A Business Case For Open Source DAM

UK cabinet office minister, Francis Maude, hit the nail on the head in a statement released last week where he identified that ‘for too long, Government has wasted vast amounts on ineffective and duplicate IT systems‘.  While not everyone may agree with his politics, it is an observation that will no doubt resonate not only through the public sector but with many private organisations also.  In this new era of austerity, businesses must find new ways of cutting costs but not at the detriment of the new and innovative technologies that drive enterprise forward.  The question is, how?

In the UK, Government has proposed a two-tier approach to applying the brakes to heavy expenditure on unsuccessful ‘monolithic IT projects’, namely the adoption of open source and standards, coupled with a move to a cloud based infrastructure.  Via these steps, they are confident that they will be able to consolidate and streamline its sprawling IT estates, delivering better public services in the longer term.  The business case for open source software is not just confined to Government initiatives, however.  Numerous benefits can be reaped by businesses who switch away from proprietary models to newer open systems and standards.

A Business Case For Open Source: Greater Reliability, Quality and Freedom

Contrary to the fading misconception that open source software is forged by the sweaty palms of anarchists and adolescents, open source is fast becoming the next serious business model for software development and distribution.  At Daydream, we have always felt it reasonable to offer clients investing into our services open access to our source code – and we think we’ve built better products as a result.  Our decision to release FocusOPEN Digital Asset Manager under an Affero General Public Licence (AGPL) in 2010 was simply the next logical step in our enterprise product development strategy. Since then both FocusOPEN and its active, growing community have gone from strength to strength.

The advantages that the open source approach can bring businesses are profound.  First, better security and reliability are afforded via the power of mass peer review.  The more diverse the product community, the broader the product use, and the sturdier the technology as a consequence.  But we’ve also found that fresh and innovative approaches to open source system engineering and communal engagement can generate even greater value.  With the right platform appeal, an open source project can draw in engineers, analysis and consultants with high-level skills and expertise, who are willing to contribute to a system that is not only robust, but endlessly innovative.  Qualified peer review can therefore lead to software that is both reliable and highly suited for large-scale enterprise use.

Last, the crucial advantage for businesses is open access to the source code.  This fundamental difference in the business relationship means organisations can leverage existing resources to support and develop their software, without vendor constraint, should they choose to.  Open source licensing therefore lowers risk and can reduce ongoing costs for users, whilst also fostering a more mature relationship between vendors and their clients that inevitably leads to closer collaboration and greater frequency of new projects.  Open source is therefore open for business in our book.

Find out more about our FocusOPEN Digital Asset Manager Open Source Edition and our growing Developer Network community on our product website at http://www.digitalassetmanager.com.

FocusOPEN Public Stable Edition Released

Today, 22nd December, we officially launch the stable public open source edition of FocusOPEN (v 3.3.4) which can be downloaded free of charge from the FocusOPEN Digital Asset Manager product site: http://www.digitalassetmanager.com/

What we have been very surprised at is the large number of registrations from people wanting to download the deployment packages and/or source code.  After the initial launch we expected a brief surge from people interested to check out a .NET open source DAM system, but the numbers haven’t slowed down and we now have around 500 people who have signed up for an account (and quite a few more downloads).  The feedback we have received has been overwhelmingly positive and there is a clear demand for open source .NET DAM which has spurred us on to finalise the stable release and press ahead with new features and services.

The stable release has taken us a few months while we checked over the beta version and teased out the remaining issues.  In doing so, we also skipped over from 3.3.3 and went straight into 3.3.4.  As well as  general stabilisation, we also added a number of features that were either ports from the enterprise edition or completely new:

  • Linked assets support
  • Support for streaming servers ported to open source edition
  • Full handling of single brand organisations (in addition to the multi-brand capability that was already present)
  • Revised asset detail to include order history and separated data into tabs
  • Optimised text search

In 2011 we plan to open up our FocusOPEN developer programme along with a number of other initiatives and a major release early in the New Year.

