Cynapse Inc. is bio-technology company that develops drugs based on proteins and peptides. Many of their team’s work “virtually” and yet often, projects are not completed on time or within budget. The growing company currently has one product approved by the U.S. government agency FDA (which must approve all new pharmaceuticals manufactured or distributed in the US), and two additional drugs undergoing clinical trials. There are about 700 employees at the company.
Due to the many scheduling risks, about half of the scientific and research staff are located near headquarters in San Diego, working as computational and pharmaceutical research scientists.
Since research is considered valuable IP (intellectual property) the Cynapse Corporation also has a large IT/information management department centralized in the headquarters office. Headed by Chief Information Officer (CIO) the IM department employs about 80 people and is charged with support of all communication, databases, cyber-security, software upgrades and computer systems used in company operations.
In addition to the IM professionals, Cynapse employs a number of highly skilled “computational scientists” who conduct research using mathematical models on a computer. These scientists are not members of the IM department, but use the IT systems extensively. They report to the Director of Computational Biology, who, in turn, reports to the Chief Scientific Officer (CSO). A majority of these computational scientists, and Director herself, hold advanced degrees, and are quite proficient in computer programming. Just like the IM professionals, many of the computational scientists have been with Synaptic for years. Many maintain close personal friendships with their colleagues. However, tensions are rising due to the many risks that management has at last identified which stem from unclear project scope, growing schedule risks, impacts to overall project budgets and lack of trained PMs (project managers) able to communicate effectively with upper management and IM specialists.
In the past IM management attempted to reconcile this conflict by creating a formal business process to “transition projects from research into production”. This effort was ultimately abandoned since scientists refused to follow the standard procedure, preferring informal communication instead. This triggered many IP (intellectual property) risks with data already developed on pharmaceuticals not yet ready for manufacture. Of course, schedules were severely impacted as well and virtual teams often did not respond until several days after projects ended abruptly.
As a result of these frustrations, some of the computational scientists lost faith in the IM and started to create their own information technology systems. In the most prominent example, one scientist, Steve Levitt, Ph.D.., hosted his programs on a high-end PC located in his office. He has his own Oracle database on that PC (he downloads the latest version of Oracle whenever it is available, but then submits an invoice). Everything he has ever worked on is on that computer. The information stored on his PC includes, among other items, software and data for one of the key computational biology business processes. His work is known to very few of his colleagues in the company, but not in sufficient detail to reliably operate his “modified” software.
When Steve goes on vacation, he leaves his cell number behind to call in case of “issues”. Realizing how important Dr. Levitt’s work is for the company, the corporate e IM manager repeatedly asked Steve to document his computational process, and to submit it for the “transition into production” process. Steve repeatedly took no action on these requests and attempts to avoid risks his manager pointed out at last backfired. Other scientists have started to follow some of the same IT practices in their daily work “since Steve does it”.
The owners of Fast, Inc., a small consulting company that Cynapse retained to keep up with completing several of the “abandoned” projects were available for an interview. “We are former PhD research scientists ourselves, and so we know very well what scientists need. We operate lightning fast, and on most projects, we turn around so quickly, that they don’t even know what hit them. Sorry, we don’t have documentation ready: the Cynapse management never asked for that, and we will have to charge them next quarter. Our bill may be very high, but we can’t forecast costs until the work is done.”
The consulting company Fast Inc three owners acknowledged that speed of development comes at a risk of “cutting corners” when it comes to documentation. “But we maintain our own computational infrastructure in our own office, and we keep the data and software that pertain to our work with Cynapse right here, and we know it all intimately. And eventually, these ad-hoc projects develop into products, and when they do, they could be sold! We are excited about these horizons. What’s more, because of our favorable agreement with Cynapse, we retain all rights to the software. It’s amazing to be in bio-technology since several other clients and government agencies are interested.”
Over the years, the relationship between the many diverse scientists and Fast Inc. became quite close. Fast’s owners attend some of the research meetings on the latest intellectual property being developed for the FDA tough approval standards, and they have persuaded Cynapse’s management to buy stock shares in Fast. The consultants mentioned their plan to eventually sell off Fast, Inc. completely, and to move on to other business interests.
Black Swan Crisis Triggers Risks
The first harbinger of possible future problems hit on Christmas Eve of 2018. A large number of errors were found in Cynapse’s main database, and upon a two-month-long investigation, the errors were traced to Steve Levitt’s calculations. It appeared that some parameters in Steve’s process were changed as part of an experiment in the early days of Cynapse, but then both he and his supervisor forgot about it and failed to switch them back. The process operated with a wrong parameter set for nearly a year, invalidating much of the data accumulated for the past 13 months!
Cynapse’s IM Director was asked to correct the problem, but without understanding of Steve’s research and direct access to his software, the task proved extremely difficult. Ultimately, the CSO demanded that the Research IM Director be relieved of his duties: heads began to “roll” and this caused great concern throughout the IT divisions and Information Management project managers.
While the Chief Scientific Officer assumed his responsibilities on the stressful day that the IM Manager quit, in the interim, teams are unclear what will happen to enforcement of Information Management policies and procedures. Steve and his supervisor were not reprimanded, and they are now risking schedules set months prior.
The Chief Scientific Officer was available for a very short interview. When asked about his assessment of the database problem, he started by stating, “Ultimately, we all are to blame for these risks. If only we could have forecast these risks to our budget more carefully!”
To address the snowballing problems, the IM senior management decided to create an additional position. The new job would serve as a middleman “liaison” between the IM and the scientific group. It would require a degree in the biological sciences (to earn respect from the Computational Biology workers) along with multiple years of IT experience and even security clearance.
After their efforts to locate an individual with suitable qualifications failed, the Cynapse upper management team has contacted you, a consultant in independent practice, to develop a Risk Management Plan and make recommendations on standards to follow.
You have just visited Cynapse offices where you’ve met, and interviewed individuals described above. You have been offered a contract this month as a consultant to Cynapse. You have been told that your ultimate job is to identify risks and make recommendations to management. Hence, in a 5-page overview (no Appendix), you are asked to:
1) Create a Risk Register identifying major project management risks and
2) Make managerial recommendations for both teams at Cynapse
From the practical standpoint, it is not likely that you would have an authority to hire and fire top managers, or to perform mergers and acquisitions, so proposals involving any of these are not likely to be accepted by the client organization. No organization charts are required. You need to first address the risks facing the Information Management/IM process. You also must address the growing IP risks!