want effective risk control? try agile!
DESCRIPTION
Presented 1 Nov, 2013, at PMI Chicagoland Professional Development Day.TRANSCRIPT
![Page 1: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/1.jpg)
Risk Management in an Agile Lifecycle
PMI Chicagoland Professional Development Day
November 1, 2013
Elena Yatzeck [email protected]
![Page 2: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/2.jpg)
Or…Optimized Risk Management With Agile
![Page 3: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/3.jpg)
What is Agile?
![Page 4: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/4.jpg)
Popular Agile Brands
v Scrum - Jeff Sutherland and Ken Schwaber/Mike Cohn
v Lean Software Development - Tom and Mary Poppendieck
v Extreme Programming - Kent Beck
v PMI-ACP
![Page 5: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/5.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 6: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/6.jpg)
What is the greatest source of risk on the diagram?
![Page 7: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/7.jpg)
Solution: Reduce In-cycle Risk, and Enhance Monitoring & Controls
![Page 8: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/8.jpg)
Agile Minimizes Change Risk
![Page 9: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/9.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 10: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/10.jpg)
Long Runways Are Needed
![Page 11: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/11.jpg)
Concretely v Identify what you don’t know and quickly learn it:
“Spikes”
v Solutions architecture: how will the pieces work? Build frameworks (not fully detailed):
v Life of a Query
v Data model
v Error handling
v Riskiest system pieces first (along with highest value to product owner)
![Page 12: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/12.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 13: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/13.jpg)
Increase Risk Monitoring with Crowd Wisdom
![Page 14: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/14.jpg)
Concretely v Hire the whole team, provision them properly, and keep
them all the way through.
v Schedule and facilitate efficient communication paths and meetings:
v Collocation
v Daily stand-up
v Story and backlog refinement
v Story kick-offs and desk checks
v Demos, Product Owner sign-offs, Showcases
v Information radiators
![Page 15: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/15.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 16: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/16.jpg)
Working Software
![Page 17: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/17.jpg)
Concretely v Build environments and deployment pipeline first.
v Build your continuous integration engine, and implement “hello world” before anything else.
v *DD techniques:
v ATDD:
v Build automated end-to-end acceptance tests first; incorporate functional details before story acceptance
v Build end-to-end flows first, then add details
v BDD: Build failing functional tests within E2E framework first; satisfy with working software
v TDD: Build failing unit tests first, one at a time; Write just enough functionality to make unit tests pass.
![Page 18: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/18.jpg)
But wait! There’s more!
![Page 19: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/19.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 20: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/20.jpg)
Build a Big Enough Scaffold
![Page 21: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/21.jpg)
Disciplined Agile Delivery
Scrum … AND
Scaled Agile Framework
Concretely
![Page 22: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/22.jpg)
Agenda v Proposition: choose Agile if you want less risk and better
control.
v Core Agile practices that better reduce, monitor, and control risk:
v Do the hardest things first: create frameworks
v Embrace the wisdom of crowds
v Always have a working build that can deploy a full working system
v Agile at Scale practices:
v Build a big enough scaffold
v Automate
![Page 23: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/23.jpg)
Automation
![Page 24: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/24.jpg)
Concretely: Don’t Just Log. Dashboard.
![Page 25: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/25.jpg)
For REAL Risk Management…Go Agile!
![Page 26: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/26.jpg)
Questions? Elena Yatzeck | JPMorgan Chase | [email protected] | 773-573-7114
http://pagilista.blogspot.com
![Page 27: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/27.jpg)
As Manifesto Hints: Agile Is All About Reducing Risk of the Unknown
We are uncovering better ways of developing software by doing it and helping others do it. Through this work we have come to value:
v Individuals and interactions over processes and tools
v Working software over comprehensive documentation
v Customer collaboration over contract negotiation
v Responding to change over following a plan
That is, while there is value in the items on the right, we value the items on the left more.
![Page 28: Want Effective Risk Control? Try Agile!](https://reader034.vdocuments.net/reader034/viewer/2022051322/5451f9f5af7959ed518b5a0b/html5/thumbnails/28.jpg)
Abstract Increasingly, risk control is key to successful project delivery, and large companies are incorporating Agile practices into their SDLC specifically to improve their risk controls. Although Agile has a reputation for “legalized cowboy coding,” core Agile principles actually accelerate identification of risks, enabling more time for mitigation. Additionally, some of the newer Agile practices create even better controls over project delivery risk, making Agile the best available framework for risk control. Core Practices that Control Risk: • Group conversation provides “wisdom of teams” to bring out risks earlier. • Partitioning the work into small pieces instead of handling in batch allows for
better quality control and business inspection. • “Fail fast” philosophy puts “solving unknowns” first in line for project execution,
and asks IT to start identifying those unknowns and proving out solutions from Day 1.
Evolved Agile Practices: • “Scrum-AND” and other scaled Agile frameworks call for a mandatory, collocated
workshop at the start of the project (business and all roles represented) to build a higher quality backlog that can be prioritized for risk.
• Continuous integration, delivery, and deployment with automated testing guarantee defect-free software that meets functional requirements from day 1.