9AAD103594 - User Manual Gate Model For IS Projects Ver5 - 4
9AAD103594 - User Manual Gate Model For IS Projects Ver5 - 4
Table of Contents
1. Objective ............................................................................................................................................................... 2
1.1. Purpose of this document .........................................................................................................................................2
1.2. References.....................................................................................................................................................................2
2 0 2 1- 0 4- 2 8 1/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
1. Objective
The Corporate Policy CFIS-CP-03 Gate Model for IS Projects is the procedure for IS investment control.
This document, the User Manual, provides the details in the form of Gate checklists that must be used dur-
ing the execution of IS projects within the scope of the Corporate Regulation. These checklists form the ba-
sis of the project governance procedures to be followed.
This document does not provide guidance on project management methodology and controls.
1.2. References
• This document must be read in conjunction with the Corporate Policy CFIS-CP-03 Gate Model for
IS Projects which can be found on the IS Governance Portal: https://abb.sharepoint.com/sites/IS-
Governance/SitePages/Welcome.aspx
• For Disaster Recovery Requirements (mandatory for all mission critical apps), check the Disaster
Recovery Intranet site.
A Gate is a decision point in a project where the achieved results are evaluated from a business and strate-
gic point of view and the Business Case is reassessed to determine whether to continue the project or not.
2 0 2 1- 0 4- 2 8 2 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
The objective of Gate Meetings is to ensure the investment is still viable and that the management and pro-
ject manager are aligned to the objectives for the next phase and overall project goals. The Gate Meeting is
to confirm - not to analyze. The Gate Meeting is called by the Sponsor and is recommended, but not manda-
tory. The Sponsor may choose to approve passing of the gate without holding a Gate Meeting.
Any analysis and assessments should be done prior to the Gate. Assessments are done to ensure that all
relevant information is available to enable a decision to be made at the Gate.
3.1. Description
Figure 2: Project phases and gates for projects following a Waterfall approach
o Gate 1
o Gate 3
o Gate 5
o Gate 6
• Note: Although there are fewer gates in the Simple Gate Model, all project management processes
and controls are still applicable.
2 0 2 1- 0 4- 2 8 3/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
• In such instances written approval to use the Simple Gate Model must be obtained from
o The Project Sponsor and/or senior management of the Business Unit; and
3.3. Gate Checklists for projects following a Waterfall Approach – Full Gate Model
2 0 2 1- 0 4- 2 8 4/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ All Gate meeting participants clearly iden- ❑ Preliminary business case is updated, and all
tified and informed about their roles stakeholders identified
❑ Sponsor is nominated with appropriate ❑ Buy-in and commitment from business manage-
authority for investments and governance ment/representatives established
of the project
❑ Project self-assessment done, using the standard
❑ Sponsor is trained on ABB Gate Model checklists
❑ Current situation analyzed (process, in- ❑ ICoFR Relevancy Preliminary Assessment com-
formation system and skills) and business pleted and sent for review and Final Decision
needs identified For ICoFR relevant projects: appointed Internal
❑ Sponsor is briefed on the project objec- Control Gate Assessor approves passing this
Gate
tives, timeline and budget (typically a pro-
ject charter)
❑ Risk factors identified and judged
❑ Business opportunity analyzed to deter- ❑ Organization can afford the investment in the next
mine its feasibility and business value phase and the expected investment for the whole
❑ Involvement of other organizations has project, including operational cost
been discussed and other potential users
identified
❑ Skilled resources required for the next phase iden-
tified and committed by all participating units
❑ Project costs measurement is in place ❑ Project time, cost and scope are updated in the
project register (e.g. iPPM globally)
❑ Sponsor approves passing this gate and proceed-
ing with the project?
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 5/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Project reference team is nominated, if ❑ For ICoFR relevant projects: appointed Internal
needed for this project Control Gate Assessor approves passing this
❑ Scope analyzed and described regard- Gate
ing users, in terms of how many, and the
distribution across countries and busi-
❑ Existing solutions in ABB reviewed together with
correct IS experts
ness. If also external users are expected
consequences are considered. ❑ Project costs measurement is in place
❑ Scope analyzed and described regard- ❑ Business case is updated, and all stakeholders
ing information, if delivered service will identified, economic benefits and costs quantified
contain information or migrate infor- ❑ Buy-in and commitment from business manage-
mation from legacy systems. Conse- ment/representatives established
quences if delivered services will contain
any sensitive information considered. ❑ Project self-assessment done, using the standard
checklists
❑ Scope analyzed and described regard- ❑ Risk factors identified and formally recorded and
ing integration, if delivered services re-
stored
quire integration to global or local pro-
cesses and systems. ❑ Organization can afford the investment in the next
phase and the expected investment for the whole
❑ Scope analyzed and described regard- project, including operational cost
ing what devices the delivered service
will be available for. ❑ Skilled resources required for the next phase iden-
tified and committed by all participating units
❑ Scope analyzed and described if this
project or line organization will be re- ❑ Project time, cost and scope are updated in the
sponsible for decommissioning of legacy project register (e.g. iPPM globally)
applications and infrastructure. Conclu-
sion confirmed with relevant IS organi- ❑ Sponsor approves passing this gate and proceed-
ing with the project?
zation(s).
