Blog Administration |
Wednesday, February 23. 2005Pay No Attention to That Man Behind the Curtain
The Navy Marine Corps Intranet (NMCI) is a mandatory, omnibus information technology (IT) contract run by the U.S. Department of the Navy (DoN). The current prime contractor is EDS Corporation. All active duty military and DoD civilians within the Department of the Navy (U.S. Navy and U.S. Marine Corps) are obligated to use this contract for current and future technology needs such as networks, computers, servers, software and IT infrastructure.
Awarded in the year 2000, the first "seat" was activated in September of 2001. Over 500,000 users will be converted over from legacy systems by the end of fiscal year 2005. At least that’s the plan. Initial plans for the contract - or so it was rumored - included all voice and data requirements of the DoN. This would include management, design, acquisition, maintenance and operation of a huge host of services including voice telephone service, cellular phone and pager service, satellite connectivity, tactical communications, microwave and voice radio connectivity and, of course, anything in the computer and IT realm. This "super contract" was quickly scaled down to focus on IT. EDS Corporation won the bid for the contract that, at the time, was awarded for $6.9 Billion. One of the largest contracts of its kind in the history of the DoD. Mr. Robert Cringely has an excellent article on the finer points of the bidding process in his article which includes a great analysis of why and how EDS under-bid the contract. The Emperor Has No Clothes! Funding for the contract has bloated up from the initial $6.9 Billion to over $8.8 Billion as of 2004. The DoN continues to pour money into the contract in an effort to resuscitate both EDS and the ideal of outsourced IT. It is unclear what impact this expenditure -- the initial costs and the over-run -- will have on future DoN budgets as the contract was never approved by the U.S. Congress. Navy officials continue to tout the success of the contract despite huge outcries from the actual users who have to suffer with the equipment and services provided by the contract. In Cringely's second article he points out that one size does not fit all and it is folly to attempt this with such a large, diverse and technically skilled workforce. Mr. Cringely also highlights a trend that goes beyond the Navy and beyond NMCI. That is, the changing role of "outsourcing" in America. It used to be that a company who made Widget A decided that they wanted or needed to make Widget B. So they outsourced the production of Widget B so they could focus on what they do best: making Widget A. The trend in outsourcing now is different. Companies who make both Widget A and Widget B decide that they are doing a bad job with Widget B so, through outsourcing, they try to find someone else who screws it up less than they do. The Navy can do IT. EDS is not better at IT than the Navy. Someone just needed a plan. Instead they roped up $8.8 Billion and gave the job to someone else, hoping they would screw it up less. The Navy is better than EDS and any leader who doesn’t believe that should not be a leader. User "satisfaction surveys" are whitewashed or gilded to show what a great success the effort has been. A 55% satisfaction level was touted as a testimony for the great level of worker satisfaction with NMCI performance. In 2003 and 2004 there were a large number of laptop computers that began experiencing hard drive failures. NMCI refused to release the actual numbers of failures. Data began to be collected anecdotally at each facility in an effort to gain some visibility into the problem. Why would NMCI conceal the failure rates for equipment and force the Government to waste time trying to recreate statistics? One word: SLA. Well, that's an acronym... but it's kind of like a word. Service Level Agreements (SLA) are how EDS gets paid. It is how they make bonus. It is simply a metric used to determine if the contractor is meeting, failing or exceeding expectation thresholds. Obviously he who controls the data, controls his own fate. If you don’t release the results of surveys and tests, nobody can say you are not meeting your minimums. Additionally, the contract has an up-to-speed clause that states EDS is not required to meet any SLAs until they can demonstrate, for 90 consecutive days, that they can accomplish the minimum requirements of the contract. So as long as things don’t function correctly for 90 days at a time, they are not responsible for meeting SLAs. Excellent planning. Service response times are one of the most common complaints of NMCI users. The admirals can't figure this one out. Every time they call the help-desk on a computer issue, the technician is standing at the door before the admiral can put the phone back in the cradle. No service problems here. Imagine the sailor, underway on a Navy ship. He has no administrator privileges on his computer and his IT support staff is 300 miles away over open water. Giving the sailors the tools they need… or not. Come On In. The Water is Fine. In an effort to bolster support (or spread the misery) the Navy has tried to convince other organizations, from the U.S. Coast Guard to NASA, to adopt either the NMCI contract or a similar omnibus vehicle. Officially, these other departments are adopting a wait-and-see attitude. Unofficially they are running for the hills. The U.S. Air Force has a huge technology core to support such things as its fighter/bomber aircraft and its enormous space-based (satellite) groups. It has yet to belly up to the bar to drink from