Self Service Master Data Points to Consider - Electronic Commerce Code Management ......

30
Self Service Master Data Points to Consider Stacie Hall & Mary Klein - Intel IT October 2012

Transcript of Self Service Master Data Points to Consider - Electronic Commerce Code Management ......

Self Service Master Data – Points to Consider Stacie Hall & Mary Klein - Intel IT October 2012

Copyright © 2012, Intel Corporation. All rights reserved. 2

Legal Notices

This presentation is for informational purposes only. INTEL MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.

Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

* Other names and brands may be claimed as the property of others.

Copyright © 2012, Intel Corporation. All rights reserved.

Copyright © 2012, Intel Corporation. All rights reserved. 3

Leading Manufacturer of Computer, Networking & Communications Products

• 166 Sites and 579 Buildings in 63 Countries

• $54B in Annual Revenues from Customers in Over 120 Countries

• 25 Consecutive Years of Positive Net Income

• Over 100,000 Employees

• 80,000 technical roles, 10,400 Masters in Science, 5,200 PhD’s, 4,000 MBA’s

• One of the Top Ten Most Valuable Brands in the World for 11 Consecutive Years

• Ranked #46 on Fortune’s 100 Best Companies to Work For List

• Invests $100 Million Each Year in Education Across More than 70 Countries

• The Single-Largest Voluntary Purchaser of Green Power in the United States

• More than One Million Hours of Volunteer Service in Our Communities in 2011

Intel Corporation: The World’s Largest Semiconductor Manufacturer

Copyright © 2012, Intel Corporation. All rights reserved. 4

Intel IT Vital Statistics

Source: Information provided by Intel IT as of Jan 2012; Device data updated May 2012 † does not include wholly owned subsidiaries that Intel IT does not directly support

6,400 IT employees 54 global sites

91,500 Intel employees†

164 sites, 62 countries

69 Data Centers ~75,000 servers

>142,000 Devices >109K PCs (80%+ mobile)

>33,000 Handhelds (58% BYO)

Copyright © 2012, Intel Corporation. All rights reserved. 5

About your presenters…..

Stacie Hall

• Strategy, Architecture & Innovation

• Enterprise Architect, Intel Corporation

• 17 years with Intel

• Current focus on Supplier Master Data & Strategic Planning

Mary Klein

• IT Business Intelligence, Data Management Analyst Team

• Data Architect, Intel Corporation

• 16 years with Intel

• Current focus on Enterprise Data Warehousing and Customer Master Data Foundation

Copyright © 2012, Intel Corporation. All rights reserved. 6

Agenda

• What is Master Data?

• Why “self service”?

• Governance methodology and process

• Architectural Evaluation Points

• Data classification impacts architecture

• Data security concerns

• Use case for Supplier Master Data

• Use case for Customer Master Data

• Final Thoughts

Copyright © 2012, Intel Corporation. All rights reserved. 7

What is Master Data Management?

MDM is a set of processes and technologies that help enterprises improve the management of:

• Data flow

• Data integrity/quality

• Data synchronization

The foundation of MDM is a governance mechanism (workflows) by which data policies, definitions, and processes can be enforced on an enterprise scale

Technically, MDM applications deploy on-demand data services for standardized master data

Provide a flexible data model with configurable business rules and integrated workflow

Enable data standardization across business systems and processes while enforcing uniqueness at the appropriate time in the data lifecycle

Enable enterprise integration

Integrate seamlessly with other data services

Examples of Master Data:

Suppliers

Customers

Products

Employees

Locations

Countries

Physical Assets

Copyright © 2012, Intel Corporation. All rights reserved. 8

Before there was MDM … A recap of Intel’s focus on Data Quality

1990’s: ‘Y2K’ like data quality problems began to surface

• Issues with intelligent product naming elevated need for solutions

2000’s: Corporate wide information quality initiative began

• Formed a dedicated Information Quality Organization

• Included targeted training & objectives tied to bonuses

• Elevated awareness across the enterprise: “Data is an asset”

• Inflection point: Major supply chain initiative stalled until product naming standardized & Master BOM were established.

