Mitigating Risk - Why Sticking With Windows XP Is A Bad Idea - IDC - May 2012
Mitigating Risk - Why Sticking With Windows XP Is A Bad Idea - IDC - May 2012
Randy Perry
IDC OPINION
The termination of extended support for Windows XP SP3, which will happen on April 8, 2014, is looming large for many enterprise organizations, and this deadline has motivated many customers to accelerate their migration activities. However, for some segments of the industry, significantly less effort is being applied to formal migration initiatives, and Windows XP continues to be perceived as a solution that works sufficiently for existing needs, whether it is supported or not. Microsoft has rightfully advocated the standardization of client operating system (OS) deployments, allowing a more consistent approach to systems and application management as well as settings and configurations management. This allows support staff to coalesce its expertise around a single product. Because of the lengthy life cycle of Windows XP, customers have enjoyed an unprecedented level of client OS standardization. Windows XP is two generations behind Microsoft's current product technology and, in the near future, will be three full generations behind. Combined with the approaching end of extended support for Windows XP SP3, many customers are placing themselves at risk if they continue to use Windows XP. Costs can soar with older PCs and older operating systems. This study found that for five-year-old PCs running Windows XP, user productivity costs per PC per year nearly doubled from $177 in year two to $324 in year five, while IT labor costs per PC per year jumped from $451 in year two to $766 in year five. These higher costs were caused by a variety of problems, not all directly attributable to the operating system, but common in older solutions that required IT labor and help desk support activities. User productivity costs were driven up by higher levels of downtime caused by security woes, time wasted waiting for help desk response, and time spent rebooting systems. IDC's analysis shows that supporting older Windows XP installations, compared with a modern Windows 7based solution, saddles organizations with a dramatically higher cost. Annual cost per PC per year for Windows XP is $870, while a comparable Windows 7 installation costs $168 per PC per year. That is an incremental $701 per PC per year for IT and end-user labor costs. The conclusion is simple: Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments.
P.508.872.8200
F.508.935.4015
METHODOLOGY
IDC's standard methodology was employed for this project. All of the financial quantification is based on interviews with companies that have deployed both Windows XP and Windows 7. This study was built around in-depth interviews with nine end-user organizations that have deployed both Windows XP and Windows 7. These interviews were used in aggregate to quantify the financial risks of not migrating to Windows 7. IDC bases return-on-investment (ROI) calculations on standard, accepted definitions and calculations and the following assumptions: Time values are multiplied by burdened salary to quantify efficiency and manager productivity savings. Downtime values are a product of the reduction in downtime hours multiplied by the number of users affected and their hourly rate. Because not every hour of downtime equates to a lost hour of productivity, IDC specifically asks about the percentage impact of an hour of downtime and attributes a fraction of the hourly result to the dollar savings. All IT solutions require a deployment period. The full benefits of the solution are not available during deployment. To capture this reality, IDC prorates the benefits on a monthly basis based on the average deployment term. The net present value (NPV) of the three-year savings is calculated by subtracting the discounted three-year investment from the discounted three-year benefit. IDC uses an estimated discount rate to account for potential outlays made at the time of deployment and interest on that investment. Typically, companies use their cost of capital plus some risk factor.