the bitter cup of NMCI despite the salesmanship of senior Navy officials. Snake Oil! Get Your Snake Oil here! When the work force was first told about NMCI, it was touted as a move towards a leaner, more efficient, standardized approach that was going to save the Navy money. A cost-cutting measure. In fact, that was the justification given for spending $6.9 Billion with little or no oversight. The funds would be repaid with the savings from leaning out the IT. Distributed help desks and network gurus could be removed from the hundreds of military bases and field sites and centralized into a core. Efficiency would skyrocket. After the initial "rollout" of seats began (and of course the contract had been awarded), people started to question the cost savings being touted. Inquiries to produce and explain the accounting behind these supposed cost savings were met with hand-waving and throat-clearing. EDS, from a business perspective, was nearly crushed. Huge cost overruns began to surface and the Navy and EDS started running out of fingers to plug holes in the dike. The impact to the Navy is incalculable in terms of lost work hours, reduced capability and general disruption. These affects are still being felt by many users trying to bring their NMCI computers up to speed just to do their job. Time to change gears. Forget that cost savings stuff. Advancement can be expensive. NMCI will be a secure network. Ya, that's it. It will be more secure than the existing, diverse legacy networks and equipment. Except for the fact that in 2003, thousands of supposedly secure machines and networks were infected with exactly the same worms as millions of other Windows PCs and servers around the world. In 2005, what was only rumored as, "NMCI was hacked" led to thousands of users being forced to change their passwords under emergency-like conditions. The details of this compromise were understandably never released but we hope NMCI administrators took notice. Additionally, one would also need to raise an eyebrow at the entire concept of allowing a contractor organization to be in control of Government data. Not necessarily from a classified/unclassified standpoint -- although that could warrant some thought also -- but more from the concept of impartiality. All the servers and desktop machines are under the control of EDS. Where does a procurement official store procurement-sensitive data? Would that procurement person even know if EDS, a contractor, was looking at their data? How are personnel, medical and financial data being secured? Since September 11th the whole concept of "sensitive" data has changed. Who has access to this data? O.k. so NMCI’s not so secure, let's try this again. We will achieve greatness through standardization. Ya, that's it. Everyone knows standardization is a good thing. Certainly in the mid 1990s, back when well-meaning leaders were nurturing the seeds of NMCI, there was reason to be concerned with the state of standardization. Word Perfect battled Microsoft Word. Lotus and Excel shot it out in the spreadsheet arena. Novell had no use for TCP/IP. VMS and Unix flexed their muscles.... If a command or organization did adopt a standard, it was invariably a different standard from the organization down the street. Yet as we fast forward to 2001 (and certainly 2005) we see the Navy has changed as much as every other technology-centric organization in the developed world. Microsoft suites are now standard. They are even dictated by things like the IT21 initiative. TCP/IP is the standard for networking and, again, concepts like ForceNet mandated it as a standard over technologies like ATM. PCs, running either Windows or Linux, are already standardized in the DoD and are even making their way into the traditionally proprietary world of embedded and tactical systems. How old is the "standardization" problem they are trying to solve? "Damn the torpedoes! Full speed ahead!" So, What's the Problem? So now that we’ve talked in generalities about unfounded claims of cost savings, security lapses and the quest for standardization, perhaps some more specific examples would be in order. Users are subjected to a managed Windows desktop. Managed, meaning they have very little control over not only the look of their Windows desktop but the functionality of the computer as a whole. Certainly not something that is reserved solely for NMCI, many corporate IT departments limit what end-users can install on their machines. Under many circumstances this makes sense to reduce the risk of virus infections and instability caused by users installing software packages they shouldn’t. But what do the users get? As of 2005: Windows 2000 (Phased out with the introduction of XP in 2001) Netscape 4.7 (Phased out in 1999) Internet Explorer 5.0 (Phased out in 2002) Office 2000 (Phased out in 2002) Why are all these items so outdated? Because EDS is on a three-year update cycle, at least with the hardware. Obviously the software and OS are on even longer cycles. Understandably, if you are buying 500,000 computer suites, you can't be expected to update everything the instant the OEM changes versions. However, many Navy customers were told (either officially or otherwise) that NMCI has adopted a "one behind" policy on software. That is, users will not get Windows XP until the rest of the world has moved on to XP's successor. There is no question that NMCI made an effort to downgrade many of the PCs supplied by Dell under the contract, uninstalling EOM software. NMCI laptop users can frequently turn their laptops over and find the OEM sticker for Windows XP on the bottom. Part of the