• Intel IT identified the need to proactively invest in standardized, high quality Master Data capabilities

Master Data became a prerequisite for Intel’s shift to

Enterprise wide information solutions.

Copyright © 2012, Intel Corporation. All rights reserved. 9

Why Self-Service?

• Empowers Data as Intel’s strategic asset -> promotes availability & push maintenance closer to responsible Customer/Supplier

• Enables proper stewardship & management -> clear understanding of area & business rules

• Standardizes CRUD business processes -> easier to manage & support

• Enables governance through management -> higher quality & accuracy

Copyright © 2012, Intel Corporation. All rights reserved. 10

Information Blueprint Definition

Information Blueprint:

A comprehensive document that specifies the corporate agreed upon standard for a subject area across the following architectures: business process, data, application, and technology.

The basis against which governance and compliance for the subject area will be enforced.

The single document that defines the goal state for creating, maintaining, referencing, and supporting the business processes and data within the subject area.

Examples of subject areas that currently have Information Blueprints defined:

Supplier Master Data, Customer Master Data, Location Master Data, Worker Master Data, Item Master Data, Enterprise Issue, & Supplier Demand

Information Blueprints are not restricted to master data areas and should be developed for any area that requires governance.

Future: Banking, Accounts Payable, ….Security Identity Access, etc….

Copyright © 2012, Intel Corporation. All rights reserved. 11

The Process Starts with an Information Blueprint …

.

. Data Architecture/Design:

• Developed by

Architects/Analysts directly with

the business

• Utilizes industry BKMs

App & Tech Arch:

• Developed by Architects

• Utilizes Intel’s building codes

Business Process Architecture/Design:

• Developed by Architects/Analysts directly with

the business

• Use industry standards where possible

Copyright © 2012, Intel Corporation. All rights reserved. 12

Request Originators

System Change

Governance Board and Change Management

Programs

Change Requests

Feedback to originator(s))

Business

Governance Board

Business

Process Change

Information

Blueprint Change

Communication

& Direction

.

Governance Metrics:

* # of people trained/communicated to

* Information Blueprint Waivers

* Compliance “wins”

Change Approved

Change Denied

Copyright © 2012, Intel Corporation. All rights reserved. 13

Business requirements drive self-service architectural options

Moves data maintenance responsibilities closer to the owner (ie: Customer/Supplier)

– Self registration, Profile Mgmt, …..

Social media drives openness & on-going relationships

On-going push to do more with less

Promotes control of intellectual property, privacy, and regulations

– European Union privacy laws

Provides access to data for Suppliers, Customers, and within Intel

Industry niches provide ready made capability

– Customer Information Hub, Supplier Lifecycle Management, etc.

Copyright © 2012, Intel Corporation. All rights reserved. 14

Architectural Evaluation points Reuse -> Buy /Lease (SaaS) -> Build

• User Experience

• a. Is the portal able to be changed/configured?

• b. How is the application architected for internationalization?

• c. How are user and role provisioning, single sign on or password synchronization, and role-based access control achieved?

• Input Validation

• a. How is user input data validated?

• b. Are validation rules definable for specific input fields ?

• Business Continuity

• How is the application architected to address risk mitigation, emergency/disaster preparedness plans & business recovery plans?

•Real time search/select

• a. On a real time basis, how does the application provide validation and make recommendations for record create?

• b. What criteria is used to determine the list of records to provide for user selection?

Copyright © 2012, Intel Corporation. All rights reserved. 15

Architectural Evaluation points Reuse -> Buy /Lease (SaaS) -> Build

• System of record

• a. What sources of data does the application utilize?

• b. How does the application interface with these sources?

• c. How is the information refreshed and what is the refresh rate?

• d. How are data quality concerns communicated back to the source?

•General Data Architecture

• a. What countries does the capability cover and what is the process for collecting the data in each country?

• b. How is history tracked within the data?

• c. How is integration between applications architected?

•Data Modeling

• a. Does a data model with definitions exist for the application?

