A small company normally has an IT department that deals with:
- administration of the network
- web based problems like maintaining the web site
- managing the inclusion of external partners, co workers, suppliers and possibly the customers
In addition they have to deal with the engineering environments and services that often lack in good process definitions like ITIL or PCI DSS. Application development is normally outsourced because of the costs of employees, and the required developer environments.
Thus the normal request for the implementation of any requirement in a small company has to be examined with respect to the capacity of the IT department, and its skills as well as the process definition they have to fulfill.
In a large company things may be different. If they have enough power to employ enough staff to have a developer pool, they may do a lot of maintenance and development of new software. In this case the IT department is the backbone of the infrastructure of the company. But even such environments have to examine the profitability of their own development. Sometimes there are SLA’s which ensures that the company outsources all development work as well as maintenance. Sometimes these tasks are a distributed to the IT team in the company, and the service or developer team at the outsourcing partner. Thus, the question for implementing a requirement is answered by having a closer look into the SLA’s of the system we want to modify.
On the organizational basis we have to do the make – or – buy decision. Do we solve the problem another department asks for by our own staff or do we manage outsourcing as a better way. In PRINCE- lead projects (like in other methods, too) we use two parameters to find a good decision: profitability and risk- where risk analysis is a special approach that still is not easy. We have to manage:
- project risks
- product risks
- internal risks
- external risks
- and many more