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 6 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
2 0 2 1- 0 4- 2 8 7/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Possible pilot (users, timing, scope) is ❑ Risk factors identified and judged
confirmed with line management of pilot
organization
❑ Interactions with other projects been re-assessed
and related risks considered
❑ Hosting locations for operations and ❑ Organization can afford the investment in the next
support are identified phase and the expected investment for the whole
❑ Design impact considered in the busi- project, including operational cost
ness case update
❑ Skilled resources required for the next phase iden-
❑ User costs for implementation and oper- tified and committed by all participating units
ations are understood and accepted by
stakeholders
❑ Project time, cost and scope are updated in the
project register (e.g. iPPM globally)
❑ Actions been defined to mitigate the ❑ Sponsor approves passing this gate and proceed-
risks/resolve the issues and the related ing with the project?
negative cash impacts have been con-
sidered in the Business Case
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 8 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ The tests are executed according to test ❑ IS Compliance and Disaster Recovery
(If not concluded in earlier Gates)
plan, and results are acceptable
❑ High level concepts for implementation • Infosec Risk assessment completed and approved
strategy, operations and support re- • GDPR Record of Processing completed and approved
quirements have been worked out • MasterData assessment completed and approved
❑ User manuals & user training material • Trade compliance assessment completed and approved
are ready
• Individual DR plan developed and in place
❑ Data sources are populated ❑ For ICoFR relevant projects: appointed Internal
❑ Implementation and support strategy de- Control Gate Assessor approves passing this
Gate
cided and reviewed with stakeholders
and with IS infrastructure
❑ User costs for implementation and operations are
❑ Operation & maintenance material is understood and accepted by stakeholders
ready
❑ Business case is updated, and all stakeholders in-
❑ Individual DR plan developed and in formed, economic benefits and costs quantified
place
❑ Buy-in and commitment from business manage-
❑ Validation test members are ready for ment/representatives maintained
participation in the Validation Phase
❑ Project self-assessment done, using the standard
❑ Infrastructure Service Level Agreements checklists
are defined, and costs estimated
❑ Risk factors identified and judged
❑ Roll-back plan in case Gate 5 is not ❑ Interactions with other projects been re-assessed
passed (e.g. if validation fails), is done and related risks considered
❑ Organization can afford the investment in the next
phase and the expected investment for the whole
project, including operational cost
❑ Skilled resources required for the next phase iden-
tified and committed by all participating units
❑ Project time, cost and scope are updated in the
project register (e.g. iPPM globally)
❑ Sponsor approves passing this gate and proceed-
ing with the project?
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 9 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
2 0 2 1- 0 4- 2 8 10 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Experiences collected and actions de- ❑ Risk factors identified and judged
fined for continuous improvement
❑ Organization can afford the investment in the next
❑ Feedback from users regarding ideas for phase and the expected investment for the whole
project, including operational cost
improvements and higher benefit are
captured
❑ Project Manager is committed as responsible until
❑ IS Compliance and Disaster Recovery project is closed at Gate 7
• No outstanding IS Compliance topics ❑ Project time, cost and scope are updated in the
•tiesDRdelivered
communication plan and onboarding activi- project register (e.g. iPPM globally)
to relevant operational teams and
stakeholders ❑ Sponsor approves passing this gate and hand-
over this project to operations?
•been
Risk to the business associated with disaster has
mitigated through the implementation and
testing of DR solution (RTO and RPO met)
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 11 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Experiences collected, incl. actual ben- ❑ For ICoFR relevant projects: appointed Internal
efits and compared to the business Control Gate Assessor approves passing this
case Gate
❑ Operations and support processes are ❑ Project self-assessment done, using the standard
working well checklists
❑ All stakeholders, including the steering ❑ Project time, cost and scope are updated in the
committee, are fully briefed on project project register (e.g. iPPM globally)
closure
❑ Sponsor approves passing this gate and closing
the project?
