2013

IT Management Education

M1 – Application Management & e-Business

 2

MODULE M1

Application Management & e-Business

Pieter Dubois – Topic Leader
 3

M1 Module Abstract

• The dependency of enterprises on their IT systems is constantly increasing. The

access to their information is more and more relying on applications and the
complexity and the criticality of those applications are creating challenges when
evolutions or change is required. These must be formally managed.
• Application development & management are therefore a fundamental aspect of
IT projects. Understanding of their main concepts and decision factors are a
must when being confronted with them in IT projects.
• In a complex internal environment, developing applications might involve
dozens of interfaces, programming languages, and platforms. The infrastructure
to support such applications must be assembled and requires comprehensive
knowledge on the part of application developers. In addition, developing,
testing, and deploying applications is very time consuming but is an essential
factor of the development quality. The security of web applications and and
mobile facing applications are a hot topic today and there are best practices
and methodologies that should be followed to reasonably assure a secure
development outcome.
M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014
 4

M1 Module Objectives
At the end of the module, the participants should be able to understand:
• the Supply and Demand framework and the different Governance and Maturity
methods used for application management.
• the different Software Development Life Cycle (SDLC) methodologies
• The basic technology building blocks and how they interact
• when to use in- or outsourcing, or Common Off The Shelf Software (COTS)
• The importance of Governance, Quality, Auditing & Risk in development and
methods that exist to manage it.
• What methods & frameworks are used at which point in the SDLC
• Design and testing methods used throughout development
• Different application architectures depending on the type of function provided
• Common development languages that exist, how applications are modelled and
implemented through patterns using frameworks
• Importance of application security and methods that exist to manage threats.
• The operational and delivery life cycle processes from inception, going over
release-, change-, configuration management to disposal.

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014

 5

Application Management and e-Business Module Agenda

Session Title Learning objectives Lecturer

1 Application To learn where Application management fits in the Business/IT environment. Pieter Dubois -
Management To decided on buy or build (sourcing strategies) and how this impacts your Amerant
Overview & orgaization. To learn different application development methods and their
Positioning appropriateness depending on the type of application.

2 Application Within the whole of the life cycle of developing an application, at each stage Anthony van
development life activities are performed both specific for that stage or generic but attuned to der Maren
cycle activities the stage. We use concepts from the first class and enrich that to create an CISSP, CISM,
end-to-end view up to deployment into production. CISA, Solvay
Brussels School
3 Application Applications aren’t developed in a vacuum either. They are the result of Herwig
Management interactions by many people. To guide these interactions a number of general Thyssens - Swift
Governance, concepts like Governance, Assurance, Risk, Quality and Auditing are used to
Assurance, Risk & ensure applications deliver what the organization needs and perform according
Audit to that need.

4 Application Applications don’t live on air, although they are more and more hosted in the Pieter Dubois
Infrastructure cloud. This module will present the basic technical building blocks and hosts of Amerant
Foundations application, as well as the concepts of abstraction through layering and
landscapes that are used to host application components.

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014

 6

Application Management and e-Business Module Agenda

Session Title Learning objectives Lecturer

5 Application Applications have to be developed in a way that it fits the business Toon Timbermont,
architectures problem to be solved. This session introduces application patterns that DATT
allows separation of concerns in a structured way so that they are
maintainable and performant.

6 Secure the Understand, manage and control application security risks. Sebastien
application layer Deleersnyder
CISSP, CISA, CISM,
Owasp
7 Application Overview of application development languages, the hierarchy, differences Jelle Gacoms,
development and similarities. Introduction to the main development platforms and Healthconnect
languages, used frameworks. Current evolutions, including mobile development
platforms and
patterns

8 Putting the Once an application is ready for deployment into production it needs to be Anthony van der
applications in transferred to IT Operations through Change & Release Management. Maren CISSP, CISM,
production Once in production, applications need to be maintained and finally CISA, Solvay
disposed of. Brussels School

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014

 7

M1 Module examination
• A multiple choice questionnaire, classroom based, for everyone taken on the
same day
– 2/4 – 18:00 – 20:00

• Based on course material and sessions

– One question, four possible answers and only one best answer
– Open Book

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014

 8

M1 Module Pre-readings and bibliography

• The following pre-readings are mandatory before attending the M1 module:
– None
• The following pre-readings are recommended before attending the M1 module:
– M-7 OWASP Top 10 for 2010 (download pdf from [Link] )
– Documentation that provides an overview:
• ASL-BISL ([Link] )
• CMMI ([Link]
• SCRUM ([Link] )

• The bibliography for the M1 module is:

– In appendix of each presentation

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014

 9

M1 Module Education Experience

• The best education experience is granted to the participants thanks to:
– The topics of the CISM and the CISA certification bringing insight on
• the secure application development
• the application development methodologies & architecture
• the application development lifecycle and governance
– Presented by experts in the field who share their real world experiences.
– Providing a wealth of opportunities for interaction
• The module will be most beneficial for the following participants profiles:
– CIO’s and CTO’s.
– Information System & Infrastructure Managers
– IT Service & Operations managers
– IT Project Managers
– IT –Security- Consultants and experts
– Developers
– IT Risk Managers & Internal Auditors
– Business representatives & IT Business Analysts

M1: Application Management & e-business - EXECUTIVE EDUCATION - 2014 27/01/2014