28
AGILE IN HIGHLY REGULATED ENVIRONMENTS ALASTAIR BROWN, HEAD OF DELVIERY

Agile in highly regulated environments

Embed Size (px)

DESCRIPTION

A practical pragmatic demonstration on how to use Agile in environments where scope and schedule are apparently fixed.

Citation preview

Page 1: Agile in highly regulated environments

AGILE IN HIGHLY REGULATED ENVIRONMENTS ALASTAIR BROWN, HEAD OF DELVIERY

Page 2: Agile in highly regulated environments

CONSTITUTES OR CONSTRAINS RIGHTS

ALLOCATES RESPONSIBILITIES

GOVERNMENT AUTHORITY

SELF REGULATION

CO-REGULATION

MARKET REGULATION

REGULATION

WHAT IS IT?

Page 3: Agile in highly regulated environments

Influence an outcome

Prevent a market failure

Reach a collective desired

outcome

Implement legislation

REGULATION

WHY?

Page 4: Agile in highly regulated environments

THE BUSINESS GOALS // WHAT I NEED IS…

• high quality

• schedule control

• cost control

THE REGULATORS GOALS

• “fixed” scope

• fixed schedule

• specific features

(…but these are usual aspirations,

regulated or not)

REGULATION

GOALS

Page 5: Agile in highly regulated environments

SO MY DEVELOPMENT APPROACH NEEDS…

SERIAL PROCESS

DELIVERY LIFECYCLE

Page 6: Agile in highly regulated environments

SERIAL PROCESS

GATED ENTRY AND EXIT

SO MY DEVELOPMENT APPROACH NEEDS…

DELIVERY LIFECYCLE

Page 7: Agile in highly regulated environments

SERIAL PROCESS

GATED ENTRY AND EXIT

DOCUMENTATION REVIEW AND SIGN OFF

SO MY DEVELOPMENT APPROACH NEEDS…

DELIVERY LIFECYCLE

Page 8: Agile in highly regulated environments

SERIAL PROCESS

GATED ENTRY AND EXIT

DOCUMENTATION REVIEW AND SIGN OFF

HIERARCHICAL GOVERNANCE

SO MY DEVELOPMENT APPROACH NEEDS…

DELIVERY LIFECYCLE

Page 9: Agile in highly regulated environments

SERIAL PROCESS

GATED ENTRY AND EXIT

DOCUMENTATION REVIEW AND SIGN OFF

HIERARCHICAL GOVERNANCE Long Term

Detailed Plan

SO MY DEVELOPMENT APPROACH NEEDS…

DELIVERY LIFECYCLE

Page 10: Agile in highly regulated environments

SERIAL PROCESS

GATED ENTRY AND EXIT

DOCUMENTATION REVIEW AND SIGN OFF

HIERARCHICAL GOVERNANCE Long Term

Detailed Plan

SO MY DEVELOPMENT APPROACH NEEDS…

DELIVERY LIFECYCLE

Page 11: Agile in highly regulated environments

SO WHAT I NEED IS…

DELIVERY LIFECYCLE

Page 12: Agile in highly regulated environments

SO WHAT I NEED IS: Cost and schedule control

DESIRED OUTCOMES

CONTROL COST AND SCHEDULE

• BACKLOG MANAGEMENT

• SCOPE NEGOTIATION

CONTROL QUALITY

• CONTINUOUS INTEGRATION

• TEST DRIVEN DEVELOPMENT

• MEASUREMENT OF COVERAGE, CODE QUALITY

Page 13: Agile in highly regulated environments

BUT HOW… Agile 101

DESIRED OUTCOMES

Focus on Business value

Embrace changing requirements, understand impact

Frequently and regular delivery

Performant motivated teams, provide the tools and remove impediments

High bandwidth interaction between Business people and Developers

Inspect, learn and adapt

Self organisation

Sustainable development pace

Simplicity

Progress Measured by working, delivered, accepted software

Page 14: Agile in highly regulated environments

VARY RICHNESS

PRIORITISE

HOW?

FIXED SCOPE CONUNDRUM

Page 15: Agile in highly regulated environments

SUD

Operations

Customer Support

CFO Analyst

Marketing

Sales

CSO

Regulator

USERS AND STAKEHOLDERS

FIXED SCOPE CONUNDRUM

Page 16: Agile in highly regulated environments

… BUT DON’T FORGET THE REGULATOR (OR PROXY)

USER AND STAKEHOLDER STORIES

FIXED SCOPE CONUNDRUM

“As the CSO I would like data to be

separated from the application in a

data vault so that I can comply with

PCI DSS guidelines.

