CIO interview: David Allison, global head of IT, First Quantum Minerals

Creating a reliable network

Allison says his conversations with mine bosses showed it was clear that what they wanted above all else was a reliable network. It wasn’t unusual, particularly in Zambia, for the firm’s workers to suffer daily network outages, he says.

After conversations with internal business colleagues and external IT leadership peers, Allison decided to work with Paris-based consultancy Wavestone. “They knew all about African networking and were exactly the kind of organisation I was looking for,” he says.

“I outsourced the network design and negotiation process. We went through a full tendering exercise with suppliers in Africa and we went with a Namibian communications company called Paratus that’s a business-focused network provider.”

Paratus established two separate multi-protocol label switching (MPLS) networks, and a software-defined wide area network (SD-WAN) in Zambia. The new network provision has ended outages, boosted performance and allowed the business to think about novel use cases that would previously have been unimaginable.

“Now they’re starting to be able to do things like virtual truck-driver monitoring,” he says. “That’s really important because they can check driver performance in real time and can see if someone’s getting sleepy or erratic, which means higher standards of safety and performance.”

Making the most of cloud

That move into real-time data analysis is an example of how First Quantum is beginning to embrace the cloud. The disparate geographical organisation of the business meant it was previously tough to get a consensus on how IT should be implemented.

Allison says he pointed out to stakeholders at an early stage of his conversations after joining the firm that they needed a network that would allow for future expansion into the cloud. The high-performance level of the network and the ability to stand up novel use cases, such as truck-driver monitoring, means even those who might previously have been wary of the cloud are beginning to see that a move to on-demand IT is not only beneficial, but inevitable.

“We’ll be able to do much more in the cloud going forward, simply because the network reliability is there,” he says. “The business is rapidly moving towards cloud adoption because of that network reliability. That’s exciting because we’ve proved it can be done – you can run a reliable network in Africa.”

Allison adds: “We’ve just done our first cloud backup – that’s the heavy lifting of a terabyte of data a night into the cloud, which gives us disaster recovery capability way in excess of what we’ve been able to have before.”

Although First Quantum is now doing things on-demand that were previously unachievable, the firm was already using cloud-based business applications before Allison’s arrival. The company had signed up to an enterprise agreement with Microsoft but wasn’t making full use of its applications and services, such as Azure and Office 365.

Allison was keen to sweat Quantum’s existing cloud-based technology assets. He let the previous agreement expire and is now saving a lot of money by paying for cloud services as required.

“The next big thing is going to be the full Office 365 roll-out, but as a hybrid model, so that each business has got the choice,” he says.

“All our corporate centres will go to 365 and I’m already ramping up Azure for lots of things. OneDrive is there for people. Providing further benefits from these services is all about putting in place the additional layers of security, so we can start to have integrated cloud services.”

Securing enterprise data

Allison has already dedicated significant effort to security. To tackle the risk of phishing and data leakages, the firm has implemented a new security strategy, which has included appointing ex-William Hill security head Steve Collins as chief information security officer.

First Quantum now has a dedicated security department, with a security operations centre in Johannesburg. It has established strong enterprise firewalls, with regimented network segmentation, and a full record of data-access privileges, which are managed by a newly appointed access-control manager.

These privileges have been tied to the human resources department via the implementation of cloud-based people management platform Workday. Other investments include the network-management tool Cisco ISE, data-monitoring tool Cisco Stealthwatch and multi-factor authentication tools from Duo.

“The organisation really embraced the idea that we were starting to put in place good security practices,” says Allison. “And we’ve done this by simply putting the right skills and the right make-up in each location.”

The long-term aim is to make it even easier for people around the business to use applications, he adds. “We want people to be able to hook-in a service with the right plugin and that all the authentication just works. We’ve got single sign-on sorted, which is good, but there’s still quite a lot on the background of the security side that we’ve got to do.”

Transforming the business with technology

Improvements to networking and security have been bolstered by a focus on service and support. Allison has established a pan-African service centre that looks after Zambian operations, but also those in Johannesburg and Mauritania. The long-term plan is to create a small regional centre in Australia and then a significant regional centre in the Americas.

Those three regional centres will allow Allison to provide 24/7 support to the firm’s global workforce. “I’d hope that whenever people engage with IT, wherever they are in the world, that they have a consistent experience,” he says.

“Wouldn’t it be great if, no matter where you are, you phone one number, it reaches the right people and you just get a great experience talking to IT wherever you are, no matter what time of day or night, because there’s just one common approach. And I genuinely think we’ll have that in two years.”

Allison’s hope is that his continuing work on infrastructure means his IT team will be able to start on more transformational projects by early 2021. He hopes that ongoing change process will mean that anyone across the organisation will be able to plug in and use cloud services and other emerging technologies as the business need emerges.

“We’ve got to get the basics in place,” says Allison. “We need to make sure that the network, cloud services and datacentres are where we need them and are all working in a way that the organisation can pick up. And then, if people want to go and spend money on analytics and robotics and internet of things, then they can go for it – because they’ll involve us anyway if we prove we’re credible as an IT department.”