The Power-centric CIO

My marketing team is wresting part of my budget of customer facing applications and social media; at the same time funding for the new budgeting application is with my finance team. The IT budget is now almost 50% of what it was last year. How do I recover back control of my budget ? Wailed a CIO in a panel discussion, which was discussing amongst other things trends that are likely to be reality in the upcoming year.

The panel sympathized with the protagonist CIO and a few from the audience attempted to offer solutions. The debate threw up a interesting thoughts on how the budgetary control could be retained with IT. Ranging from bureaucratic rigmaroles to bullying and many other similarly trending behaviors, the suggestions were analyzed and discarded as untenable for either being against core values or not implementable without inflicting self-damage.

The IT budget has been a discussion point for some time now. It predicted the investments made by companies on technology enabled solutions. The industry created benchmarks around the investments linking it to the topline graded by industry. The maturity of IT usage was linked to this figure and anyone spending below the benchmark was seen as a laggard or highly efficient.

Then came research reports on innovation versus business as usual; ranging from 70% - 90% of the IT budget being consumed on keeping the lights on, while the remaining pittance being allotted to new projects or innovation. Anyone with BAU numbers under 60% was envied and deemed better aligned to the business. Models were created to turn the ratio upside down and reduce the operational budgets to strategic initiatives.

Economic cycles threatened available monies and CIOs were put under the scanner on every penny (or cent or whatever currency you like) they spent. Do more with less was the mantra and that is now the new normal. Every disruptive technology was seen as the next silver bullet to help the CIO in improving the dialogue on keeping the IT budget to a respectable ratio to the revenue. Cloud will save money, move everything to Operating Expense; virtualization will save the enterprise IT …

In one of the companies I worked the IT organization was empowered with the operating expense budget and incremental innovation on existing technology stacks. There was a discretionary budget for exploration of new trends and technology. New projects and initiative budgets were discussed with the business and IT advised the funding requirements which rested in the business P&L. This ensured that the accountability for the projects was an equal responsibility shared between IT and the function. The success rate was high and everyone loved IT. Since then I have followed this practice successfully in every company.

I believe that keeping the number in the CIO spreadsheet or the business spreadsheet does not take away the control from either. Mature enterprises and CXOs work together to solve real business problems and not bicker over where the budget lies. When was it about control or the power of the budget, large or small ? If the CIO is partnering with other CXOs and is focused on the corporate agenda, then it is about getting things done irrespective of where the number lies.

Does this insecurity befit the CIO ?

Unraveling BYOD/T

The one trend that everyone is talking about and which figures on every list (priorities, trends, technology, whatever) is Bring Your Own Device/Technology. It has had proponents and opponents from various quarters within and outside the enterprise. Opinions and views, recommendations and pitfalls, management tools and security concerns, the list is endless and continues to keep the CIO bewildered irrespective of whether s/he embraces BYOT or not.

From what I recollect, it all started with the iPhone and then extended to tablets, laptops, and what have you. Not that earlier personal devices did not connect to the corporate network; they did on the wire and then over the air, if you will remember devices with a technology called “activesync”. The early phones offered limited connectivity and as the network improved and so did the technology, browser based apps started appearing. The resident app followed soon enough.

I don’t remember all the devices that I used over the last decade and longer being provided by the company; which would imply that we did have a lenient policy even before the BYOT buzz appeared and started haunting every technology professional. The early PDA which eventually integrated the phone had limited use and was not widely prevalent due to unwieldy size and interface. Except for the early large form factor devices, it was not a statement to make.

Evolution of the device and the network created new possibilities and the scattered raindrops became a flood; apps for everything and power in the hands of the executive with no constraint on time. Business impatience became the hallmark of new technology deployment to swamp all available and unavailable time. The CIO built layers of infrastructure, applications and security to manage the demand. It did not matter who or how many used it; if it was possible, then it had to be available.

The democratization of information worried only the CIO until stories of compromise started spreading. Compromise not always by the external world, but bits of information scattered across slowly fading away with exits, ignorant employees losing devices or passing hands within the family. Enterprise liability driven by law and governance suddenly finds itself at loggerheads with BYOT.

Depending on the country of incorporation and most probably operation, the laws require stringent compliance. BYOT contravenes some with liability creation for not just the CIO but the CEO and even the global HQ. A cyber law expert thrust the fear of the law of the land to listening CIOs who cringed with every clause and interpretation of impact to the executives and the enterprise.

So what are the choices available ? Will the CEO not want the next new device on the block to be connected to the corporate infrastructure ? Does s/he not evaluate the ramifications to the enterprise ? Is ignorance a good excuse ? I believe that the CIO needs to raise the bar with heightened awareness starting with the Board and then cascading downwards. It takes only once incidence to create collective pain. CIOs can address the contingent liability with reasonable due diligence, control and documentation to dampen down the impact.

It is not going away, but what it means to you is up to you. BYOT = Bring Your Own Trouble, or BYOD = Bring Your Own Demise, or BYOD = Bring Your Own Destiny, or BYOT = Bring Your Own Tension, or BYOT = Bring Your Own Threat, or BYOD/T = ? You decide !