Quantcast StorefrontBacktalk » Blog Archive » The Agony Of Talking With IT
advertisement
advertisement

The Agony Of Talking With IT

Written by Todd L. Michaud
November 11th, 2009
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

Franchisee Columnist Todd Michaud has spent the last 16 years trying to fight IT issues, with the last six years focused on franchisee IT issues. He is currently responsible for IT at Focus Brands (Cinnabon, Carvel, Schlotzsky’s and Moe’s Southwestern Grill).

Do you know someone who irritates you so much that just the mere act of them taking a breath to speak puts you over the edge? No matter what they say, it just rubs you the wrong way. I think most people know someone like that. Unfortunately, for many businesspeople, that person is their IT partner.

Whenever the IT person tries to explain a technical problem or defend a business case, the person on the receiving end hears nails on a chalkboard. Couple that with a blank stare when pressing business issues are being discussed, and you’ve got a recipe for a rumble.

Over the years, I have heard from many business partners–especially franchisees–that they get very frustrated when talking to IT people. There is a significant barrier when it comes to the language. The business partners are frustrated that the IT people don’t understand their language (terms like COGS, theoretical food cost, sales/labor hour, etc.), and they have no idea what the IT person is talking about (terms like Web services, ASP, dynamic IP addresses, etc.). This barrier creates friction that can result in a not-so-subtle “stink-eye” from across the room.

The problem is only getting worse. First, technology vendors are creating new features and functionality much faster than they are retiring them. As a result, the catalog of things that most IT people need to know is constantly growing. Second, as technology advances and becomes more complex, so do the explanations behind it. As a result, IT people often focus on understanding the new technology and fail to learn how to properly translate that knowledge to the layperson.

Here are some helpful hints when it comes to talking about technology to your business partners or franchisees:

  • Do not explain how it works (or the details in general), just what it does.
  • Describe what benefits it offers.
  • Speak their language.
  • Remember: Simple but technically wrong is better than confusing and technically correct.
  • Tell businesspeople that which they don’t know to ask.

    Let me give an example. I am in the process of launching a new inventory management package for one of our brands. This new system will replace an existing manual process with technology that greatly improves efficiencies, thereby resulting in dollars to the bottom line. The new system has a bunch of great features like integrated supply chain, theoretical food costs, recipe management, etc., etc. The training course for this system takes two full days to fully learn both the basics and the bells and whistles. I’m sure many of you already have a similar approach in place.

    The mistake that many IT people make is trying to explain all of that detailed information right out of the gate. Remember that the goal is to explain what the system does, not how it does it. Here is the business case that I plan on presenting to our franchisees.

    Saving You Money

  • Increases your profitability (reduces COGS by 1 percent)
    • Reduces food cost, waste and theft
    • Offers tighter inventory controls
  • Provides faster inventory, faster ordering (saves 2 hours of labor per week)
  • Provides faster, more accurate data to better manage your business
    • Allows you to see all stores’ data on a single screen
    • Compares data against your market, DMA or entire system
  • Achieves Return On Investment in fewer than 2 years
  • Like an exercise program, requires commitment and dedication to see results

    That is it. It is simple, easy to understand and uses business terms. It does not give unnecessary detail about how the supplier interface works, nor does it talk about the hundreds of reports that can identify variances or the fact that it is a Web-based application. I also don’t go into detail about how not all reports allow you to see all stores on one screen. (Some do, and some don’t.) What is important is the sentiment; details will be provided later.

    Many IT people get caught up trying to explain all the particulars right up front. Going into that level of detail at this level of conversation will just create confusion and frustrate your audience. Some businesspeople mistakenly think that IT people are talking about these details using technical terms and acronyms in an attempt to make them feel stupid. Most times, however, that is not the case. The reality is that the summarization rarely conveys the entire point and that the IT person is simply attempting to be complete in his or her statement of a technology’s capabilities.

    IT people also tend to talk about what is comfortable for them, which is often technical information. But it is important to make sure that IT people understand, at a detailed level, how the business works. They need to spend time working with businesspeople to understand the company. IT should be closely tied with operations, marketing, supply chain or whatever business units that it supports. If, for example, an IT person is supporting the operations team, that IT person should think and act like an operations person who knows IT, not as an IT person who provides technology solutions to operations. This distinction can be a hard mindset to change, but one that can pay dramatic dividends in the future.

    What do you think? Love it or hate it, I’d love to gain some additional perspectives. Leave a comment, or E-mail me: Todd.Michaud@FranchiseIT.org.