• b. How is data partitioned, especially in a multi-tenant environment?

Copyright © 2012, Intel Corporation. All rights reserved. 16

Architectural Evaluation points Reuse -> Buy /Lease (SaaS) -> Build

•Infrastructure

• a. What is the data transfer capacity for a large load of data?

• c. What are the steps to add processing power, memory, storage or network to improve integration performance?

•SOA/Services

• a. Is the application architected utilizing SOA? Explain….

• B. What are the SLAs?

• c. How does a vendor notify customer of downtimes?

• d. What is the baseline performance of the service?

• Social Computing

• Does the application utilize any social computing components?

• Information Security

• a. How is information security implemented within the application & interfaces?

• b. How is personally identifiable & highly classified/restricted secret secured?

Copyright © 2012, Intel Corporation. All rights reserved. 17

Data classifications

Intel Top Secret The most sensitive and valuable information that is often associated with how Intel designs and manufactures products.

Intel Restricted Secret

1. Enabling technology information that provides significant technical details about products.

2. Personal information – Examples include bank account number, social security number, etc.

3. Protected Health Information, as covered by USA HIPAA regulatory requirements.

Intel Confidential Intel sensitive information that is not disclosed publicly. For example Age, Date of Birth, Employee Business Contact information and employee benefit information.

Public Information which is openly available

Copyright © 2012, Intel Corporation. All rights reserved. 18

Data classification impacts architecture

Information classified as Intel Confidential or higher must have controlled access at all times. • Access is granted only to those who have a valid business need and at

the minimum privilege necessary. • Prior to sharing all of the following must be met:

1. A non-disclosure agreement must be in place 2. The recipient's identity must be confirmed. 3. The recipient must be notified of the information classification.

Documents, systems, and media containing classified information must be secured by an appropriate combination of logical and physical access controls.

• Intel Top Secret and Intel Restricted Secret information must be encrypted.

Copyright © 2012, Intel Corporation. All rights reserved. 19

Data Security Architectural Guidelines Data at rest

– Intel Top and Restricted Secret data must be encrypted.

– If there are error logs the Restricted Secret data must be encrypted, masked or not stored.

– Personal information must be maintained so that it can be accessed and removed upon request of owner.

– All levels of data security above Public must be protected from unauthorized proliferation.

– In the EU, the physical location of the data must be recorded (including backups and archives)

Data in transit – Must use https/SSL for all data that is not classified as public.

– Top and Restricted Secret data must be further encrypted within the transport message

User Interface – Intel Top and Restricted Secret data may be masked to prevent

unauthorized viewing.

– User must have access to maintain their own personal information.

Supplier Business Case

Copyright © 2012, Intel Corporation. All rights reserved. 21

Enterprise Supplier Background Problem Statement

• 75+ systems where Supplier data is created and 300+ systems where Supplier data is used

• Poor data quality with data duplication within and between systems (~60% in one example)

• One of the major Supplier applications is heavily customized

• Excessive through put time (TPT) related to Supplier creation and change processes

• Numerous manual processes and hand-offs

• Difficult to keep Intel legal, respond to audits, and ensure controls

• Lack of master data policy to facilitate governance process for Supplier

Business Goals

• Create a foundation for Supplier Master Data (centralized record of origin)

• Simplify and streamline business processes around data creation and maintenance – ** Self-service portal to allow Suppliers to maintain their own data

• Create robust governance policy around Supplier Master Data

• Create a flexible and extensible data architecture

• Ensure data traceability/lineage

• Align and integrate with other master data projects

Copyright © 2012, Intel Corporation. All rights reserved. 22

Enterprise Supplier Master Data Use Case

Enterprise

Supplier

Master Data Create/Maintain

Enterprise

Data Warehouse

Web Service

Gateway

Intel Supplier

Portal

Supplier

Entitlement

Use case for Supplier Master Data with an in-house configured

central system of record and a Software as a Service (SaaS)

portal to allow Suppliers to interactively maintain their own

master data

Supplier Info

Mgmt (SaaS)