Wikileaks & The Financial Crisis: Lessons For Managing Risk With Cloud Hosted DAM

Recently, I was a having a conversation with a partner in a professional services business Daydream has dealings with (although they are not a client of ours).  We discussed the Wikileaks disclosures where diplomatic cables were copied and released to embarrassment of various governments.  My associate explained that currently, they ran the backup for their practice overnight to tape and he or another partner took the cartridge from the previous night home with them to ensure they had an off-site backup.  This is a fairly common technique and I have encountered a number of SMEs who do the same.

Not long ago, my associate had a conversation with an IT consultant who had recommended they switch to a Cloud based backup facility which would automatically transfer the files off-site every night, avoiding the need for tapes and the need to physically transport them off-site.

They had quite seriously contemplated taking out the service, but after hearing about the Wikileaks disclosures, they decided to abandon this idea and stick to the tapes.  Why?  He and his colleagues determined that if a group of hackers were able to get around high security defences used to protect diplomatic cables then it would have to be quite easy for someone to break into a commodity Cloud service of the type they were being pushed to recommend.  Since their backups contain gigabytes of extremely sensitive client data and they had no way of telling how well protected the service really was apart from the vendor’s own claims, the perceived risk was unacceptably high for them.

There are some mitigating circumstances that weaken the validity of this as an argument to avoid using a Cloud service provider.  For a start, the Wikileaks diplomatic cables appear to have been leaked by an insider using some simple techniques that owe more to social engineering rather than advanced hacking.  Also, if you store tapes in your own home, unless they are held in a safe, there is still a risk of the data being stolen and sold on by an opportunistic house burglar – albeit one who would have to understand the potential value of a backup tape how to get the data off it.


Trust and Control Issues With Cloud Service Providers

For Daydream, Cloud hosting certainly has appeal and we do make use of it for client digital asset management implementations.  The Cloud offers seemingly limitless scalability, built-in redundancy (usually designed from the ground up so it works properly) and a charging model which is usage based and therefore highly cost efficient.  For Digital Asset Management it appears the perfect delivery platform.  Furthermore, being able to avoid all the hardware issues with hosting your own kit such as holding inventories of parts, redundant servers and constant monitoring for potential faults are massive benefits in themselves.

Like my associate, however, my enthusiasm is tempered with some doubts about whether a wholesale move completely into the Cloud is advisable.  The key issues are trust and control: trust because the Cloud requires you to put near absolute faith in the provider; control because you implicitly cede management of the security and integrity of the data to the Cloud provider and more or less have to just hope they won’t be compromised.

The description ‘Cloud’ is unusually apt for an IT concept as it does hint at the nebulous and opaque nature of the service offer – which is both its strength and weakness. As I write, there has been no serious business failure of a significant Cloud provider that I am aware of.  This has to be question of ‘when’ rather than ‘if’ though.  While it seems unlikely that any of the major players are in imminent danger any time soon (quite the opposite), the recent financial crisis has also demonstrated how rapidly apparently wealthy corporations can be reduced to bankruptcy because of some poor senior management decision making that was covered up until it was far too late to rectify.  So (in my mind at least) size and highly recognisable branding are not necessarily any reliable indicators of stability or propriety.

As well as the possibility of business failure, there is the ongoing risk they may merge or be sold to other providers.  They may decide to hike their prices and remove smaller or less profitable accounts.  Most importantly, what do they actually do with your data and how can they protect it in practical terms?

All of the Cloud vendors will pinpoint their best practice guidelines and possibly even IT audits that prove their stability and cross-border compliance with data protection legislation in a variety of jurisdictions, however, the financial crisis has demonstrated that it is unwise to base your risk analysis solely on the findings of a third party agency or auditor alone.