  • advertisement

    6 Comments | Read The Agony Of Talking With IT

    1. Greg Buzek Says:

      Excellent article, Todd. Great points. IT must realize that many users of their systems, particularly forecasting, merchandising, and category management are needed to be used by folks who went to the side of the university where “No math was required.” Their skill sets are different.

      What is alluded to here but not overtly mentioned is that that business process must change to obtain the ROI benefits. That needs to be communicated as well. 75% of IT projects fail to meet ROI objectives because of this one point.

      Thanks for a great article.

    2. Jen Says:

      Business analysts can help bridge that gap!

    3. Todd Michaud Says:

      Thanks for the comments!

      Greg, you bring up a great point about the business process change. Often business users expect “magic” ROI, without realizing that the true ROI comes from enhancing the business process. If they are not willing to change, then the technology implementation often is a waste of money.

      Jen, I totally agree with the business analyst comment. The challenge with smaller IT shops is that it is very difficult to justify the role. Just like the movie Office Space: “I am responsible for taking the customer’s requirements and giving them to the Engineers. Can’t the customers just talk to the Engineers? No! I am a people person! I have skills!!!”

      In most small IT shops, the traditional Project Manager and Business Analysts roles are both critical and extremely difficult to justify.

      Thanks again!

    4. Paul Says:

      Todd, while you are correct that it’s difficult to have an IT business analyst or seasoned project manager in small shops… it’s certainly not out of the ordinary to have on-boarding with all employees including IT folks that would among other things mean spending time in a restaurant to understand the business. IT people don’t know the terms COGS, margins, etc because they haven’t always been exposed to them. In restaurant training is key to having the individuals helping to run an organization understand how the business is measured / evaluated by the operators.

      A large part, in my opinion, of IT projects fail to materialize their ROI goals because they do not have accurate requirements set from all participants. Better understanding about what the client needs often leads to other discoveries about the system and a deeper analysis of the project objectives. This further develops the need for a business analyst or for the IT person to be programmer / analyst.

    5. Todd Michaud Says:

      Paul,
      I couldn’t agree with you more about the lack of accurate requirements being one of the leading causes or ROI miss. “Tell me what you want.” turns into “Tell me what it can do.” Unless you are following a Agile methodology, the “big unveil” can be a disaster!

      I also agree about in-restaurant training. In my previous role, we were 100% franchised, which made that difficult. Now, all my IT folks spend time in each of my brands to learn them from the ground floor, and when we meet with our business counterparts, we talk in their terms.

      Thanks again.

    6. Scott Says:

      My big frustration with IT is about attitude. Many of the IT folks I deal with have an attitude that they know more than me, even about topics that they aren’t tasked to manage.

      For example, my company’s IT department installed web filtering software that started blocking websites that our staff use on a regular basis, for work purposes. The IT department felt that those sites were wasting time and bandwidth. But they weren’t tasked with managing employee time and didn’t consult with any downstream managers about their unilateral decision. They also didn’t look into the true cost of bandwidth, which was costing less than it cost the company to run a refrigerator in the employee break room.

      That example is just me venting – there are many more examples that impact more critical business systems, where IT overrules business decisions without consulting the very people they are tasked with helping.

      I’ve seen this attitude at other places I’ve worked, and I don’t feel that C-level management understands how much of a negative impact it can have. Or, maybe I’ve just had some experiences with bad IT groups?

    Leave a Reply

    Newsletter

    Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
    advertisement

    Most Recent Comments

    What’s The Rush For New PCI Call Center Requirements?

    And I have not heard anyone mention the impact on companies who provide quality improvement services. Many merchants hire quality improvement companies to review their audio recordings to provide guidance on how to improve their sales staff’s effectiveness in customer service and sales retention. PCI Council needs to rethink this requirement until there is a widely available commercially viable solution. Read more...
    Another ridiculous decision where regulators don't think critically enough about the unintended consequences of their decision. This will be a huge problem for the credit and collections industry. We have to keep all recorded calls for other reasons not related to cc information. We can't purge all of our calls and we don't have the technology to not record part of the conversation. Even if we did, I am not sure we could afford it. Read more...
    This "clarification" is causing a lot of panic with large FS clients who now appear to be non-compliant after spending 7 figure sums on their compliance programs. The only alternative to call recording would now appear to be some sort of IVR/push button type interrupt to take card data away from the contact centre. The council is a position to force that sort of process and technology change and this may backfire on them and the vendors that lobbied hard for this clarification. Read more...
    PCI council has made a one-sided decision; They should have done a much more in-depth research that could have provided more insight on what regards to the implications of such decision. Read more...