Supplier & Intel Users

Customer Business Case

Copyright © 2012, Intel Corporation. All rights reserved. 24

Customer Data Problem Statement Inefficiencies Across Multiple Intel Operations

• Manual reconciliation across processes

• Manual intervention for Secure content and trainings customer entitlement

Increased Legal & Security Exposure

• Data duplication causes inaccurate tax billing to customers & tax penalties w/interest

• Not able to effectively communicating product change notifications across the distribution channels

• Denied Party List & Trademarks infringement - manual

Unable to efficiently gather data to manage business performance

• Inconsistent Customer Segmentation and Groupings

• Relating demand forecasting to revenue and sales performance metrics is tedious

• Understanding customer base – size, locations, & line of business is challenging

Customer Information is not trusted

Incomplete, fragmented, duplicated, outdated customer data

leads to data management maturity rating of “unaware”

Copyright © 2012, Intel Corporation. All rights reserved. 25

Enterprise Registration & Profile Management

To-Be Conceptual Architecture

Registration & Enrollment Services Unified Profile Services

Enterprise Login Services

Identity & Access Management Services

Virtual Directory Services

Enterprise Service Bus & Workflow

Enterprise Service Bus & Workflow

Enterprise Service Bus & Workflow

User Profile Consumption Services

Identity & Access

User Profile

Custo

mer

MD

M

Supplier

MD

M

Work

er

MD

M

Soft Simple Secure Enroll User Business Biz Context Social

Sync

Pro

pagate

Data Warehouse

Customer Registration &

Profile UIs

Supplier Registration & Profile UIs

Worker Registration & Profile UIs

Other Registration & Profile UIs

Register User

Enroll User

Entitle User

Access Resource

Maintain Profile

Configure Registration &

Profile

Administration

Entitlem

ent

Pro

vis

ionin

g (

Connecto

rs)

Customer Applications

Supplier Applications

Worker Applications

Other Applications

DMZ SSO Social LDAP

Memberships Subscriptions Preferences

Identity Role Entitle Audit

Federate

Applications Consuming Profiles

Applications Creating and Maintaining Profile Information

Capabilities

Integration

Master Data

Copyright © 2012, Intel Corporation. All rights reserved. 26

Run Intel business processes with Standardized, Enriched & Integrated Customer Data 1.Increase knowledge of the customer

with enriched, shared & governed master data

2.Improve customer relationship with trusted quality data

3. Keep Intel legal by preserving Intel brand & compliance with privacy laws

Vision/Business Objectives, Key Deliverables

Customer Information HUB

Metric Goal

Improve Quality of Customer information

•Increase # of complete Customer records. • Accuracy: Ratio of CIM records that match 3rd party trusted source standard •Increase Number of Standardized Customer Records per Total Customers

Track adoption of CIM Hub processes

• Enable across enterprise business processes (ex: Lead & Oppty Mgmt, Acct Coverage, Issue Mgt, BI Data Foundation)

Simplify Mgmt of Customer Information

•Enable the Business to manage customer information •Reduce Throughput Time to Resolve Customer Data Quality

Improve Customer Information Governance

•Establish Governance Operating Model •Reduce # of Customer sources

Reduce Legal & Privacy Risk

•Reduce Duplicate Customer Records per Total Customers •Establish Compliance with Privacy Laws

Program Goals

Copyright © 2012, Intel Corporation. All rights reserved. 27

Final Thoughts

• Self-Service is a journey

• Governance is cornerstone to enabling self-service

• Successful relations are enhanced between Intel & Customers & Suppliers

• Responsibility moves to Customers & Suppliers who know their data

• Architecture drives holistic self-service solution(s)

Copyright © 2012, Intel Corporation. All rights reserved. 28

Learn more about Intel IT’s Initiatives at www.intel.com/IT

Sharing Intel IT Best Practices with the World

Copyright © 2012, Intel Corporation. All rights reserved. 29

Questions

Stacie Hall, SAI Enterprise Architect, Intel Corporation [email protected]

Mary Klein, IT Business Intelligence, Intel Corporation [email protected]

Thank You