#234690
2012 IDC
SITUATION OVERVIEW
Why It Is Time to Retire Windows XP
IDC believes that the industry has hit a natural transition point, with both hard and soft cost justification to upgrade Windows XP installations with a Windows 7 solution. Some of the reasons are as follows: New PC capabilities that are not exploited by Windows XP. Most new PCs have features that were nonexistent, or immature, when service pack enhancements for Windows XP were discontinued. Today's PCs include features such as integrated WiFi and Bluetooth, faster USB ports, and high-resolution monitors and touchscreen capabilities. Many of these capabilities are either poorly supported or not supported by Windows XP Professional. Further, today, most PCs ship with a minimum of 4GB of memory, which a typical 32-bit Windows XP operating system is unable to address. A 64-bit install of Windows 7 allows full exploitation of that memory. The approaching end of Windows XP SP3 extended support on April 8, 2014. The termination of extended support means the end of security updates, (paid) hotfix agreement support, and paid per-incident support services. Lower operational costs. This paper introduces hard data on the support costs for Windows XP and compares those costs against the support costs for a more modern solution. Simply stated, older technology has a higher maintenance cost. This is exacerbated when organizations keep PCs in use for extended periods of time (beyond a typical three- to four-year life cycle). Soft benefits. The broad consumerization of IT that is sweeping across the industry has empowered end users and given them a louder voice in corporate IT decisions. It is likely that most consumers have experienced a modern user interface, whether it is Windows 7 or on one of the many rich consumer smart devices and tablets that are proliferating. IT departments that artificially hold users hostage aboard old technology solutions are setting the stage for a user revolt that could lead to a loss of influence by the IT department. By proactively encouraging the use of modern technology, the IT department is seen as being interested in improving the productivity of users. End users feel empowered to accomplish their jobs with modern tools that improve their productivity and eliminate wasted time resulting from poorly performing old technology, unnecessary application crashes, and operating system reboots. Compliance issues. Certain industry-specific regulatory requirements mandate that software be maintained and kept current with patches and fixes. The termination of Windows XP extended support means that organizations may find themselves out of compliance.
2012 IDC
#234690
Windows 8
IDC has not yet broken out Windows 8 shipment projections from the current forecast totals. However, on traditional PC form factors (desktops, laptops), IDC does not expect to see any near-term acceleration to current commercial shipment forecasts associated with the release of Windows 8. IDC notes that traditional IT adoption and deployment cycles are preceded by a qualification and impact study associated with any new products, and any impact from Windows 8 on commercial deployments will not likely be felt before late 2013 or early 2014. In the interim, after the release of Windows 8, we expect to see customers exercising downgrade deployment rights with new PCs they acquire that come from OEMs preloaded with Windows 8, which is common adoption behavior among enterprise IT departments until they fully qualify and approve the use of a new product.
#234690
2012 IDC
FUTURE OUTLOOK
Study Demographics
IDC conducted a study to assess the risk and the cost incurred by organizations that choose to extend their Windows XP life cycle rather than move forward to a current Microsoft product. For this study, we conducted in-depth interviews with nine organizations: four professional services firms, two educational organizations, and one organization each in construction, government, and petroleum production. They are large organizations with an average of 3,680 employees, 68 IT staff members, and 14 PC support staff specialists. In the case of the educational organizations, the number of PCs supported far exceeded the number of employees due to transient student populations. Among the study group, 90% of the end users were categorized as office workers (which includes students). Another 7% were classified as road warriors, including executive staff and sales professionals. An additional 3% were classified as work-from-home staff. In terms of hardware demographics, 54% are desktop users and 39% are laptop users, with the balance using a collection of other devices, including tablets and other smart devices. From a platform use perspective, over 90% of the devices in use within the study group are running Windows, with the overall total split between Windows 7 (65%) and Windows XP (29%). Four organizations were at 100% with Windows 7 aboard their Windows PCs, and two organizations were over 93% standardized on Windows XP.
2012 IDC
#234690
FIGURE 1
The High Cost of Supporting Older Systems
900 800 700 600 500 $592 $451 $474 $324 $177 $188 $766
$231
Year 2
IT labor costs
Source: IDC, 2012
Year 3
Year 4
Year 5
IT Time Costs
Table 1 provides a detailed look at the factors that add to the costs that are illustrated in Figure 1. There are two aspects to consider in Table 1: the absolute impact of any one IT productivity metric in terms of hours per PC per year and the magnitude of change that can be realized by moving to Windows 7. For example, patch management alone accounts for 49% of the operational activity investment required to continue supporting a Windows XP environment. Moving to Windows 7 will reduce the time invested in patch management by 82%. Considered another way, Windows XP requires over five times more hours per PC per year of patch management than Windows 7. Collectively, operational activity time required to support PCs shows a 70% reduction in terms of hours per PC per year for organizations that choose to replace their Windows XP systems with Windows 7.
