GTEC Mailing List FaceBook LinkedIn Twitter Subscribe GTEC 2010 | October 4-7 | WESTIN HOTEL | OTTAWA ON CANADA

Archive for the tag 'NRCan'

j0308994Last week NRCan gave a presentation to the Conference Board of Canada on the role of social media in risk management. The presentation took the usual form: we discussed our experiences in managing the risk of social media implementation, focused on how to address quality of content on wikis, and how to guide and inform employees on the acceptable use of new and open technologies.

What was different about this particular presentation was the inclusion of a few slides on how social media could be used to contribute to – and in fact reinforce – risk management activities. We had an audience interested in all aspects of risk management, and as good presenters we looked at our own NRCan Wiki, our blogs and other tools to find good examples to illustrate how social media could help reduce risks – or at least serve as a way to identify risks earlier.

Joe the security guy
Take one of our IT security guys for example – let’s call him Joe . He’s a well-respected and knowledgeable NRCan employee, whose work concerns protecting corporate systems and ensuring that we’re kept well informed on any potential risks. Joe wrote a blog entry about the dangers of Twitter. It was a good, well thought out entry that generated a discussion amongst employees. Some employees were concerned that this attention to potential risk could slow things down, and the issue was discussed from a diverse variety of perspectives.

How does this support better risk management? The first thing to note is that Joe posted his blog entry voluntarily – not because he was asked or because there had been a problem, but because he saw something on the horizon and took the initiative to address it by starting a discussion with his fellow employees. This discussion took place before the Department had officially identified Twitter as a tool being used by employees, and long before it had indentified the need to provide relevant policies and guidelines.

Now that the need has arisen, the policy does not need to start from square one. There is already a base of research and opinion to be found in the discussion sparked by Joe’s blog entry. Joe has created a living repository for information and knowledge that could play a valuable role in building a risk management approach, a repository fuelled by the experiences of NRCan employees. Now policies can be built not only on theoretical implementation plans, but also on how real employees have chosen to make use of social media tools.

This is the power of social media: to build on the wisdom of crowds. In the social media forum, the latest concepts are discussed by people that have an interest in the topic, no matter whether they have an official role in the file or not. With social media, a body of valuable knowledge and experience can grow organically, fuelled by the passion and interest of real people, including those who may not have been reached through traditional lines of communication.

We must not only recognize the value but also make use of the discussions and analyses that are generated through the knowledge skunkworks of social media. Taking this inclusive and proactive approach will help us anticipate new trends and build corporate knowledge, not only for managing risk but also for any other subject matter or mandate.

 

 

j0438517Over the past several months we have used this space to share our thoughts on Gov 2.0 either by profiling the many initiatives NRCan is involved in or by taking you along on a personal rant just to make a point - which some might argue is the sole purpose of blogging.  In the spirit of collaboration, “we” (representing corporate) extended an invitation to a few business leaders at NRCan who are actively using collaborative technologies to engage and interact within their communities.

The following blog posting by Jennifer Hollington, a Director General in the Canadian Forest Service (CFS) and one of NRCan’s most prolific bloggers, elegantly demonstrates how she champions Gov 2.0 at NRCan.  This post first appeared in Café Jen (an NRCan blog) in February 2009.

A few months back, our ADM mentioned an idea for tapping into the knowledge of retired employees. He called it “Friends of the CFS”. It would be a network of retired staff, particularly scientists, whom current staff could contact with questions.

This brought to mind a passage from Wikinomics: How Mass Collaboration Changes Everything:

[I]f you’re a retired, unemployed, or aspiring chemist, Procter & Gamble needs your help. The pace of innovation has doubled in its industry in the past five years alone, and now its army of 7,500 researchers is no longer enough to sustain its lead. Rather than hire more researchers, CEO A.G. Lafley instructed business unit leaders to source 50 percent of their new product and service ideas from outside the company. Now you can work for P&G without being on their payroll. Just register on the InnoCentive network where you and ninety thousand other scientists around the world can help solve tough R&D problems for a cash reward. InnoCentive is only one of many revolutionary marketplaces for ideas, inventions, and uniquely qualified minds that can unlock new value in their markets.

