Application Portfolio Management (APM) Best Practices - Establish inventory compliance as a prerequisite for production deployment
Application Portfolio Management (APM) Best Practices
Establish inventory compliance as a prerequisite for production deployment
Overview
The most persistent challenge in APM governance is not the initial population of the inventory — it is keeping it current as the portfolio changes. Applications are deployed, modified, and retired on continuous delivery cadences. Integrations are added, changed, and removed with every significant release. Without a structural enforcement mechanism that connects inventory governance to the software delivery lifecycle, the inventory drifts from currency faster than any periodic audit exercise can correct.
The production deployment gate is the most effective structural mechanism available for solving this problem. It connects APM inventory governance directly to the one organizational control point that every delivery team must pass through: the gate between the non-production environments where development and testing occur and the production operating environment where applications are deployed for use.
Best Practice
Establish, in APM governance policy, that no application — new or significantly modified — may be promoted to the production operating environment until its owning team has completed (for new applications) or reviewed and updated (for modified applications) all required APM inventory records. The required records include the Application record in the Applications Inventory and all integration records in the Integrations Inventory for any integrations added, modified, or retired as part of the release.
The compliance requirement should be tiered to the organization’s APM maturity stage. At Crawl maturity, require only the Crawl-level attributes for the Application record and the minimum 11-tuple attribute set for each integration record. At Walk maturity, extend the requirement to all Walk-level attributes. At Run maturity, require the complete attribute set. This tiering ensures that the gate is enforceable at every maturity stage without creating a compliance burden that exceeds the organization’s current governance capacity.
The first time a team completes the inventory compliance requirement for an existing application is the most effort-intensive. Every subsequent release requires only an incremental review and update of the attributes that changed — which is a small and well-bounded task relative to the governance value it produces. Over time, with each production release across the portfolio, the APM inventories grow more complete, more accurate, and more current — not through periodic audit effort but through the normal cadence of software delivery.
Benefit(s)
The production deployment gate solves the currency problem that defeats most APM programs without requiring dedicated audit teams, periodic data refresh campaigns, or organizational incentives beyond the existing authority that controls access to the production environment. It makes APM data governance a natural part of the software delivery process rather than an additional governance overhead. And it produces a compounding Enterprise Model dividend: with every production release across the portfolio, the organization’s inventory of applications, integrations, capabilities, technologies, environments, and data types grows richer, more accurate, and more analytically powerful — transforming APM from a point-in-time governance exercise into a continuously improving intelligence platform.
Copyright for the International Foundation for Information Technology (IF4IT): 2008 - Present
Legal Disclaimers