5.12.Aan de e-mail van MST van 1 februari 2022, waarmee zij een einde aan de samenwerking met Solix maakt (zie hiervoor onder 3.7.) is de hiervoor onder 3.6. tussen partijen gevoerde correspondentie voorafgegaan. MST heeft een e-mail aan Solix gestuurd op 13 januari 2022, waarin zij haar zorgen uit over de voortgang van de werkzaamheden. Solix heeft gereageerd in haar document ‘Response to Project Concerns’, waarin zij steeds eerst de door MST op 13 januari 2022 geuite klacht weergeeft en daarop vervolgens haar reactie (cursief) formuleert:
Compared to the original (!!) planning, batch 1 (with 3 databases) should be ready by November 30, 2021. If I look at the lead time of batch 1 issued by Solix and add it to where we are now, I expect that we will not be finished with batch 1 until Monday 07 February 2022. And that is if everything works as planned. In other words, we are now running out of time with 14 weeks compared to the original planning. That is more than
3 months. At a period of 4.5 months since we started, that is a relatively large amount. And this is not just because of the log4j security issue.
Solix acknowledges that the MST project has been delayed. The MST project was proposed and agreed to be run with a “shared team” approach. With a shared-team project, some tasks are assigned to the Solix team and other tasks are assigned to the MST team. Solix shares responsibility for project delays, but not all the delays were due to Solix action or inaction.
Delays caused by Solix:
- availability of HTTPS/SSL patch caused delayed
- availability of log4j patch (which was unforeseen at the time the project was started) caused delays
- ineffective project management at the start of the project contributed to delays
- ineffective communications on MST requirements and incomplete pre-requisites documentation contributed to delays
Delays caused by MST:
- opening of required firewall ports was delayed
- authentication information required to connect to application sources was delayed
- provision of security certificates needed to enable HTTPS/SSL has not yet been provided
- review and security release for the log4j patch has not yet been provided
- MST has resisted starting work on tasks not dependent on software installation which will cause future delays
- The VMs that are installed entail additional Azure cloud costs that are not foreseen in advance by MST, because we had a different picture from the infrastructure for Solix.
- The longer the project takes the longer we are facing costs while we still can not use the application.
- We see unfamiliarity and too little knowledge among the operators in India with the Solix common data platform. Because of that, Tom, Imane and others, spend a disproportionate amount of time, to help them by every step in the project. Because of this we also have concerns about the support, once we are live.
Solix has not changed the architecture that was presented to MST during the sales cycle. The Solix architecture has always been based on virtual machines on which the software stack is installed. Solix never represented that our product was based on Azure native services.
Solix presented options for deployment that ranged from an entry level cluster without high availability (HA) to a slightly larger cluster that includes HA. The difference between these options is 2 nodes (with the smaller cluster requiring 4 nodes and the larger HA cluster requiring 6 nodes). If MST wishes to reduce Azure cloud costs, we can assist you in moving back to the entry level architecture (without HA)
Solix technically, insufficiently meets the MST and/or industry standards for the cloud. Also updates (HTTPS, SSL) have not yet been carried out and are necessary for use. These updates were scheduled to be released on 19 and 26 November 2021. Solix does not always communicate in the standard secure way. We addressed that in the mail, dated 10 December 2021 to [naam 1] and [naam 2].
Solix completed the HTTPS / SSL patch in December and has successfully deployed it as several other customer installations. We cannot complete the installation at MST because we are still waiting on MST to provide the necessary security certificates needed to make this functionality work
Solix regrets that on one occasion, email was used to communicate secure information. That has not and will not happen again.
Solix CDP is being used by many of the largest businesses and organizations in the world in a secure manner on both private cloud environments (like the one being used by MST) and on the Solix multi-tenant cloud
Communication with non-native speaking persons remains difficult. We literally do not understand each other and when we do understand each other, we seem to talk past each other and understand each other insufficiently or not at all. This complicates cooperation. Outside of the weekly project meeting, we communicate as much as possible via e-mall.
If I ask for updates on the progress, I do not always get them, or late (after 2 or 3 appeals) and not always with a substantive answer
Solix acknowledges that communications have been difficult and have contributed to project delays, and we take responsibility for this. Solix will take practical and possible steps to improve on communications going forward.
Solix acknowledges that project management (including timely progress updates) have been less than effective, and we take responsibility for this problem. Solix will take practical and possible steps to improve our project management effectiveness.”
Na de reacties op de klachten van MST presenteert Solix een ‘Get well plan’ met de volgende inhoud:
“• Solix will increase management time assigned to the MST project to help prove project management and communications effectiveness
[naam 1] - will host daily stand-up calls for the core team
[naam 2]- will attend weekly project status calls
[naam 3] & [naam 4] - will attend by-weekly sponsor calls
[naam 5] (Solix Engineering VP) will also join the bi-weekly sponsor calls to assist with technical product issues
• Solix recommends immediately starting on key project tasks outlined in the SOW to accelerate the actual archiving work
Setup data access discussions with each application team and document their access requirements
This will allow the Solix team to begin the data access design work
This is an example of a task that has no dependency on the technical track
The same approach of working on parallel tasks must be adopted going forward to minimize the time to completion
• Solix will deploy additional CDP resources to accelerate the completion of the archiving tasks (at no additional cost to MST)
• Solix will be updating the pre-requisites and installation documentation to improve clarity
• Solix offers to work with MST to find opportunities to reduce your Azure costs to run CDP
• Solix can provide ongoing CloudOps services to manage and maintain the MST CDP environment in Azure for an annual fee of € 32,000 (a formal quotation with service level details will be provided by Andrew)”
Solix heeft in haar document ook een ‘Timeline of MST Project Progress’ gevoegd:
“>Solix Project team introduced on 10/21/2021
> On architecture review by Solix Admin - found discrepancy in no# of nodes and resource allocation (FOUR Vs SIX) Informed this to MST Team - 10/22/2021
> MST provided the details according to new recommendation on - 10/29/2021
> MST team worked to add 4789 to NSG and Host Connectivity Issues on- 11/03/2021
> Firewall Issues were reported by Solix admin on -11/09/2021
> MST team helped resolve the Connectivity and Firewall Issues - 11/15/2021
> Solix Software installation concluded on - 11/15/2021
> MST team acknowledged to send Certification details on - 11/24/2021
> MST team provided the Source DB details on 12/06/2021
> Solix CDP Servers were shutdown/stopped due to the Log4j vulnerability issue on - 12/13/2021
> Solix released 3.0.6.6 on 12/17/2021 with HTTPS / SSL functionality
> Solix waiting on MST security certificates to enable this functionality
> Solix released a patch for Log4J and SOLR components and applied on - 01/10/2022
> Solix waiting on the conclusion of Security Configuration checks to start Data migration
> Solix waiting on source DB (port) details from MST team”