Even if government contracting rules got in the way of the full implementation of P&G’s crowd sourcing approach in the public service, the idea of being able to take advantage of the skills, knowledge and experience of retired scientists and professionals is appealing.

So, as I sat typing up this post, I wondered whether I could find examples of how the GC is reaching out beyond its borders to engage bright minds in addressing their challenges. I’m not talking public opinion research, in which the government seeks input on a particular topic for a certain period of time. I’m talking about an ongoing relationship with the general public or a particular constituency for the purpose of collaboration.

I found quite a few examples of how various government departments and agencies are using Web 2.0 technologies, such as Twitter, RSS feeds, Facebook, YouTube and Flickr. You can find a list of them at the Government 2.0 Best Practices Wiki, started by consultant Mike Kujawaski. Though the technologies are new and their application in the Canadian government even newer, this wasn’t what I was looking for. I wanted to find stories where government was interacting with people outside their organization.

The most impressive example I found of citizen engagement was Governor General Michaëlle Jean’s Citizen Voices Web site, featuring a blog (bloGG), including video installments (videobloGGs), and a forum.  Some blog entries carry her by-line while others are written by staff in her Office. On her September 3, 2008 post A New Season on Citizen Voices; she ends with this statement:

“To understand, we must listen. To act, we must include.”
The first comment to this post was made on September 30. The next one came almost 2 months later, on December 1 and began:

“This may not be the most appropriate means by which to contact you about our current parliamentary debacle. However, it is a means of contact - I apologize if it is totally inappropriate.”

What follows is quite amazing: more than 100 comments in the span of one week, centered on the political issues of proroguing Parliament.

Equally amazing is the Forums section of the site, enabling citizens to launch their own debates, rather than comment in response to an official post. Within a category called the Citizens Forum on the political situation, one person started a post entitled: “Devastated by your decision”, saying: “I had faith in our Governor General to see the wider view of these political matters. I am devastated by the decision to suspend parliament.” You have to admire the Governor General for embracing true citizen engagement, even when that engagement involves public criticism of her on her own site.

The Privacy Commissioner of Canada has a public blog, written by a group of staffers in the Office of the Privacy Commissioner. The blog’s mission is to increase contact between the Office and Canadians interested in privacy issues. Readers can make comments on blogs posts, which — based on my quick review of the site — generates responses from the staffers or other readers.

The Canadian Centre for Occupational Health and Safety, a GC crown corporation, set up Workscape, a discussion board on occupational health and safety. To date, almost 450 members have created just over 200 posts.

Some sites to support discussions among public servants are unofficial, residing outside the GC domain. One such site is Common Look and Feel .ca. Its stated purpose is “a community space where those who work for and on GC Web projects can come together to share, learn and create.” The site is designed to help members learn how to incorporate new technologies and social media into their sites, while complying with GC Web standards.

But after several hours of searching, I couldn’t find much more than this. Which leads me to my question: are you aware of examples within the GC where departments have reached out to former employees or the public to tap into their knowledge?

j0387717

It’s easy for all of us to get caught up in the excitement of social media.  The tools are cool.  They provide huge benefits.  But they also open up the door to both personal and professional risk. 

 

Chris Taylor, our NRCan IT Security guru, recently wrote about the risks of social media tools in Café Jen, an NRCan blog.  In Chris’ post he highlighted the following two main categories of dangers to be aware of when using social media tools:

  1. Risk to your computer from malware (viruses, trojans, worms etc.); and,
  2. The sharing of inappropriate content or content being shared inappropriately.

As an example of how you might get a virus through using social media, Chris noted the following:

 

“We tend to treat social media services as more trusted. Because the content is coming from friends rather than faceless enterprises, our guard is not as high. When you receive a tweet from a friend, saying “This is soooo funny”! http://bit.ly/A2qC21ds“, you might click the link without a second thought. But are you sure your friend’s computer or Twitter account has not been compromised? Or do you know that the site you are being sent to is “safe”?”