Balancing Technology, Risk and Cost When Considering Cloud Services

I would stress I do not want to write a FUD piece about how risky Cloud hosting is and that we should all invest in mass redundant storage devices and private data centres etc, I do believe the Cloud is a great concept with a lot of worthwhile benefits that make it highly suited to Digital Asset Management requirements, however, like any kind of IT investment, risk management and a critical evaluation of the pitfalls and how to avoid them is absolutely crucial.

When assessing with clients about how best to handle their DAM hosting needs, we consider three main factors: available technology, risk and cost.  These each have to be balanced to ensure the provision is appropriate, safe and affordable.  The Cloud offers a highly cost effective method to bypass some of the scalability problems associated with conventional hosting and also help reduce risks from equipment failure – but only if used in conjunction with other techniques and you take some direct personal responsibility for managing the risks inherent in each of your choices.

Conclusion

IT (and Digital Asset Management by association) is often characterised as being a ‘fashion’ oriented business where bursts of hype and over-exuberance for a new fad or technology mask some inherent limitations that have yet to be fully revealed.  It strikes me that DAM consultants and vendors who strongly associate themselves with a Cloud based hosting delivery platform as the definitive answer to redundancy, data security and scalability problems are setting themselves up for a fall and a potential PR disaster when the inevitable happens and one of these services is badly compromised or becomes a commercial failure.

The ‘eggs in one basket’ argument is logical, however, the benefits of migrating everything to the Cloud are highly compelling and appear to offer their own form of common sense, i.e. that they offer simplicity and low maintenance.  However, they come with a fairly significant premium in the form of higher risk if you rely upon them exclusively.  While I won’t be asking my colleagues to take tapes home with them like my associate who I referred to at the top of the article, we will be mitigating our risks by not relying on a single vendor, retaining existing conventionally hosted external servers and arranging our own methods of protecting data.

Digital Asset Micromanagement

We published a new article today entitled: The Seven Deadly Sins of Digital Asset Micromanagement which is all about the use and abuse of permissions (and to a lesser extent workflow) in DAM systems.  This is a follow up to our earlier article on the Four Cornerstones of Digital Asset Management.

This is a distillation of the experiences we’ve had over the years dealing with developing DAM solutions for larger clients where the preferred method of risk management is often to throw the permissions “kitchen sink” at the problem and essentially render it very difficult for many users to access assets.  While this tactic can sometimes help reduce the risk of damaging outcomes (e.g. litigation) our experience is that it just keeps legitimate users off the system and harms ROI as a result.

I think the key point is the final one: that it’s essential for both managers and DAM vendors to listen to what users are saying and try to find methods of keeping the legal and IT departments happy while still keeping the focus on why the system was built to begin with.  The full article is here.

Updated Video DAM Report

Since we first started offering Video DAM to our “regular” (i.e. enterprise) clients about 5 years ago, online video has taken off in a big way – in no small part thanks to YouTube and other consumer oriented video platforms.  However, there have been a number of seismic shifts in the video technology landscape, most notably, the ongoing transition from SD to HD, the challenge to Flash’s dominance by HTML5 and the ascendancy of H.264.

So, we have made some significant alterations to our existing whitepaper Video Digital Asset Management: 12 Crucial Points to try and cover some of this.  I must say, however, that while the formats and technologies move around, the general principles about needing to be realistic and pragmatic about what is actually (rather than theoretically) possible on your typical corporate network still remain and this part of the paper didn’t require a lot of updating.

The report is free of charge, you can place a request to get it sent to you from our reports area.

The Inconvenient Truths of Enterprise Digital Asset Management

Last month, an article on CMSWatch.com by Theresa Regli discussed the difficulty of assessing how a DAM system will perform on a typical corporate laptop as compared with what the vendor uses to demonstrate their product at a sales pitch.  In particular the thorny subject of older browsers and devices that don’t support Flash (e.g. iPads and iPhones) was raised.

This prompted me to think about a few more of the inconvenient truths (to borrow a phrase) of delivering web based enterprise DAM systems and the extent to which a typical corporate IT environment can thwart and constrain the scope of what is feasible.  Below I outline six examples that the project implementation team here at Daydream run up against on almost every job we are involved in.  I also explain why I believe that if the DAM software industry does not come to terms with them that they could have a negative impact on demand across the whole sector.

