Saturday | 10 January, 2009
CIO
Bulletproofing IT Contracts
The IT industry grew up on vendor form contracts, so many IT execs never got experience managing contracts. After all, there's nothing for a customer to manage in a vendor form contract because it doesn't say the vendor is obligated to do anything. Here are some pointers for changing that situation
Sue Bushell with Jack McCarthy 06 September, 2002 11:00:00

Lesson One: Investigate Needs

An excerpt from the auditor's report on the California-Oracle contract reads: "Besides not knowing the actual need for statewide enterprise database licensure, the state entered the ELA [enterprise licensing agreement] without any formal evaluation of the contract's technical or business advantages."

In preparation for the Oracle contract, California's DOIT sent out a query about database needs to 127 state government departments and received only 21 responses. Other state agencies charged with oversight of large IT projects did not conduct a "contract needs" assessment, the auditor's report stated. The state negotiators also relied on statistics provided by the Oracle reseller on the project, Virginia-based Logicon (now known as Northrop Grumman Information Technology). Those reseller's stats indicated the state would save $US110 million on the project. In fact, the auditor's report said, the state overspent on the contract by $US41 million.

Going into any evaluation of possible IT purchases, CIOs should do extensive homework to determine exactly their enterprise needs. SA Water Corporation CIO David Johnston advises that despite the continued failure of many organisations to do so, it is essential to define fully the system requirements before you start. "Unclear requirements often open a Pandora's box of contractual scope disputes down the track," Johnston says. "Some vendors actually rely on unclear requirements to generate profits through the need for them to be paid more for Â'out of scope' services."

Defining requirements is even more vital for central purchasing functions within organisations or government. Johnston notes requirements definition documents effectively become contracts themselves between the purchasing function and the end users. That makes end-user buy-in critical to avoiding bureaucratic bungles such as the California example.

Organisations should also follow an arms-length, formal tender process. "A well-considered tender process is a valuable tool. It should provide a defined set of rules and protocols for vendor behaviour, client behaviour, communication mechanisms, and time frames and evaluation criteria," Johnston says.

Evaluation criteria are particularly important and well worth investing time in before the tender. A vendor is more likely to take seriously the task of responding if the organisation has a well-defined and professional process rather than a haphazard approach to the market.

Bob Luttrell, group IS manager, Asia Pacific Specialty Chemicals, says he tries to head off trouble by conducting a detailed specification of requirements upfront, working with all the users and categorising the list by major categories like applications, software support-type sub-systems, operating system and archiving system. He then breaks down applications lists by modules and prepares a simple one-sentence statement about each function. He also takes care to ensure the specifications include any other specific terms that he might want to cover upfront, such as ensuring maintenance is paid on the purchase price rather than the list price, and factoring CPI adjustments into contracts whenever possible.

When you do write your contracts, think carefully about contract requirements and be specific. "The great contract killer is uncertainty," says Clayton Utz partner, corporate, Peter Knight. "The underlying requirement of any contract is certainty. Lack of certainty may lead to a complete failure of a contract or a crucial section of a contract, as a legally enforceable/meaningful relationship."

Additional Resources
Featured Whitepaper Sponsors
Market Place
 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    TJX Maxx hacker banged up for 30 years 09 January, 2009 11:26:00

    Key figure in the infamous TJX Maxx Wi-Fi hack of 2005 has been sentenced to 30-years in prison by a Turkish court.
    Maksym Yastremskiy, the Ukrainian accused of being a key figure in the infamous TJX Maxx Wi-Fi hack of 2005, has been sentenced to 30-years in prison by a Turkish court.
  • +

    Data breaches rose sharply in 2008, says study 08 January, 2009 08:27:00

    More than 35 million data records were breached in 2008, according to the Identity Theft Resource Center.
    More than 35 million data records were breached in 2008 in the U.S., a figure that underscores continuing difficulties in securing information, according to the Identity Theft Resource Center (ITRC).
  • +

    Rogue SSL certificate exploit puts VeriSign on the spot 07 January, 2009 11:04:00

    Wishes "white hat" researchers had notified VeriSign before public demo.
    Following the success of researchers last week in creating a false SSL certificate based on VeriSign's RapidSSL brand, the company is scrambling to explain how it happened, how it's preventing it from reoccurring, and whether its other SSL certificate-generation services are at risk.
  • +

    With Gaza conflict, cyberattacks come too 05 January, 2009 08:03:00

    Pro-Palestinian hackers have defaced thousands of sites following attacks in Gaza.
    The conflict raging in Gaza between Israel and Palestine has spilled over to the Internet.
  • +

    5 ways to secure your Blackberry 18 December, 2008 12:58:00

    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands
    What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Business Intelligence and Enterprise Performance Management: Trends for Emerging Businesses

Hyperion surveyed 163 companies to understand BI and EPM requirements, evaluation processes, and extent of adoption. Top areas of current and future investment for emerging businesses include budgeting and planning as well as management reporting solutions. Read on to discover more.