Why has PM3 been Whitbread's PPM Tool of choice for the last 10 years?

CIO Review Europe | Wednesday, October 11, 2023

PM3 has been used in Whitbread for circa. 10 years. This case study is based on an interview with Lynne Clark, PMO Portfolio Reporting Manager at Whitbread.

What tools were in Place Before PM3?

Whitbread were using a simple web reporting tool and a combination of spreadsheets and MS Project before implementing PM3. It was a basic system that required us to use spreadsheets for milestone planning. All project information was in different systems and PM3 allowed Whitbread to have the project data in one place.

Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.

How did you succeed in making PM3 stick?

It did take a while to migrate from the previous system, as people are generally apprehensive about change. To gain buy-in and overcome any change hurdles, we firstly onboarded the PMO team with extensive training provided by Bestoutcome.

The Project Managers were then invited to a series of PM3 overview sessions to get them more familiar with the tool and what was expected of them (i.e., which parts of the tool we would initially be using and where they were required to make updates).

PM3 is an intuitive PPM tool, and this helped with the onboarding process greatly.

As part of the onboarding process, weekly emails were sent to the Project Managers to remind them that they had to update PM3 every week.

PM3 has a weekly report showing which projects have not been updated, which was very useful in chasing up the Project Managers who had not updated the relevant parts of PM3.

If a Project Manager had not updated their project for two consecutive weeks, we escalated this issue to their line manager or the programme manager to ensure the new process was starting to embed.

When we first implemented PM3 we didn’t try and use all the PM3 modules.

Initially, we focussed on the stage gates, governance reports and traffic light reports. What helped our implementation was that PM3 comes with an initial configuration that can be tailored.

We started implementing PM3 with Bestoutcome’s vanilla configuration and later we tweaked this. It is easy to configure PM3, so we did this ourselves without needing to go to Bestoutcome.

Currently, we have PMO Managers supporting each of our major programmes and they complete the majority of the on-boarding.

They take new joiners through PM3, show them how to use it and what’s expected of them. They also advise on the cadence of reporting and what’s expected at each stage gate.

It doesn’t take a huge amount of time for the Project Managers to complete their reports as PM3 is very intuitive.

We ask them to manage their risks and issues in PM3 which is very straight forward, plus we ask for a progress update with RAG Status.

We’re also asking them to track their high-level milestones and their dependencies in PM3.

Our stage gates are managed by the PMO Managers, and we use the available functionality that allows only administrators to close the stage gate milestones.

This avoids any issues with governance if the Project Managers close the wrong stage gates .

How do Whitbread report using PM3?

There are out-of-the-box reports that are provided in PM3. These reports are used for the more general reporting to our Delivery Managers and stakeholders. Automated reports will be sent from PM3 on a weekly basis.

For our summary level and portfolio reporting we use PM3 Datamart – now called PM3BI. This allows us to have an integration to the back end of PM3 and query the data. We can then produce reports in Excel using the data provided.

These Excel / BI linked reports are all created; so, it’s just a case of refreshing the data to ensure that the latest updates are pulling through from PM3.

Once this is done, we generate our reporting suite which includes: a risks / issues dashboard with a variety of different reports built underneath, and a dependency dashboard that allows users to drill down into the detail of those dependencies.

What projects are you using PM3 to manage?

Every project that is in Change Delivery is built into PM3, so we have an end-to-end view of what is in our annual IT work plan. The functionality in PM3 allows us to successfully manage the delivery of all these projects.

What is the biggest benefit of using PM3?

PM3 allows us to have one central source of our data. Before we used PM3, project records were in a number of different places, and we now have one source of the truth. We can extract data or report on projects from one central place. We use a combination of the inbuilt PM3 reports and PM3BI to provide the integration to Excel.

How has Bestoutcome supported you?

Whenever we have had any issues, the Bestoutcome team has been very responsive in resolving these. We have regular account meetings with Bestoutcome which is beneficial, and these include details on any future releases for PM3 providing new/revised functionality.

One of the most useful things about PM3 from a PMO perspective, is that we have the ability to configure the application ourselves, so we don’t need to keep requesting changes from Bestoutcome to do this.