promise of increased efficiency included disbanding local help desks and network support centers so that these tasks could be centralized. In fact many of the legacy support personnel were promised jobs with EDS once they were removed from their positions with the Navy. That benefit not withstanding -- in fact some reports are that these people were quickly let go after being hired -- it appears that many bases have quietly recreated their Government support infrastructure even though they are converted to NMCI. They either do it unofficially, assigning people "collateral duties" in addition to their regular tasks or they simply never disbanded their legacy support systems. These "shadow help desks" create duplication of effort and negate any purported benefit of NMCI centralization. Why do the Navy personnel do this when they could simply let NMCI fail? Because they are there to get the job done. Whatever it takes. The Dot Dev Account So, what if the user needs special application software or newer versions of popular applications that are not included as part of the managed desktop? Well, for a price, NMCI will sell you the administration rights to your own computer. It's called a "dot dev" or S&T (science and technology) or developer's seat. But there are several catches, even with this. As a .dev user, you do have the ability to install most software but the .dev user is still not granted full rights. A quick trip to the Windows on-line update site at windowsupdate.microsoft.com greets the .dev user with the warning: "Network policy settings prevent you from using Windows Update to download and install updates on your computer." But wait, there's still more. Just because you have the ability to install software through the OS doesn’t mean you have the permission to install it. If the software is not on the approved list of applications, it can not be installed. Users of .dev accounts sign a contract stating that they will not install, download or compile any software that has not been approved. One could ask what good such a system would do for a programmer. Every single time he changes code and recompiles he is essentially creating an unapproved piece of software on his NMCI seat. The .dev user has no access to E-mail while logged in to his development account. So any applications that would normally interface with Outlook (e.g. Palm Organizer or PDA software) are useless. Additionally, the .dev user has to log out of the development account and log in to his normal, non-development account several times a day just to check E-mail. For many E-mail-centric users, the .dev account is almost never used because of this reason. However he still gets charged extra, every day, just for having the privilege. Lastly, as a developer's seat, your help-desk support also gets placed into a special category. Unless you pay for it, you are not provided software support for any application, even those that are supplied as part of the basic package (called the Gold Disk). So if your MS Word application becomes corrupt and refuses to load, even if it was not the result of anything done by the .dev user, the NMCI help desk is not required to assist with this. We can do that! How Much Money Do You Have? Like most Firm Fixed Price contracts (if you can call $6.9B to $8.8B "fixed") NMCI has a Contract Line Item Number (CLIN) list. Each CLIN has an item number and the user can pick from this list just like a menu. If it isn’t on the list, they can't do it. There are some changes allowed to this list over the lifespan of the contract. However, it would be incorrect to call the pricing "dynamic". If the cost of a P4 laptop next year is half the price of this year's model, don't expect to see the NMCI CLIN for a laptop go down by half. There is no explicit requirement for the contractor to keep up with technology or prevalent pricing of that technology. So how bad is the pricing? The public CLIN list is available at http://www.nmci-isf.com/clinlist.pdf in PDF format or http://www.nmci-isf.com/clinlist.htm in HTML [Note: As of mid-2006 these URLs have been pulled by EDS]. So for about $4000 a year you can get a fairly capable machine (although the software is three years out of date). So not too bad. Ummm, remember, you have to pay $4000 every year and when you're done with that PC, NMCI gets it back. Let's see. You need to change cubicles and want to plug your PC in to the existing wall jack in your new cube? That's an "Add/Change/Move" action and you have to pay NMCI for that. When commands need to pay for NMCI, there appears to be no clear-cut method for funding such a transformation. There was certainly no core funding coming directly from CNO or the upper echelons of the DoN. Even commands like NAVAIR and NAVSEA left their subordinate bases to fend for themselves. Many sites chose to put a "tax" on all base funding sources in an effort to spread the misery. So Navy facilities, who were undertaking joint work with the Air Force or the Army, had to tax their Air Force customers to pay for NMCI. It is unclear how this is being reported to the Air Force or other non-DoN activities. This is especially difficult for large projects that never pre-estimated the cost of NMCI into their joint projects and are now looking at short-falls due to the unforeseen NMCI tax. Its Ours Now So what happened to all the PCs the Navy had before NMCI came along? They belong to EDS! As part of the contract, all existing IT assets became the property of EDS. The Navy, who had acquired billions of dollars worth of computers, networking equipment and infrastructure with taxpayer money, simply gave