Truth #1: Work with the client’s IT environment or don’t work at all

In larger businesses with centralised corporate IT divisions, making minor changes to a typical browser or desktop setup for significant groups of users involves an epic voyage of change request forms, risk management meetings, deployment and back-out plans before they even get close to implementation.  The IT department’s priority is keeping email coming in, viruses out and achieving a general level of “just don’t touch it” stability.  We have learned that it is best to build DAM solutions that will work with no internal changes required for either administrators or regular users – otherwise expect a long, arduous and frustrating wait to get any kind of solution deployed and into active use.

Truth #2:  Lots of people will still be using IE6

The subject of IE6 causes considerable anguish for designers, developers and vendor sales reps that have to deliver demos on one of their prospective client’s PCs.  Despite the numerous protests about IE6, it’s not going away.  Microsoft are offering support for it until 2014 because they know that while the web development community might hate it, the corporate IT departments who constitute their largest customer base regard upgrading it as a lower priority job that can be deferred until they finally migrate away from Windows XP.  Despite serious security flaws in IE6, the pain of upgrading thousands of desktops is still not sufficient to convince IT departments to bring forward technology refresh programmes.  Add in a recession with a squeeze on IT budgets and the wider picture of why we’re still supporting a browser from 2001 become clearer.  Daydream implements most client editions of our FocusOPEN Digital Asset Manager to work with IE6.  We fully expect to still be dealing with this browser until at least 2012 and the best we can hope is that most corporate IT departments will decide to skip IE7 and go direct to IE8.

Truth #3: IT will want to host it

Around 10 years ago when we first started installing web based DAM systems, most corporate IT departments did not like the idea of hosting any kind of web application and were more than happy to let us take care of that for them.  As far as they were concerned, they were merely ‘websites’ and not even core business ones at that.  Fast forward to 2010, apply some bad press about ‘Application Service Providers’ (what people now call SaaS), data protection concerns, stories about vendor mega-mergers leaving customers in the lurch, and add in the fact that many IT departments have sunk small fortunes into their own data centres and you have the current scenario.  If the IT department is involved, they often want to host the DAM system internally on their kit and using technologies they can support if the supplier bites the dust.  Where this can get tricky is if the vendor has developed using non-corporate friendly toolset like Ruby, PHP, Plone, Python, ColdFusion etc.  Although we at Daydream don’t have any objection to these technologies (we use many of them for internal systems ourselves), we have learned to use widely accepted enterprise technologies for enterprise DAM to avoid problems when the time comes to deploy to the client’s hosting infrastructure.  As people used to say about IBM, “no one got fired for buying Microsoft” and that is another inconvenient truth of enterprise applications.  Exempted from this are those vendors who chose to implement using that other enterprise stalwart: Java, however, they just have to get used to the inconveniently high cost of hiring anyone half-decent enough to code using it.

Truth #4: Corporate networks are not ready to handle HD content

Time was when people would do any serious internet surfing at work because their home internet connection would be a painfully slow 56k modem.  These days, enterprise connectivity has not kept pace with demand for web and internet services with the result that available bandwidth on many corporate LANs has decreased significantly to the extent that ‘traffic shaping’ and all kinds of other clever devices designed to throttle usage are all too common.  Meanwhile, most user’s home connections are DSL services offering megabits of bandwidth for a monthly cost equivalent to the price of a couple of cinema tickets.

In demanding scenarios such as delivering video, large print media etc. many corporate connections will struggle to cope.  Those slick HD videos of the client’s latest TV commercial being smoothly streamed from the sales guy’s laptop can often translate into a jerky Dadaist farce when viewed on a corporate network.  The inconvenient truth of many enterprise DAM scenarios is that their corporate network doesn’t live up to the performance employees may have grown used to  – especially with bandwidth heavy content like video or large print files.  Before promising to provide these facilities for corporate clients, Daydream consult with IT department to find out about the bandwidth situation and we try to manage the expectations of what can realistically be achieved.