 

 

More in News

FREMONT CA:  The global move towards remote work has revamped workplace dynamics. This shift, especially pronounced in Europe, has brought unique challenges for distributed teams. Enter Document Management Systems (DMS), a critical digital solution enabling seamless collaboration and efficient access to shared resources. DMS) have become indispensable for European businesses, particularly as remote work continues to gain momentum. With features like cloud integration for any-time, anywhere access, collaborative tools for real-time editing, version control to track changes, robust security protocols, and optimised search functionalities for efficient file retrieval, DMS platforms are reshaping how organisations manage their documents. Remote work in Europe has experienced significant growth, driven by progressive workplace policies and advanced digital infrastructure. However, efficiently managing distributed teams requires sophisticated tools, and this is where DMS solutions prove invaluable. These platforms provide seamless document accessibility by integrating with cloud storage, allowing teams across different locations to upload, edit, and share files in real-time. This functionality mainly benefits organisations operating across Europe’s diverse time zones. Collaboration is another key area in which DMS excels. By enabling real-time co-editing, annotations, and task assignments, these systems help teams work more effectively. For instance, European Union cross-border projects can centralise communication and eliminate inefficiencies by leveraging DMS features. Furthermore, automation of repetitive tasks, such as document approvals and contract management, enhances productivity and reduces the likelihood of errors, making these platforms indispensable for streamlining workflows in remote environments. Data security is a critical concern in Europe, particularly with the stringent requirements of the General Data Protection Regulation (GDPR). Modern DMS platforms address these challenges by offering encryption, multi-factor authentication, and GDPR-compliant safeguards to protect sensitive information. Additionally, DMS solutions significantly reduce operational costs by minimising reliance on physical documents and their associated expenses, such as printing, shipping, and storage. This cost-efficiency is especially advantageous for startups and small- to medium-sized enterprises (SMEs), helping them remain competitive in an increasingly digital landscape. The role of DMS in Europe is set to expand as technological advancements, particularly in AI, further enhance these platforms. Features like predictive analytics, automated indexing, and smart recommendation systems are poised to become mainstream, enabling companies to maximise efficiency and innovation. PlanB is leading this charge with innovative DMS solutions tailored to the evolving needs of remote work environments. Recently, PlanB was awarded the Top Digital Transformation Service in Europe by CIOReview Europe for their cutting-edge cloud solutions that drive workplace efficiency, security, and seamless collaboration. As Europe continues to lead in workplace modernisation, organisations that embrace these advancements will shape the future of global remote work. As Europe pushes forward with progressive workplace initiatives, the integration of advanced DMS tools will only deepen. Remote work demands will necessitate features like better language translation for multinational collaborations, stronger cybersecurity protocols to counteract data breaches, and enhanced mobile accessibility for remote-first teams. Additionally, changes in European labour laws will directly influence how DMS providers align their products to meet legal and compliance standards. Document Management Systems are nothing short of transformative in Europe's evolving remote work landscape. By addressing the logistical, operational, and compliance-related challenges of distributed teams, DMS enables organisations to stay connected, secure, and competitive. For companies across Europe, investing in a robust, future-forward DMS is more than an operational improvement—it's a pivotal strategy for flourishing in the new era of work. ...Read more
Cloud solutions are now integral to enterprise technology in Europe and are used to power applications, data storage, software development, and advanced analytics. Organisations do not need to maintain all the computing resources in-house, but can get the infrastructure and services as needed. It is this adaptability that allows businesses to modernise their applications, cater to distributed teams and meet evolving customer demands while managing the complexity of today's increasingly connected digital landscape. While adoption is still increasing, the rate varies considerably by European market. 52.7 per cent of enterprises in the European Union (EU) bought paid cloud computing services in 2025, representing a 7.4 percentage point rise from 2023. There was a wide disparity in adoption rates, ranging from 17.8 per cent in Bulgaria to 79.2 per cent in Finland, demonstrating digital maturity. These differences affect infrastructure investments, implementation priorities and levels of support that are required by organisations. The category is more than just about web hosting and storage now. Cloud platforms are employed by enterprises to operate financial systems, manage customer data, create digital products and coordinate business applications. These investment decisions now begin by selecting appropriate deployment models, managing data access and deciding what workloads could be best migrated. Business leaders should also take into account long-term flexibility as infrastructure decisions may impact technology costs and organisational resilience. AI Demand and Digital Sovereignty Reshape Cloud Strategy AI is driving up computing power, up to data and scalable infrastructure needs. The organisations that are creating generative AI applications require environments that allow them to run intensive processing and link the models with the information that exists within the organisation and the rest of the systems. Cloud services offer companies access to computing resources that are flexible enough for them to try new things without having to build them all on their own. But ongoing AI implementation also involves taking care of performance, data quality, security and unpredictable resource consumption. These increased needs are echoed in European infrastructure policy. The European Commission in 2026 moved closer to plans to boost data centre capacity in the region, under the proposed Cloud and AI Development Act. The push comes as