#234690
2012 IDC
TABLE 1
Annual IT Productivity Metrics (Hours per PC per Year)
Metric Deploying/replacing PCs Security-related activities Maintaining images Deploying applications Patch management User administration Operational activities (subtotal) Downtime Help desk Mitigating malware/viruses Downtime-related activities (subtotal) Total
Source: IDC, 2012
Windows XP 0.33 0.29 0.30 0.43 1.5 0.20 3.0 2.9 4.8 0.60 8.3
Windows 7 0.11 0.19 0.13 0.12 0.3 0.07 0.9 0.6 0.8 0.06 1.5
Change 0.22 0.10 0.17 0.31 1.2 0.13 2.1 2.3 4.0 0.54 6.8
% Change 66 35 57 72 82 64 70 79 84 90 82
11.3
2.3
8.9
79
The other dimension detailed in Table 1 is the impact of downtime and responding to problems that compromise a PC and require IT intervention to restore the system. The single largest component in downtime-related activities is the help desk operation, which accounts for 58% of the downtime-related time spent supporting Windows XP. Not far behind is resolving downtime issues, which accounts for 35% of the total time spent by IT in supporting Windows XP. Those metrics can be reduced by 7984% through a move to Windows 7.
2012 IDC
#234690
When combined, all IT activities account for 11.3 hours of time spent per PC per year when using Windows XP. Shops that have moved to Windows 7 enjoy a far lower cost, spending 2.3 hours per PC per year on maintaining those systems. The cost of staying with Windows XP is the consumption of an additional 9 hours per PC per year. One way to rationalize the magnitude of the impact of that high support cost is that for every 230 PCs an organization supports, the equivalent of one additional full-time resource (40 hours per week) is required to maintain Windows XP. A move to Windows 7 frees up an equal number of hours, and for every 230 PCs an organization upgrades to Windows 7, one full-time equivalent of staff time is freed up to work on other projects that bring direct value to the business.
TABLE 2
Annual User Productivity Metrics (Hours per PC per Year)
Metric Time lost to virus or malware attacks Time lost to reimage a PC (result of virus/malware attacks) Time lost for reboot Downtime Help desk Total
Source: IDC, 2012
% Change 90 87
94 83 84 87
#234690
2012 IDC
For users that have upgraded to a Windows 7 PC, time lost to reboots is virtually eliminated through a 94% reduction. In addition, because Windows 7 tends to be more stable and less prone to compromise, the time lost waiting for help desk response is reduced dramatically, with Windows 7 leading to under an hour of time per PC per year for end users. Overall, user productivity is dramatically boosted by Windows 7, while Windows XP users are saddled with 7.8 additional hours of lost time per year compared with their colleagues using Windows 7.
TABLE 3
User Productivity Key Performance Indicators
Key Performance Indicator (KPI) Number of virus or malware attacks per month Mean time to repair (minutes) Time lost to virus or malware attacks per year (hours) Number of reboots per month Average time per reboot (minutes) Time lost for reboot (hours) Failure rate (%) Downtime hours per year Windows XP 84 222 0.6 5.4 4.1 2.5 3.0 1.1 Windows 7 67 24 0.1 0.7 1.4 0.2 1.0 0.2 Change 17 198 0.5 4.6 2.7 2.3 2.0 0.9 % Change 20 89 90 86 66 94 55 83
Note: Some KPI metrics are cited in minutes, while others are cited in hours or per month.
Source: IDC, 2012
ROI AN ALYSIS
IDC uses a discounted cash flow methodology to calculate the ROI and payback period. ROI is the ratio of the NPV and discounted investment. Payback period is the point at which cumulative benefits equal the initial investment. Table 4 presents IDC's ROI analysis for the deployment of Windows 7 to replace an older Windows XP installation. This ROI analysis constitutes a three-year view of the payback associated with a move from Windows XP to Windows 7.