    Will Old OS Cause PCI Violation? No, But Marketing Still Says So

    This is an interesting issue, because there's more to it than what's apparent on the surface. PA-DSS requires supported and patched operating systems and other software components (e.g., databases, libraries, Java, etc.) per PA-DSS 7.1.b and 8.1, and the option for compensating controls simply isn't there. Merchants can make use of compensating controls for most PCI DSS requirements, but only when legitimate constraints exist and only in ways that meet the intent and rigor of the requirement and go above and beyond the other PCI DSS requirements. Read more...
    Why would one automatically upgrade to a "new" OS -- some of the older versions of certain OS-es are more stable and more robust than the crap being peddled today. This is yet another clear example of PCI SSC being out of touch with reality. Rather than requiring a "current" OS, the requirement should be to demonstrate the OS in use is stable and robust, and is adequately hardened against threats. Read more...
    There are compensating controls that encrypt the swipe at the driver level as it enter the PC, there are hardware encrypting card swipes so the cardholder data is already encrypted before it comes to the PC -- either of these, especially the second, would remove the OS entirely from a cardholder data risk profile. Read more...
    In my opinion, the only thing the vendor did wrong was they didn’t know of that FAQ entry. Even if they did, it changes nothing about the need for merchants to update software that no longer receives updates. Read more...

    MasterCard Blinks, Drops Dec. 31 Level 2 PCI Deadline

    Reciprocity between MasterCard and Visa was always been a factor in Acquirer merchant level assignments. The brief removal of reciprocity generated a great deal of interest in being able to be classified at a lower level in MasterCard's world. Nevertheless the return of the reciprocity language in the December changes did not effectively create any new Level 2 merchants, but it DID dash the hopes of a lot of them.... :-( Read more...
    Let's given them credit??? For being idiotic in the first place? Not on your life! Everyone has just had to scramble and include the costs of the previously announced M/C requirement in their 2010 budgets, and start negotiating with the QSAs for the additional services. All for naught! Read more...
    "A bunch of Level 3 and Level 4 merchants just became Level 2s". Is this an accurate statement? MasterCard & Visa have historically included the caveat "or is a Level X in another brand" in their level setting criteria. MasterCard appeared to back way from this in the June pronouncement, and have simply returned to the status quo. Have Acquirers have been tracking and reporting merchants at separate levels by brand? Read more...
    I stick by my comment (quoted in the column) about a bunch of L3 and L4 merchants becoming L2s and requiring an onsite. To me, what made MasterCard's original requirement for an onsite assessment for L2s palatable was that they took away their reciprocity provision. That is, they seemed to focus on larger merchants with over a million MasterCard trans/year. With reciprocity in place, a lot of smaller merchants are pulled into the onsite requirement. Rather than causing confusion, I think reciprocity will lead to additional work for processors and acquirers. Read more...

    Retailers Sue POS Vendor, Questions Raised Where PCI Duties Stop

    I would add a couple more questions: "did the breach involve the use of the default passwords?" (The story doesn't say.) And "were the default passwords used by Computer World to remotely administer the store systems?" "where is the PCI auditor in all this?" Did the restaurant group think they didn't need an audit because Radiant was (mis)representing Aloha as PCI compliant? How is a retailer or even a PCI auditor to know otherwise? A PCI auditor is not necessarily a qualified computer forensic investigator capable of finding the card data on the hard drives. They can only base a decision on information given to them by others. Read more...
    There are so many holes in the process it will be difficult to pin blame on just one constituent. It is ridiculous that the technology exists to better secure these transactions (PIN, EMV, etc) yet banks won't use them. Only the banks or government can force this change, and retailers will suffer until then. Read more...
    A major issue in this case will be if the restaurants had any support agreements in place with Computer World and if so what those agreements say. In my experience many single unit/small operators choose to skip the support agreements in favor of a "pay as you go" arrangement. In this scenario I can't imagine how the POS VAR can be held responsible for a system they don't own nor exclusively manage. Read more...
    There is a big difference in having the POS installation guide say "make sure you set this password because the security of your CHD depends on this" vs. a POS application not storing the CHD in the first place. Traditionally only the merchant was liable for breaches and PCI related fees (fines). Maybe dragging some of the vendors into the liability mud fight will open the eyes of some of these vendors. Read more...