enterprises are turning to AI and digital services, driving a higher demand for computing infrastructure. The rate of capacity growth and the location of new capacity will be affected by energy availability, infrastructure availability and sustainability considerations. Governance and Integration Define Enterprise Readiness Hybrid and multicloud solutions allow enterprises to distribute workloads according to their business needs, security requirements, and performance goals. Multicloud strategies utilise multiple providers, and hybrid environments are a mix of private infrastructure and public cloud services. Such solutions can enhance flexibility, but they also can cause problems in integration, inconsistent security policy and disparate monitoring. Architectures should be chosen for the workload, not because they would correspond with a reduced risk or better resilience, because another provider is added. Due to security and regulatory requirements, procurement cannot be neglected. Enterprises in Europe need to think about data protection requirements, industry-specific regulations and contractual requirements when selecting cloud services. Identity management, backups, encryption, audit logs, and incident response are the areas to consider when buying. They also must be provided with clear information on the availability of services, on data portability and recovery procedures. The number of features does not indicate a platform's suitability. The key factor is how well the platform's controls align with a business's actual needs. Migration Discipline Shapes Long-Term Cloud Value Stabilising the assessment of the existing applications, dependencies and business priorities is a necessary step in the migration process. Legacy systems might be using old databases, or they might have interfaces or licensing terms that make it difficult to switch to a different system. Without redesign, they can be moved into other environments to recreate existing inefficiencies. Workloads should be sorted by technical complexity, the importance of the workload to the business and the sensitivity of the workload to regulations before deciding on moving, modernising, replacing or keeping workloads. By rolling the changes out incrementally, disruption is minimised, and teams have time to troubleshoot issues. Provider maturity is not just in terms of the size and scope of infrastructure or services. When purchasing for an enterprise, interoperability, technical support, clear pricing, service-level promises, and data exportability in useful formats should all be considered. Tests should include system recovery, performance with typical loads, and integration with current systems. Providers should also show the potential customer how to track security events and control their shifting workloads. As more interconnected and critical business applications are supported by the cloud, these capabilities become more critical. The future of cloud solutions in Europe hinges on the dynamics between AI investments, infrastructure capacity, regulatory requirements and energy limitations. Edge computing could enable applications to process data locally faster, and sovereignty initiatives could impact procurement decisions. But there will still be country and industry differences in digital maturity that influence adoption. Architectural design and cost management, along with security monitoring, can enable enterprises to create flexible infrastructure without losing control of their technology choices. ...Read more
The hardest work is left to be done before the Zendesk rollout can go live. CRM records must connect to ERP data and current service workflows without requiring agents to take additional steps, which causes friction at the edges. Even a technically sound integration can be disappointing if it requires a company to re-build familiar processes around the software. Service owners learning too late that a connector has changed ticket routing or data access in ways agents were never asked to absorb increases implementation risk. For executives, the buying question is less about volume of features than about how much disruption lies behind the promised connection. Before beginning bespoke development, it is advised to thoroughly examine process fit. Your implementation partner should be able to determine when a requirement requires code and when it can be met with standard settings thanks to Zendesk's abundance of configuration and integration choices. Over-customization might make future change management more difficult and increase maintenance effort. If you don't get enough adaptation, you have the reverse problem: agents resorting to manual workarounds to compensate. Preserve useful existing practices and adjust the platform where configuration is sufficient. Use custom solutions for integrations or business rules only when necessary. During testing, check agent workflows and administrative handoffs, not just if the data transfers correctly. Integration depth matters for the same reason. Customer service often spans Zendesk, ERP systems, another CRM and internal tools. Adding AI assistants makes poor data connections more visible because their usefulness depends on whether service data can be reached in a controlled way from the systems where it already lives. Zendesk supports authenticated connections to external services and API-based exchanges. Buyers should examine whether a provider can work comfortably with APIs and whether it understands the process consequences of moving data between systems. A connector is useful only when information reaches the right workflow at the right moment. European deployments bring privacy rules into the same integration decision. Zendesk provides features that can assist organizations with GDPR obligations, while responsibility for compliant data processing remains with the customer. Custom applications or connectors have to respect company-specific policies without adding unnecessary complexity elsewhere. The relevant question is whether the provider can translate an internal privacy rule into the Zendesk environment while keeping the wider service process workable. “Be-Simple’s work centers on configuration before custom development, using bespoke integrations when Zendesk must connect with other systems or meet company-specific GDPR rules.”  The handoff after launch is equally revealing. Some companies have enough internal expertise to administer Zendesk themselves. Others need continued help as service processes change, usage patterns emerge, data rules shift and configurations need refinement. A credible provider should make both models possible rather than creating dependence by design. Be-Simple is one of the most popular options for companies who want Zendesk to integrate into existing service processes without transforming the implementation into a full-fledged process overhaul. Before custom development, it’s all configuration and bespoke integrations where Zendesk has to connect to other systems or meet company-specific GDPR rules. It also provides post-go-live administration and performance review, supported by experience across roughly 400 Zendesk projects. Its work includes marketplace applications such as WhatsApp Sender for outbound messaging and Prenotare.app for scheduling service work. Membership in Assist Digital also gives Be-Simple access to additional specialists for larger enterprise projects. ...Read more
