve your processes.<\/p>\n\n\n\n<p>If you get the <em>process<\/em> right, everything else can fall into place with true contextual meaning.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data protection is a topic commonly pushed out to tender. And I understand why: depending on how far forward into&hellip;<\/p>\n","protected":false},"author":1,"featured_media":11171,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1133,12,13],"tags":[],"class_list":["post-11153","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practice","category-general-technology","category-general-thoughts"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2022\/09\/bigStock-Success-and-Process.jpg","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-2TT","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=11153"}],"version-history":[{"count":5,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11153\/revisions"}],"predecessor-version":[{"id":11174,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/11153\/revisions\/11174"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media\/11171"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=11153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=11153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=11153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}