    Should Credit Card Transactions Be Free? There May Be A Way

    Here in the Netherlands, where the population is notoriously penny-pinching, credit card acceptance is amazingly low. It's both a result of the consumer not wanting to pay interest on everyday purchases as well as merchants not giving up a slice of the action. It is both legal and common to pass the processing fee onto the customer as a surcharge. Now things are moving to leave the credit cards behind: mobile phone payments are becoming more and more common here, and the transaction fees are minimal. Parking and entertainment (movie/concert tickets, nightclubs) have been amongst the first, and it's rapidly gaining momentum because the market has been hungry for the convenience at a price it is willing to pay. Read more...
    "Free" is an illusion. Don't charge one person but charge double to someone else. I am very skeptical on anyone who says that advertising will create valid cashflow. Just look at the advertising struggles in a TiVo world. And if you sell your customers data, just be warned that the one group that might have issue with that are you customers (which to me is very important to cashflow. Read more...
    Another factor not mentioned here is the impending costs that the processors and issuers are going to incur when someone decides on an end-to-end encryption method, and it then becomes government mandated. I can guarantee that this is a when question and not an if question. The back-end networks are pretty antiquated right now, and it's going to cost billions to replace everything. The cost of tech may be going down, but the cost of replacing millions of servers and hardware, and creating new, proprietary, software is still really expensive. Read more...
    Accepting credit cards are not "risk-free" for merchants, contrary to Jim's comments above. Chargebacks are an expense - both in terms of actual transaction reversals and costs associated with managing the process. Chargeback rules and expenses can be everything from a thorny issue to an onerous expense for some merchants, especially for convenience stores that allow customers to pay for gasoline at the pump, or other retailers that allow in-store self-checkout options. Read more...
    I've wondered for years why the price of transactions has been so high. Phone companies long ago started offering unlimited calling for flat rates because they understood that in many cases it cost more to report on the transactions (calls) than it did to fulfill them. Read more...
    If a home-owner defaults on the mortgage, who is taking the risk? The bank making the loan to the consumer or the person selling the house? It is obviously the bank that takes this risk and is rewarded for that risk through interest rate charges. In my mind, we have mixed together two distinct and unrelated transactions. Read more...
    The one big factor not mentioned in this article is who will take over the risk ? Taking credit cards is risk free to merchants and the issuing Banks take the risk if a customer defaults on the payments ! If you had a "interchange free" payment system will the merchants assume the risk ? Also, if there isn't enough profit for the issuing banks they will stop issuing credit cards which will in turn kill our economy. Read more...

    The Dangerous Out-Of-Scope PCI Charade

    If tokens are ever deemed in-scope, then where does the line stop? I ask this because it would mean that all timestamps, sequential number, random numbers or any other piece of information that may or may not be used to generate a token is within scope -- all data a POS uses and stores, not just payment data. Read more...
    Having the ability to do both Tokenization and End to End Encryption (not mere point to point) can have tremendous scope and risk reduction benefits and agility to adapt to change in this fast moving compliance landscape. Being able to have both on tap from a single platform is a solid approach to avoiding the pitfalls. Read more...
    But the consumer walks into a particular retail chain, gives their payment card to someone wearing that chain's uniform and the card is swiped. If, six months later, there's a breach and that card was misused, it's the retailer who will in the spotlight. They're the deep pocket and, therefore, the target. If the consumer is angry and wants to cut off business, it will hit the retailer. Therefore, if the retailer is going to end up being blamed no matter what, they have to stay involved. Read more...
    True, that someone may be storing a token-to-PAN cross reference. But that would be the bank, not the retailer. If the bank is not sure they can keep their data secure, then there are bigger problems to be addressed than bringing tokens into scope. Read more...
    Good general point, Steve, but for the record, not all tokenization is done the same way. Many tokens are associated with lookup lists that allow for them to re-matched to the card data if it's needed, such as for a chargeback. A token doesn't have to be decryptable (is that a word?) for there to be a way to access the original data. Read more...
    The out-of-scope argument is very valid but in reference to tokens, the premise of temporarily out-of-scope or abruptly deemed in-scope is flawed. Conway was quoted “anything that could be made unreadable can, in various ways, be made readable again,” this statement is true when talking about encryption technologies (all encryption technologies) but not so with true tokens. True tokens are in no way related to the original data other than as a reference key. Read more...