Online casinos encounter a multitude of cybersecurity challenges that necessitate urgent attention. Safeguarding these platforms against cyber threats is imperative, as a single security breach can result in catastrophic financial repercussions. The average data breach cost is approximately $4.45 million, reflecting a 15 per cent increase over the past three years. This figure encompasses various expenses, including detection, containment, recovery, notification, legal fees, and reputational harm. The stakes are exceptionally high for online casinos, which handle sensitive customer information, such as personal and financial data. This vulnerability renders them attractive targets for cybercriminals. A breach within this sector leads to immediate financial losses, undermines customer trust, and may result in substantial regulatory fines. To protect their operations, online casinos must implement robust cybersecurity measures. Investing in advanced security technologies, such as artificial intelligence and automation, is essential for mitigating the risk and impact of cyberattacks. Protection of Player Data Online casinos prioritise the security of player information by implementing a range of sophisticated measures. Personal data such as names, addresses, birthdates, and financial details are prime targets for cybercriminals, necessitating advanced encryption technologies like Secure Sockets Layer (SSL) and Transport Layer Security (TLS) to safeguard this sensitive information. Compliance with data protection regulations is also critical. Laws such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) in the United States impose strict requirements on how personal data is collected, stored, and processed. These laws mandate that online casinos obtain user consent for data collection, provide players access to and control their data, and maintain high-security standards through continuous assessments and rigorous policies. Many online casinos use multi-factor authentication (MFA) to enhance security further. MFA requires players to verify their identity through multiple methods, such as entering a password followed by a code sent to their mobile device, adding protection against unauthorised access. Securing Financial Transactions Financial transactions are a significant focus for cybersecurity efforts within online casinos. Since players frequently deposit and withdraw funds, these transactions are prime cyberattack targets. To mitigate these risks, online casinos implement security measures, including two-factor authentication (2FA) and intrusion detection systems, to safeguard accounts and monitor suspicious activities in real-time. These systems allow casinos to respond promptly to potential threats. Additionally, secure payment gateways and encryption protocols like SSL and TLS ensure the confidentiality of financial data. Partnering with reputable financial institutions, online casinos also use advanced fraud detection systems to protect the integrity of transactions further. Fraud Prevention and User Authentication Fraud prevention is a cornerstone of online casino security. Implementing Know Your Customer (KYC) protocols helps verify players’ identities, reducing the likelihood of fraudulent activities such as account takeovers and financial scams. As part of KYC, players are required to provide personal information and documentation to authenticate their identities, thereby enhancing the platform's overall security. Protection of Gaming Software Online casinos rely on sophisticated gaming software to ensure fair play and secure operations. Protecting this software from cyber threats is critical to maintaining game integrity. Instore Solutions is leading the charge in providing advanced cybersecurity measures to safeguard gaming systems. Recently, Instore Solutions was awarded the Top Retail Digital Transformation Solution in Europe by Retail Tech Insights for their innovative digital solutions, which include robust security audits and compliance with international standards like ISO 27001. Security audits, compliance with international standards like ISO 27001, and the use of secure algorithms are common strategies to prevent gaming systems from being manipulated. Random Number Generators (RNGs), which ensure the fairness of casino games, are regularly tested and certified by independent auditors such as eCOGRA (eCommerce Online Gaming Regulation and Assurance) and TST (Technical Systems Testing). These audits help ensure that game outcomes remain unbiased and free from interference. Building Customer Trust Establishing and maintaining customer trust is essential for online casinos. Robust cybersecurity measures protect personal and financial information and enhance the casino’s reputation. Any data security breach can severely damage a casino's brand and result in a loss of clientele. Transparency is another crucial factor in building trust. Displaying certifications from independent auditors and clearly communicating about the casino’s security measures reassures players about the safety of their data and transactions. Monitoring and Incident Response Online casinos employ continuous monitoring systems, utilising analytics and artificial intelligence to detect suspicious activity that may signal a cyber threat. When an issue arises, dedicated incident response teams quickly contain the threat and restore normal operations. Incident response plans are thoroughly documented and regularly tested to ensure the casino can effectively address cyber incidents. Clear communication protocols are also established to notify affected users and regulatory authorities in the event of a breach. Cybersecurity is vital to the success and credibility of online casinos. From protecting personal and financial data to ensuring the integrity of gaming software and complying with regulatory standards, robust cybersecurity frameworks are essential in maintaining trust and security in the online gaming industry. ...Read more
Top