 

I know what you are thinking…”But what are the chances that will happen to me?”    Actually the odds are pretty good. Twitter was hit with three viruses1 in the early part of this year which quickly infected a large number of users.  In all three cases, user accounts were compromised and helped to further spread the virus by infecting their followers. 

 

When it comes to inappropriate content, Chris provides an example that would give anyone pause…..

 

“It is easy for people to get more and more information from what we put out there.  For example, if you look on Fickr, you can find lots of things like photos from a child’s birthday party. No harm in that, right? Oh, but they are captioned with things like “Sally’s 5th birthday”. Well, that really isn’t a problem. After all, it is easy to see that the girl is about 5 years old. And the person was careful not to include a last name. Of course, they didn’t really think about the fact that their brand new camera has a GPS receiver and is geo-tagging2 all their photos. Hmmm…all of a sudden, the hairs on the back of my neck go up. When you can place the location the photo was taken within 3 metres… And it looks like a back yard… And you have the name of a 5 year old child who lives there… And Google Maps will give you the address… And a reverse directory will give you a last name of the owner of the house and the phone number… And another directory will give you the names of all the neighbours… All of a sudden I am thinking there is too much information available. Information that could be used to trick a child into trusting someone they shouldn’t.”

 

What’s so helpful about these examples is that they make us stop and think.   Knowing the risks is the first step in being able to mitigate them.

 

To do just that, we have consulted with our IT security folks and put together our list of the Top 5 things you can do to protect yourself and your computer/network when using social media tools while of course exercising good ole common sense:

  1. Never post or provide personal identifiers such as your SIN or date of birth.  For all other personal information, a good rule of thumb is to ‘think before you post’.  Consider if the information you are about to provide (together with all the information already out there) is something you want to make available (e.g. your route to work, your children’s names, when you are going on vacation, details of the party you went to where you overindulged – you know the one etc.)
  2. Never give out your username and password for any social media application (especially from someone claiming to be from ‘support’)
  3. If you are using URL shorteners with Twitter, choose to use the preview option which takes users who click on your shortened url to a page where the full url is displayed.
  4. Download photos to your computer and edit the properties to ensure the GPS information is removed prior to posting them (instead of posting photos online directly from your phone). 
  5. Ensure that you are not violating the GC Values and Ethics Code or your department’s ‘Authorized Use’ policies.

 

For even more ways to mitigate your risks when using social media, the following newsletters from the SANS Institute provide excellent advice:

1.  The dark side of social networking

2.  Kids and the dangers of Social Networking

 

 

Footnotes:

1  More details about the Twitter viruses can be found here:  Best Video, Twittercut, and StalkDaily

2  Phones that can geotag photos (in some cases automatically) include Blackberry, iPhone, and Palm Pre

 

 

 

 

 

 

 

 

 

 

 

j0379423I recently presented on NRCan’s wiki experience at a conference. It went well, but it was challenging. The attendees were just beginning to come to grips with technologies that NRcan has been ’storming and forming..then storming some more’ around for two years. So I ended up getting questions like ’What did you base you business case on?’ ‘What were the identified business needs you were trying to address?’ etc.

What makes these questions challenging to answer is that with the initial pathfinder rollout of these tools at NRCan we didn’t have an explicit business case nor did we have a detailed project plan. What we did have though, were strategic and high level views that we needed to collaborate and share our information and knowledge more effectively. Senior managers were becoming frustrated with information they knew existed but could not easily find. NRCan employees were working in their sector silos with no way of sharing their information let alone collaborating to create it. With these strategic business needs in mind (more of a vision really), we engaged a community of “frustrated but willing to experiment with new tools” employees and we launched the tools and watched what happened.