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 1 2 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
3.4. Gate Checklists for projects following a Waterfall Approach – Simple Gate Model
2 0 2 1- 0 4- 2 8 13 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Design is in line with the agreed scope, ❑ IS Compliance and Disaster Recovery
costs, risk tolerances, and requirements • Infosec Risk assessment completed and approved
specifications. Solution accepted by
sponsor and stakeholders • GDPR Record of Processing completed and approved
• MasterData assessment completed and approved
❑ IS Architecture assessment of the de- • Trade compliance assessment completed and approved
sign is done, if required
❑ Interactions with other projects has been • Review of any Disaster Recovery requirements completed
assessed and related risks considered ❑ For ICoFR relevant projects: appointed Internal
Control Gate Assessor approves passing this
❑ Test plan drafted, describing the test ap- Gate
proach and identifying the sequence of
tests, test criteria and test responsible ❑ Risk factors identified and judged
❑ Hosting locations for operations and ❑ Project time, cost and scope are updated in the
support are identified project register (e.g. iPPM globally)
❑ Vendors and partners are selected, if re- ❑ Sponsor approves passing this gate and proceed-
ing with the project?
quired. Sourcing process compliance
ensured for all project procurements
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 14 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Validation tests (e.g. pilot or User Ac- ❑ IS Compliance and Disaster Recovery
(If not concluded in earlier Gates)
ceptance Test) are executed according
to test plan, against pre-approved ac- • Infosec Risk assessment completed and approved
ceptance criteria, and the results are ac-
ceptable
• GDPR Record of Processing completed and approved
• MasterData assessment completed and approved
❑ Implementation readiness assessed and • Trade compliance assessment completed and approved
approved
• Individual DR plan tested and signed off
❑ Implementation plan is realistic regard- ❑ For ICoFR relevant projects: appointed Internal
ing time for user training, communication
materials readiness, migration from old Control Gate Assessor approves passing this
solutions, proper change management Gate
activities and implementation resources
reservation
❑ Operations and support are in place
❑ Project time, cost and scope are updated in the
❑ Risk factors identified and judged project register (e.g. iPPM globally)
❑ Sponsor approves passing this gate and proceed-
ing with the project?
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 15 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
2 0 2 1- 0 4- 2 8 16 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Risk factors identified and judged ❑ Project Manager is committed as responsible until pro-
ject is closed after final Benefits Assessment
IS Compliance and Disaster Recovery
❑ AppRUN engaged and checklist for AppRUN com-
❑ ICoFR Relevancy Preliminary Assessment com- pleted?
pleted and sent for review and Final Decision
For ICoFR relevant projects: appointed Internal Control
❑ Sponsor is nominated with appropriate authority for
investments and governance of the project
Gate Assessor approves passing this Gate
❑ Sponsor is trained on ABB Agile Governance Model
❑ Infosec Risk assessment initiated ❑ Current Situation analyzed (process, information sys-
❑ GDPR Record of Processing created and initiated tem and skills) and business needs identified
❑ MasterData assessment initiated ❑ Sponsor is briefed on the project objectives, timeline
❑ Trade compliance assessment initiated and budget (typically a project charter).
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 17 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Infosec Risk assessment completed and approved ❑ Existing solutions in ABB reviewed together with cor-
rect IS experts
❑ GDPR Record of Processing completed and approved ❑ Buy-in and commitment from business manage-
❑ MasterData assessment completed and approved ment/representatives established for the project and
❑ Trade
proved
compliance assessment completed and ap- the Agile approach of Increments (Incremental delivery,
Iterative delivery in Sprints).
❑ Review of any Disaster Recovery requirements has
been completed
❑ Needs for vendor selection and contract negotiation
work have been addressed to sourcing manager
Project Requirements/Scope
❑ Any new involvement of other organizations has been
❑ Product Backlog (Artifact to hold Requirements) up-
dated with High-Level, Detailed Functional and Non-
discussed and additional potential users identified"
Infrastructure & Deployment Strategy
Functional requirements and Prioritized.
