I’ve sat in boardrooms on both sides of the table – as an internal Head of IT and as an external advisor. I’ve also completed the Australian Institute of Company Directors “Foundations of Directorship” course. The pattern is consistent: technology gets treated as operational support rather than part of digital strategy.
IT appears on the agenda when something’s broken or budget’s needed. The rest of the time, technology decisions happen elsewhere – usually in response to immediate problems rather than strategic planning.
What happens when IT isn’t strategic
Many mid-sized organisations grew up when IT genuinely was just support. The server lived in a cupboard, someone fixed the printers and technology enabled work without being central to it.
That stopped being true somewhere around 2010, but the mental model persists. Boards still think of IT as technical support rather than strategic infrastructure.
Meanwhile, every aspect of operations now depends on technology. Customer relationships run through CRM systems. Financial management lives in cloud platforms. Staff productivity depends on reliable collaboration tools. Competitive advantage increasingly comes from how effectively you deploy technology, not just what technology you have.
Treating IT as operational support while depending on it strategically creates a disconnect that eventually surfaces as a crisis.
Why this pattern persists
Many mid-sized organisations grew up when IT genuinely was just support. The server lived in a cupboard, someone fixed the printers and technology enabled work without being central to it.
That stopped being true somewhere around 2010, but the mental model persists. Boards still think of IT as technical support rather than strategic infrastructure.
Meanwhile, every aspect of operations now depends on technology. Customer relationships run through CRM systems. Financial management lives in cloud platforms. Staff productivity depends on reliable collaboration tools. Competitive advantage increasingly comes from how effectively you deploy technology, not just what technology you have.
When IT is treated as operational support while depending on it strategically, a disconnect is created.
What actually works
Technology leadership needs regular board access. When the organisation is planning expansion, IT leadership should already be in the room explaining infrastructure implications, scalability considerations and security requirements – not showing up afterwards to clean up decisions made without them.
Investment decisions need to connect to outcomes. “We need new servers” doesn’t get funded. “Current infrastructure limits our ability to scale operations; upgrade enables 40% capacity increase at lower operating cost” gets considered. IT investments should be evaluated like any other business investment – what problem does this solve, what outcomes does it enable, what’s the return?
Cybersecurity is risk management. Boards understand financial risk, legal risk and operational risk. Cyber risk belongs in the same category. It requires regular assessment, clear understanding of exposure and informed decisions about acceptable risk versus mitigation cost. That requires IT leadership who can translate technical vulnerabilities into business impact.
Digital transformation means organisational change. Technology enables transformation, but the transformation itself involves people, processes and business models. IT leadership and executive leadership need to work together from the start. Otherwise you get expensive technology implementations that nobody uses because the organisational change never happened.
None of this requires technical expertise from board members. It requires recognition that technology decisions are strategic decisions.
The fractional CIO model
Many mid-sized organisations can’t justify a full-time CIO – the revenue and complexity don’t warrant it. They still need strategic IT leadership.
Fractional CIO arrangements solve this. An experienced IT executive provides strategic oversight and participates in board discussions without full-time employment. Organisations get executive-level expertise scaled to what they actually need.
I’ve worked in this capacity for several organisations. The value isn’t technical implementation – they usually have competent IT staff or vendors for that. The value is connecting technology decisions to business outcomes, spotting risks before they become incidents and making sure investments align with where the organisation is heading rather than where it’s been.
The board’s responsibility
IT leadership can’t force their way into strategic discussions. That shift needs to come from the board.
If your organisation depends on technology for operations, customer relationships, competitive positioning or future growth – which is nearly every organisation now – then technology strategy belongs at the executive level. It needs to be embedded in normal strategic planning, not something that appears during a crisis.
Organisations that make this shift consistently get better outcomes from technology investments, avoid preventable security incidents and actually complete digital transformation initiatives.
The ones that don’t keep treating IT as support until something expensive breaks.
