Our IT frameworks and methodologies have one thing in common. They all call for the development and standardization of processes. These processes must become ritualistic. A ritual is simply a highly precise behavior that you do at a specific time so that it becomes automatic over time and no longer requires your conscious intention or energy. These routines reduce the number of decisions you need to make (as well as reducing worry). Consequently you will find it easier to use your limited resources to avoid, rather than solve, problems.
Think of airline pilots. Would you want your pilots to wing it (pardon the pun) every time they get in the cockpit? Or would you prefer they have a well-established, time-tested, standard routine they follow? Well, I, for one, prefer the latter. These routines help the pilots focus. Pilots support their routines with objectives (arrive safely, on time and at the correct airport), metrics (outcome measures like arrival time and performance metrics like airspeed and altitude), flight plans, strategies, policies (e.g., lock the cockpit) and procedures (e.g., checklists).
Research shows the simple act of making decisions degrades one’s ability to make further decisions. When you spend energy making too many little decisions, you have less energy to make the more important decisions.
When you standardize, you remove from your process the day-to-day little decisions that absorb most people for a significant part of their day. US President Barack Obama professed he only wears gray or blue suits—one less decision he says he has to make. Research shows the simple act of making decisions degrades one’s ability to make further decisions.1 When you spend energy making too many little decisions, you have less energy to make the more important decisions. Thus, standardize your processes so that employees need to make fewer decisions, follow a standard routine and have less opportunity to fail. The Japanese understand this and put into practice poka-yoke, which is a process mechanism aimed at avoiding mistakes. Some call this mistake-proofing, fool-proofing or idiot-proofing. I remember the old coaxial network connector labeled a Bayonet Neill-Concelman (BNC) connector, which was euphemistically called the British Naval Connector by the other armed services because they claimed even the Navy could not get it wrong. Some companies, such as Google, understand this. They have organized processes so employees have to make fewer decisions. Think of Club Med2 and how relaxing it is not to have to make many decisions. You want your employees to be more productive at complex problem solving, not at figuring out how to do simple tasks.
Standardized work routines lead to a consistency in process performance, which leads to improved productivity without added stress resulting in better quality, efficiency and cost-effectiveness. Productivity also improves as you have a decline in variation through a reduction or elimination of errors and mistakes; that is, you have fewer defects and less rework.
Standardization also defines what information the process requires. Anecdotally, I could tell you that most people do not like to document their process or their work. But there is a real benefit to doing so. You know that COBIT 5 defines inputs and outputs for each governance and management practice. A paucity of information and you probably cannot do your job properly. But what happens when you have too much information? Well, information consumes the attention of its recipients. Therefore, an abundance of information creates a scarcity of attention, requiring you to allocate your attention efficiently among the overabundance of information sources. Something has to give.
Some argue that standardization stifles innovation. You are not trying to diminish or discourage the freethinkers in your organization. You just want to channel their thoughts in the right way—being creative when creativity is needed. Again, the Japanese use Kaizen Events3 for this, which involves quickly identifying and resolving process problems.
A world-class organization understands that process standardization is paramount. Moving from ad hoc practices to standardized processes may seem daunting or not worthwhile, but organizations that invest the time and energy to do so will reap long-term benefits. As Zig Ziglar said, “You don’t have to be great to start, but you have to start to be great.”4
Peter T. Davis, CISA, CISM, CGEIT, COBIT Foundation, COBIT Implementation, COBIT Assessor, COBIT INCS, CISSP, CPA, CMA, CMC, ITIL FC, ISO 9001 FC, ISO 20000 FC/LI/LA, ISO 27001 LI/LA, ISO 27005/31000 RM, ISO 28000 FC, ISTQB CTFL, Lean IT FC, Open FAIR FC, PMI-RMP, PMP, PRINCE2 FC, SSGB, RESILIA FC
Is the principal of Peter Davis+Associates, a management consulting firm specializing in IT governance, security and audit. He currently teaches COBIT 5 Foundation/Implementation/Assessor, ISO 27001 Foundation/Lead Implementer/Lead Auditor, ISO 31000/ISO 27005 Risk Manager (RM), ISO 20000 Foundation/Lead Implementer/Lead Auditor, ISO 22301 Foundation, ISO 9001 Foundation and Project Management Institute Risk Management Professional (PMI-RMP) courses.
Endnotes
1 Baumeister, R.F.; E. Bratslavsky; M. Muraven; D. M. Tice; Ego Depletion: Is the Active Self a Limited Resource? Journal of Personality and Social Psychology, vol. 74, 1998, no. 5, p. 1252-1265
2 Club Med specializes in premium, all-inclusive vacations packages for families with a network of 65 award-winning resorts worldwide.
3 iSixSigma Dictionary, Kaizen Event
4 Ziglar.com, Official Ziglar Quotes