Truth #5: Enterprise IT security products hate AJAX and Flash

IT departments are often keen on a plethora of firewalls, proxy servers, hardware security appliances, packet inspectors and a range of other security paraphernalia (possibly to help deal with all those IE6 security holes).  Whether the DAM system is hosted internally or externally, these devices can frequently cause Flash and AJAX to fail mysteriously and under obscure combinations of circumstances that are difficult to reproduce.

We have learned that it’s advisable to keep the clever client-side scripting or Flash/Flex to a safe minimum and test it very early to avoid the next inconvenient truth that proxy servers, firewalls and other security devices will frequently disable client-side functionality and leave the users with interfaces that are less functional than basic HTML.  I’m not saying that AJAX or Flash should never be used, at Daydream we have taken advantage of both technologies to help with a range of requirements which would have been very difficult to deliver in any other way.  However, we have drawn up a laundry list of tests that anything we implement in them has to survive before we risk using AJAX/Flash in a production environment.  We also try to avoid gratuitous use of them where they do not add anything that cannot be achieved via conventional techniques.

The Final Truth: It’s one thing to build applications, it’s quite another to deploy them

A former senior colleague often used to remind myself and my fellow developers that it’s one thing to build applications, it’s quite another to deploy them.  Over the intervening years I have come to more fully appreciate the significance of this inconvenient truth and what it means when it comes to delivering robust software that will work properly in enterprise IT scenarios.

There is a danger currently that DAM vendors are getting into a features arms race to provide points of differentiation and a wow factor that will help swing attention their way in an increasingly crowded market.  All too many are throwing ill-conceived AJAX or Flash based interfaces into environments where they may fail spectacularly.  The problems often seem to be glossed over by keeping quiet about the potential pitfalls of pushing the envelope and using technologies or techniques that have not been properly tested outside the developer’s lab.

Currently, the DAM market is riding something of a wave of high demand that has bucked the recessionary trend despite an era of declining budgets.  Most vendors with a serviceable product and visible presence have seen their customer acquisition rates rise as a result.  To sustain interest and obtain a foothold as an integral enterprise solution (in the same manner as say HR or Accounts/Finance applications), the DAM software industry needs to get more realistic and honest about how our technologies are going to be used by a typical enterprise customer and engineer for greater robustness and reliability.

If this does not happen we collectively run the risk of our class of applications developing a reputation for hype, riskiness, low reliability and high rates of user abandonment.  This will encourage prospective clients think twice about whether our products can offer long-term ROI and if a better strategy may be to consolidate requirements into do a bit of everything – but none of it very well systems which are perceived as safe, reliable and corporate friendly.  This will be the ultimate inconvenient truth and one I hope we do not have to experience.

Open Source Digital Asset Management Software: Why Freedom Doesn’t Mean Free

A number of open source DAM solutions are now being offered across all platforms now by a variety of vendors.  Daydream has always used an open source model for our FocusOPEN Digital Asset Manager and in general this is a positive development.

Several commentators, however, have raised concerns about the nature of the solutions provided and how much support and assistance users can realistically expect to obtain from taking the open source route.  In particular, the measurement of ROI when taking into consideration the costs of support and implementation services is raised as a negative point about open source DAM.  These discussions highlight some popular misconceptions about the nature of open source software, mainly because they tend to be free of licence charges.

In simple terms, open source guarantees nothing other than that access to the source code will not be restricted – it does not necessarily mean that there is no cost involved or that there is an obligation on the part of the author to distribute copies of the code to anyone who asks for it.

The GPL is one of the more common open source licences in use and allows software authors and/or distributors to charge a fee for supplying open source software.  Also, they can refuse to distribute copies of the code publicly.  The fact that many open source software authors agree to provide the source code for free via downloadable links on public websites is more of a marketing strategy or personal choice than a stipulated requirement of the licence.