2012 IDC
#234690
As shown in Table 4, organizations spent an average of $712 (discounted) per PC to replace each Windows XP (including hardware and software) and saved $1,685 (discounted) per PC in reduced IT labor support and lost productivity over three years. The payback period for a new deployment of Windows 7 is calculated at 12 months. The migration from Windows XP to Windows 7 yields a 137% return on investment over a three-year period.
TABLE 4
Three-Year ROI Analysis
Benefit (discounted) Investment (discounted) NPV ROI Payback period Discount rate
Source: IDC, 2012
Figure 2 presents the outcome of the ROI analysis in graphical form. The initial investment includes the average total costs for a fully loaded PC with Windows 7 offset by the cost to replace the PCs as part of the average replacement cycle (3.4 years). Annual benefits include reduced IT labor support and lost productivity.
10
#234690
2012 IDC
FIGURE 2
ROI Analysis
2,000
1,500
$1,392
$300 $25
CHALLENGES/OPPORTUNI TIES
Any organization considering a move to a new operating system must take into account both the challenges and the opportunities. Some key considerations are as follows: Challenge: It takes money to save money. For organizations to embark on an upgrade cycle to replace Windows XP with Windows 7 requires confidence and commitment to take on capital expense (capex) with the presumption that there will be an operational expense (opex) that returns on that capex investment. While this study shows a clear benefit and a measurable ROI, for many organizations, capex costs are far easier to identify and measure than opex cost reductions. Opportunity: Cost savings are forever. Once an upgrade is completed, and the operational costs are lowered, those lower operational cost benefits continue to accrue into the future with no further direct capex investment.
2012 IDC
#234690
11
Challenge: Potential compatibility concerns. This study specifically evaluates the benefit of replacing Windows XP with Windows 7. However, application upgrades (or at least application compatibility mitigation) may be required as part of the upgrade process. This ROI analysis does not allow for applications that must be replaced. Opportunity: Well positioned for the future. Making a move to Windows 7 now means that organizations are well positioned to embrace Windows 8 aboard new hardware form factors that will leverage the Windows 8 Metro user interface. Over time, there may be justification to upgrade Windows 7 PCs with Windows 8, and all indications at this time are that the move from Windows 7 to Windows 8 will be seamless for applications and nonimpactful to existing hardware. Opportunity: Standardization. The ability to bring all PCs to a common, modern operating system leads to greater satisfaction among users and IT professionals as well as the ability to leverage cutting-edge applications, improve manageability, and reduce security risks thanks to features such as User Account Control, Internet Explorer 9, AppLocker, BitLocker, and other features designed to improve overall security.
CONCLUSION
This IDC White Paper shows clear benefit associated with a move from Windows XP to Windows 7 and presents a case for the many reasons why remaining with Windows XP is no longer a good business decision. Costs tend to soar when older products are used beyond their intended life cycle, and IDC research has clearly confirmed that trend. Benefits include the ability to reduce operational costs and avoid the need to hire additional support personnel as well as the opportunity to help users be more productive and happy in their daily work environments. The April 8, 2014, termination of extended support for Windows XP SP3 is a firm, impactful deadline that should be a real wake-up call for organizations of all sizes, but especially for midsize and large customers. Given the age of Windows XP, which is now two generations behind Microsoft's current product technology, the time has come for customers to realistically consider that they are placing their businesses at risk by continuing to utilize Windows XP. Organizations that continue to retain a Windows XP environment not only are leaving themselves exposed to security risks and support challenges but also are wasting budget dollars that would be better used in modernizing their IT investments.
Copyright Notice
External Publication of IDC Information and Data Any IDC information that is to be used in advertising, press releases, or promotional materials requires prior written approval from the appropriate IDC Vice President or Country Manager. A draft of the proposed document should accompany any such request. IDC reserves the right to deny approval of external usage for any reason. Copyright 2012 IDC. Reproduction without written permission is completely forbidden.
12
#234690
2012 IDC