As a WebMaster I would like the user

to fill out a CAPTCHA field so that I

can be sure the user is human and

avoid spam.

Page 17: Agile in highly regulated environments

UNDERSTAND THE PRIORITY OF GOALS

FIXED SCOPE CONUMDRUM

COMPLIANCE

COST REDUCTION

REVENUE PROTECTION

REVENUE GENERATION

Page 18: Agile in highly regulated environments

UNDERSTAND THE PRIORITY OF GOALS

FIXED SCOPE CONUMDRUM

REVENUE GENERATION

COST REDUCTION

REVENUE PROTECTION

COMPLIANCE

Page 19: Agile in highly regulated environments

USE TO HELP PRIORITISE

FIXED SCOPE CONUNDRUM

Page 20: Agile in highly regulated environments

LARGE SCALE – Three projects – 100 staff 18 months

PUBLIC SECTOR – Social Security domain

SYSTEMS INTEGRATOR – CMMI Level 5

HISTORY OF BUDGET AND SCHEDULE OVERRUN – Requirements ambiguity

– Incomplete

– Poor quality

HEAVY QMS DESIGNED FOR WATERFALL

CONTEXT

THE CASE STUDY

Page 21: Agile in highly regulated environments

PRODUCT OWNER

SCRUM MASTER

SCRUM TEAMS

RELEASE/ITERATION CFD

QUALITY PRODUCT BACKLOG

PRIORITISED BY STAKEHOLDER

BSG CATEGORISATION

HIGH VISIBILITY IMPEDIMENTS

SPRINT VELOCITY

UNIT TEST

RETROSPECTIVES

DEMONSTRATION

SO WHAT DID WE DO?

THE CASE STUDY

Page 22: Agile in highly regulated environments

SPRINT AND RELEASE CFD – fed RAG and morning prayers, schedule reviews, change board and improved visibility.

DAILY STANDUPS – Fed the risk review board

UNIT TESTING – Became the “sign off” artifact for the sprint

DEMONSTRATION – Made UAT self fulfilling

PRODUCT OWNER – Fulfilled the communication plan

WHAT WAS THE OUTCOME?

THE CASE STUDY

Page 23: Agile in highly regulated environments

RELIABLE/REPEATABLE OUTCOMES

SHOW ACCOUNTABILITY

DEMONSTRATES DUE DILIGENCE

DELIVER HIGH QUALITY

REGULATOR ASPIRATIONS

AGILE IN HIGHLY REGULATED ENVIRONMENTS

Page 24: Agile in highly regulated environments

AGILE CHARACTERISTICS

AGILE IN HIGHLY REGULATED ENVIRONMENTS

MANAGED REPEATABLE

DEFINED CONSISTENT PROCESS

QUANTITATIVELY MANAGED

ADAPTIVE AND OPTIMISING

Page 25: Agile in highly regulated environments

HANG ON….

AGILE IN HIGHLY REGULATED ENVIRONMENTS

Level 1 - Ad hoc (Chaotic)

– Typically undocumented process

– Unrepeatable often relying on heroics

– State of dynamic change in an uncontrolled and reactive manner

Level 2 – Managed Repeatable

– Some processes are repeatable possibly with consistent results

– Limited rigour, although processes usually maintained during times of stress

Level 3 - Defined

– Defined and documented standard processes established

– Delivering consistency across the organisation

– Some degree of improvement

Level 4 – Quantitatively Managed

– Use of process metrics allows for control of the process

– Ability to adjust and adapt the process to particular projects without measurable losses of quality or deviations from specifications

Level 5 - Optimising

– Focus on continually improving process performance through both incremental and innovative technological changes and improvements

Page 26: Agile in highly regulated environments

Understand your current position and aspirations; plan and action your first next step, then Inspect and Adapt

Be as Agile as you are (currently) able; within your (any) current constraints

Do not assume that your constraints prevent the implementation of Agile practices

Do not prepare the barrel for the Waterfall

CONCLUSION

AGILE IN HIGHLY REGULATED ENVIRONMENTS

Page 27: Agile in highly regulated environments

?

ANY QUESTIONS …

Page 28: Agile in highly regulated environments

http://www.valtech.co.uk

http://blog.valtech.co.uk

@valtech

@alastairbrown

[email protected]