This approach did generate discussion as it always does alternatively being called “ technology push” or putting the cart before the horse. Our response to this was, as always focused on a two key aspects. The first is that the social media tools we are looking at for the most part allow us to do this. They are simple and viral and they cost very little to implement so the traditional requirements for upfront business needs definition to control risk and guide investment are not as important. In fact, in my opinion it would take more time to write a proposal and business case than to just put something out there and see what happens.

More importantly though social media are fundamentally new technologies and the best way to understand their business value is to get them into the hands of the users as soon as possible and have them tell you through the use of the tools. To a large degree this is what has happened with the NRCan Wiki. Most of the innovative uses of the wiki have come from the employees experimenting, coming up with good ideas and having the freedom to implement them. They have not come from a clearly articulated business needs analysis or business case done in advance.

In fact, determining business needs in advance of having a tool in hand may actually lead to status quo approaches and tools. There is the famous Henry Ford saying about the introduction of the Model T I first heard at an nGenera conference last year. The quote goes something like “if I had asked people what they wanted in a car they would have said faster horses”. We social media folks usually deploy this quote to highlight the weakness of focusing too much on responding to people’s perceptions of their existing business needs as a determinant of technology solution since people invariably define their needs in terms of improving the way they are already doing things, not how things could be done in a fundamentally new way.

This is not to say that business cases and business needs analysis are not necessary or valuable. In fact we DID do a business case for collaborative technologies and we HAVE analyzed the business uses of our wiki and other tools. The big difference here is that we did it at the same time we launched pathfinder versions of the tools. And, the primary source of information on business need and value for the business case was what emerged and continues to emerge out of the tools. So to put it into a few phrases we knew what basic IM issues we needed to address, we got going with the tools then trusted to the wisdom of our users to more clearly define the business need - then we completed our paperwork.  

Is Web 2.0 changing the way government organizations are working together internally, as organizations?  Is Web 2.0 causing us to think more about the contribution we, as employees, can make to our organizations?  Is Web 2.0 breaking down some traditional silos and stimulating us to work outside of typical work structures?  In my opinion, the answers are obvious:  Yes!  Yes!  And yes!

Web 2.0 has started a revolution….an evolution and a new way of working together, sharing information, contributing knowledge and respecting the active participation of a wide range of users.  This is the genesis of Government 2.0. 

At Natural Resources Canada, we are in the midst of such a revolution.   We began with some simple exploration into a few ‘collaborative tools’.  But, we quickly discovered the power of collaboration and Web 2.0 technology.  From then on we were hooked and we were excited.  As we shared our stories with others, we discovered that the excitement was contagious…not because we simply talked about it or gave demos, but because this technology is immediate and accessible. 

When we started our journey into Gov 2.0, we knew we wanted to try out a lot of ‘really cool stuff’.  We also knew we needed to demonstrate value to NRCan employees.  Our focus was on two major deliverables:  a departmental Wiki and a Business Case for implementing Collaborative Technology.  Our Wiki 101 pilot, (101 users in 101 days) was established to assess how a wiki could enable the creation of rich, integrated content amongst government employees (after all, a Wiki is only as good as the content it holds).  We also wanted to build some support and identify lead users.  The pilot exceeded our expectations.  Employees were asking to take part, they wanted to help each other out, and communities of employees with common interests were emerging.

In October, 2007 we launched our Wiki to all the employees of NRCan and three months later, the Business Case was approved.  Since then, our wiki continues to evolve and grow and, we continue to introduce additional tools. 

Has the transition to Gov 2.0 at NRCan been easy?  No.  It has been hard work.  Has it been worthwhile?  Absolutely!  Our bold approach has enabled renewal in the department.   It is supporting new ways of working and increasing the level of collaborating amongst employees.  It is changing the culture of work at NRCan. 

We were thrilled to be invited as contributors to this blog to stimulate dialogue on topics such as culture change, social technologies, innovative approaches, GC collaboration, rules of engagement and many others.  Through this dialogue we will exchange ideas, thoughts and opinions; share best practices; and talk about the challenges, risks and our changing role.  Most importantly, we will learn from each other in an open and collaborative environment.  In the spirit of Government 2.0, let’s start collaborating…….