everything to a contractor. So if a tech-savvy command had just purchased the latest "loaded" PCs with huge amounts of memory, large hard drives and state of the art processors, it didn't matter. The computers were turned over to EDS and replaced with five-year old technology and six-year old software at twice the cost. Conversely, of course, if the command had been limping along with outdated, inadequate technology, NMCI could offer something better. Although people who felt their NMCI machines were "upgrades" are few and far between, if you trust many of the surveys in publications like Federal Computer Week. It would appear that administrative and secretarial users are happier with their NMCI seats than the engineers, scientists, analysts and project managers. One could ask which segment we are really trying to support with NMCI. Stop Your Whining. What's the Solution? The proponents of NMCI can point to some successes brought about by the NMCI contract. There is no doubt they exist. Yet if one looks closely, you can see that many of these "successes" are the result of Navy employees, not EDS and certainly not anything that NMCI brought to the party. Hard working Sailors and Marines using USB memory sticks, swapping hard drives and sneaking legacy laptops into their labs so they can do the work they need to do. Why don't they just let the mission fail and have NMCI take the justified heat? Because they care more about the Navy and Marine Corps than the NMCI leadership does. EDS is not a criminal. There is nothing, as of yet, to indicate corruption within the NMCI contract. EDS made some incredibly stupid mistakes. The Navy made some incredibly stupid mistakes. Unfortunately the American Taxpayer is now left to pay for those mistakes. A solution to the NMCI debacle could only come from a clear understanding of the initial problem that NMCI was introduced to solve. The problem statement that spawned NMCI has not been clearly communicated to the rank and file Navy employees. It certainly has not been communicated to Government leaders outside of the DoN – if they even knew to ask. Intentional obfuscation or negligent research, the outcome is the same. NMCI is a solution to a problem that doesn't exist. It is now a problem in its self. Make the NMCI contract optional. Let commands prove themselves without being forced to foot the bill for some else's ideal of standardization and efficiency. The foggy misdirection created by claims of improved efficiency do nothing to point to NMCI as a solution. In fact there is no evidence that NMCI is more cost effective or more efficient than anything the Navy could have done organically. It may require Congressional pressure to find out exactly what is right and what is wrong with NMCI. We can only hope that such an inquiry would go beyond the, "Pay no attention to that man behind the curtain!" shouts from the Navy leaders. The working Sailors, Marines and civilians know better. Saturday, February 19. 2005Some Prophetic Quotes"...it's much better than what we had before, and we could not function without NMCI." -- FCW Interview, 17 September 2004. Mr. Gordon England, Secretary of the Navy "People forget where we were before NMCI — we've come a long way. If you measure where we are compared to where we were, you see just how far that is." -- 22 June 2004. Mr. Gordon England, Secretary of the Navy "That's the way it is with my own personal [America Online] account." -- 22 June 2004. Mr. Gordon England, Secretary of the Navy, dismissing what he called a "few bugs" in the system. Resistance is futile. You will be assimilated. "If you don't like it, leave. Because we're going to do this. Resistance to it is costing me money and costing me time, and I won't stand for it. I'll plow through or over anybody and do whatever it takes. We're not doing NMCI because it's a cute idea, but because it will provide a bridge — a road — to the efficiencies we want to achieve." -- 24 March 2004. Adm. Michael Mullen, Vice Chief of Naval Operations "We didn't have 100,000 apps, as the Navy did. I wish we did, because that would mean that we had the money to buy them!" -- 23 March 2004. Brig. Gen. John Thomas, Marine Corps' CIO "I don't know why you replace something that is free, simple and easy with something that is expensive, complicated and shackled," -- 15 August 2004. Unnamed Navy Captain in Government Week Magazine interview "NMCI will come on this base over my dead body." -- 18 Feb 2004. Anonymous Commanding General, California Marine Corps Base Let's give the Airlines $8.8 Billion and see if they can tell the difference between Seattle and San Diego "Thanks to NMCI for delivering my e-mail to San Diego this morning, as opposed to the airline, which delivered my luggage to Seattle last night." -- 5 Feb 2004. Capt. Kevin Uhrich, director of the Naval Networks Division of the Navy Network Warfare Command "NMCI is a six year-old solution to a ten year-old problem that hasn't existed for eight years." -- Overheard an an IT conference in reference to the outdated technology supplied as part of the contract. Someone hits the nail on the head! "Part of the problem is standardization, which looks great if you are part of a command that hasn't had much in the way of IT resources, but looks terrible if you are with a leading-edge unit that had all sorts of toys, only to have NMCI take most of them away. One size definitely does not fit everyone, and it was a grave mistake on the part of the Navy to even pretend that it could." -- 25 March 2004. Mr. Robert X. Cringely
(Page 1 of 1, totaling 2 entries)
|
CategoriesArchivesSyndicate This Blog |