The metaphors used to explain open source do not help with dispelling these myths.   One example often used is the self service supermarket checkout concept.  There are others, but see these separate articles by Jeff Atwood and Henrik de Gyor for examples (the latter specifically relates to DAM).  Although both are interesting observations and make some valid points, they are arguably inaccurate when considering open source software.  The premise of both articles is that open source software resembles a ‘self-service’ supermarket checkout where users can avoid the time cost of checking out via a human operated till with a lengthy queue of shoppers, however, they are forced to deal with rudimentary service related issues that would be handled for them in the human operated checkout.

I would argue that this metaphor is not really valid because supermarket customers are most certainly charged for the products they wish to procure (that is evident by the receipt provided whichever checkout is used).  Customers are invited to discount the time required to use a managed checkout service in return for taking on this work themselves.  In software terms, this is like being charged licence fees for your product but then having to pay for your own learning and acquisition of skills to complete real world tasks with it. To me, this characterises the closed source packaged, non-bespoke software experience most people are used to already – they are expected to handle the service element of the software implementation themselves and work out how to use it on their own.

So how should prospective buyers compare open source digital asset management systems against closed source ones?  To quote from Richard Stallman, an open source pioneer, “you should think of free as in free speech, not as in free beer.”

In larger companies, a preference for open source is usually due to risk management factors rather than any kind of evangelical or altruistic preferences.  In this sense, the open source licence is an alternative to a software escrow agreement and side-steps the legal complexity and expense incurred by both vendor and customer when drafting these agreements.

The second key benefit of open source in an enterprise context is the bizarre fashion in which some closed source software vendors use an arbitrary ‘per user’ licence model for web based solutions when the marginal cost has fallen to virtually nothing (or at least does not move in neat straight line).  Again, the open source model is effective at removing these pricing inefficiencies – for enterprise software at least.

An open source licence allows both buyer and vendor to focus more clearly on services and the actual work of delivery.  For enterprise software, it is a more honest and professional way to create and consume value.  These are the crucial factors that buyers need to consider when buying a enterprise DAM solution for a large organisation.  The ‘free’ cost of one product licence versus another is a dangerous distraction from considering the overall ROI.

Currently, Daydream has elected not to offer publicly available distributions of FocusOPEN (although we do not rule out doing so in the future).  As I have illustrated, this does not invalidate our open source credentials.  Having an open source solution without a licence cost also does not leave our clients without support or the additional services they need to implement a large scale DAM effectively.  I would argue it places greater emphasis on the services element of software implementation such as user support, training and hosting.  These have been and will continue to be the more significant factors for anyone implementing enterprise digital asset management.

Brand Asset Management: Two Definitions

(You say tomato…)

It seems that the term ‘brand asset management’ has been adopted by a two distinct practitioner camps in recent years, leading to some confusion of the term’s definition, or more importantly, to whom its problems should be tasked.  Companies in both the technology and creative industries release press on the subject and all have their respective brand asset management solutions.

Essentially, the broader term appears to belong to the academics of brand strategy, most notably Scott Davis in his book “Brand Asset Management: Driving Profitable Growth Through Your Brands” (The Jossey-Bass Business & Management Series, 2002). In this realm, brand is recognised as amongst a firm’s most valuable assets, which requires careful management in order to maximise brand value and draw consumers in.

However, the term brand asset management has also found its place in the terminology of software engineering companies, to refer more specifically to a range of Digital Asset Management features for ensuring brand compliance throughout marcomms production and delivery.   In this definition, technologists respond to the very practical need identified by Davis to ensure that “all communications coming from your company deliver a consistent message to consumers…must reflect the brand value, persona and vision.”

To effect a cohesive brand strategy across a modular organisation, brand managers must maintain some control over marketing communications at the point of production and an ongoing dialogue with those responsible for brand execution, namely designers, copy writers and producers, both staff and external agencies.