❑ Hosting locations for operations and support are iden-
❑ High level Release plan available tified
Design
❑ Infrastructure Service Level Agreements are defined,
❑ High level design in place considering critical design and costs estimated
issues and agreed scope
❑ High level concepts for implementation strategy, oper-
❑ IS Architecture assessment of the design is done ations and support requirements have been worked
out
❑ Definition of Done (DoD) defined at the project level
(i.e. ABB IS - architecture, standards, security, infor- ❑ Implementation and support strategy decided and re-
viewed with stakeholders and with IS infrastructure?
mation security and integration)
❑ AppRUN
pleted?
engaged and checklist for AppRUN com-
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 18 / 2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
Cost Quality
❑ Project time, cost and scope are reviewed and up-
dated in the project register (e.g. iPPM globally) ❑ Technical Debt
❑ Project costs measurement updated (if required) ❑ Defect Count
❑ Updated User costs (if required) for implementation ❑ Maintainability Index
and operations are understood and accepted by ❑ Test Coverage
stakeholders ❑ Unit Test
❑ Functional Test
Risk
❑ Infosec Risk assessment reverified and approved ❑ High level concepts for implementation strategy, oper-
❑ GDPR Record of Processing reverified and approved ations and support requirements have been reviewed
and updated"
❑ MasterData assessment reverified and approved ❑ Implementation and support strategy reviewed with
❑ Trade
proved
compliance assessment reverified and ap-
stakeholders and with IS infrastructure
❑ Individual DR plan developed and in place ❑ AppRUN engaged and checklist for AppRUN completed
Team & Roles
Design
❑ Scrum Team intact for the Increment
❑ Definition of Done (DoD) refined at the project level
❑ Sponsor approves passing the increment and proceed-
ing with next increment?
(i.e. ABB IS - architecture, standards, security, infor-
mation security and integration) with the learnings ❑ Sourcing manager has been involved when negotiating
with vendors, sourcing process compliance ensured for
from Sprint/Increment retrospective.
all project procurements
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 19/2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
project including operational cost ❑ Participating organizations are committed to the De-
ployment plan, both from cost and resource aspect
❑ User costs for implementation and operations are un-
derstood and accepted by stakeholders ❑ Service owner (or process manager or product man-
ager) is nominated and ready to participate in imple-
mentation
Risk
Sign Off
2 0 2 1- 0 4- 2 8 2 0 /2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
❑ Experiences, lessons learned collected and actions ❑ Global application register is updated, if relevant.
defined for continuous improvement ❑ Operations and support processes are working well
❑ Operational performance/cost, has been reviewed
and potential improvements identified
❑ All stakeholders, including the Project Governance
Committee, are fully briefed on the benefits of incre-
❑ Actual level of usage and benefits have been com- mental deployment
pared to the usage forecast in the business case ❑ Sponsor approves passing this governance and pro-
ceeding with the next increment
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
❑ Experiences, lessons learned collected and actions ❑ All stakeholders, including the Project Governance
Committee, are fully briefed on the benefits of incre-
defined for continuous improvement
mental deployment
❑ Operational performance/cost, has been reviewed
and potential improvements identified ❑ All stakeholders, including the Project Governance
Committee, are fully briefed on Project Closure after Fi-
❑ Actual level of usage and benefits have been com-
pared to the usage forecast in the business case
nal Benefit Assessments
❑ Global application register is updated, if relevant. ❑ Sponsor approves passing this governance,
suspending further increments and closing the project
❑ Operations and support processes are working well after Final Benefits Assessment
Sign Off
Project Title: Project ID: Date:
Remarks:
Project Manager: Project Sponsor:
2 0 2 1- 0 4- 2 8 2 1/ 2 2
U SE R M A N UA L - A B B G ATE M O D EL FO R I S P R OJ E CTS
5. Revision history
Revision Approved by Date Revision notes
E 17/10/2019 Don Pillay: Streamlined and updated of sections 1,2
(Version 5) & 3; New guidelines on Large and Simple Gate
Model for Waterfall projects; Checklists for Simple
gate Model and Agile projects; Added content on IS
Compliance topics and Disaster Recovery to check-
lists; Updated to version 5 due to major revision
(previous version 4); Updated the format and con-
tent to new corporate guidelines.
Version 5.1 04/02/2020 Don Pillay: Corrected amount in section 3.2.1 ($
100,000)
Version 5.2 06/02/2020 Reference update to CRIS-03 Gate Model for IS
Projects
Version 5.3 29/04/2020 Szymon Zemski: “Large Gate Model” renamed to
“Full Gate Model”. Updated the Gate checklists (Full,
Simple, Agile), aligning a content on ICoFR assess-
ment with ARIC methodology and checklists.
Par. 3.2.1 / 3.2.2: changed ‘capital expenditure’ to ‘IS
investments’. Par. 4.1.6.: corrected description of
this phase and simplified a set of checkboxes
(Sponsor’s checkboxes have been merged).
Version 5.4 26/04/2021 Don Pillay: Project Self-Assessment Checklist for
Full Gate Model has been updated. It has a new
hyperlink (URL). Previous version (called iPPM
Gate Advisor) is no longer valid and has been re-
moved.
2 0 2 1- 0 4- 2 8 2 2 /2 2