The Threat can be expressed in financial terms and in behavioral terms, and the two descriptions are equally valid. And each situation is, for both you and your company, equally dangerous. In addition, each description is one you've no doubt heard about, read about, and discussed many times. Perhaps after each of those discussions, you've promised to get to it tomorrow or next week or next month; perhaps you've dismissed it as outside your control and your team's purview; perhaps you're convinced it somehow just isn't relevant to your situation; or perhaps you've figured that since it affects every company, it's not really that big a deal.
Here's what I'm talking about: Most companies spend an overwhelming portion of their IT budgets on maintaining old stuff, and only a trifle on new projects that can help trigger innovation. As a result, too many CIOs and IT organizations are relegated to second-class roles as reactive implementers of strategy because their time, their budgets, and their energies are almost completely consumed with managing the infrastructure, paying the maintenance charges, servicing aging equipment, connecting the unconnectable, and propping up the lame and infirm.
Again, I know you've heard all about these monsters in the basement and could well be getting sick of hearing even more about it. But the difference today is that more and more CEOs are coming to understand The Threat, and they are demanding it be dragged out of the basement, exposed to the light, and gutted. They are realizing that it has been stifling innovation, sucking up cash, calcifying business processes, and limiting flexibility. They are starting to ask why no one has done anything about it for so long when it is so clear that this condition is simply a disaster for the business. They are beginning to come up with questions such as, "Do you mean to tell me you knew all about this for the past few years and didn't do anything about it?" And they are beginning to form conclusions, such as, "How could I have thought my CIO was doing a good job, when all this time he was presiding over this sinkhole?" A more-sympathetic but hardly comforting interpretation would be this: "Well, I'm disappointed, but not surprised -- it just confirms that these CIO-types are more concerned about preserving the outdated systems they've built than they are with improving the business. Good thing I held off on adding him to the Executive Committee -- he clearly wouldn't have belonged."
C.K. Prahalad of the University of Michigan stressed that legacy systems not only suck up devastatingly big percentages of the overall IT budget, but also prevent companies from developing more-flexible IT architectures that allow information systems to move from being transaction-driven and inflexible to event-driven and massively flexible. Yesterday's maintenance monsters, he said, were designed to deliver archival information, whereas today's business environment requires real-time information that the older and inflexible systems are unable to deliver.
Today, Prahalad said, most companies are consumed with trying to improve their business processes but are limited by these inflexible systems because they were designed simply to document those processes rather than being able to analyze them, understand them, and recommend ways to optimize them.
Let me offer some thoughts and discussion points from last week's InformationWeek Spring Conference that illustrate the dangers behind this situation. Consultant and author Ram Charan asked attendees to participate in a deceptively simple analysis of their career trajectories. Charan had the group plot out their IT budgets for the next five years, with those budgets split into three line items: Service/Maintenance, Business Efficiency, and Transformational. He emphasized that those CIOs who aren't able to find ways to push ever-increasing percentages out of the first line item into the second and, more important, the third will simply box themselves out of consideration for broad leadership within the company. Unchecked, the ravenous maintenance appetite will devour not only ever-larger portions of the budget but also opportunities for IT organizations to become intimately involved in the strategic thinking of their companies. How, Charan asked, can a CIO expect the CEO to see IT as strategic if the CIO's own choices and priorities isolate IT from innovation and transformation?
Other Voices
![]()
"CIOs looking to get a seat in their company's executive boardrooms need to do a better job speaking the same language as their CEO and understanding his or her business priorities, according to a top consultant and best-selling business author. 'Learn about what the CEO wants to know,' said Ram Charan, former Harvard professor, speaking Sunday at the InformationWeek Spring Conference in Amelia Island, Fla."![]()
-- Paul McDougall, InformationWeek.com
![]()
![]()
Page 2:
![]()
1
|
2
Next Page »
Application Security’s Role in FISMA Compliance
The Federal Information Security Management Act of 2002 provides a comprehensive framework for ensuring effective information security controls for all federal information and assets. The Act aims to bolster computer and network security within the Federal Government by mandating periodic audits. Based on this...

NOTE: Offer valid for U.S., U.S. possessions, & Canada only.