IT DRILLDOWN
 
NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 
 
 
LEADERSHIP
 
CIO Executive Programs
The Leader in Face-to-Face Education for Senior Executives

Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »

 
CIO Executive Council
A Peer-Advisory Service and Professional Association for CIOs

Portfolio Management Maturity Model at Chevron - Presentation & Discussion

November 13, 11:30 AM - 12:30 PM ET (GMT-4)

The fundamental goal of the model is to help IT become a business partner and earn a seat at the table. Core to the model is to establish a five year IT strategic road map that is owned by the business. Presenter Janinne Franke is manager of strategy, planning & optimization at Chevron's corporate department & services. She will share processes and lessons learned from developing and implementing the model.

More / Register »

Learn more about the CIO Executive Council »



 
 
RESOURCE CENTER
 
 
 
SUBSCRIBE TO CIO
 
Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

 
 

The Accountability Trap

Accountability without authority is a recipe for failure. Here's how to make sure it doesn't happen to you.

 

June 27, 2008CIO — Allison was recently appointed Chief Compliance Officer in the IT department of a huge financial services company, and was set up to fail from day one.

The set-up was pretty obvious to an outsider, but not to her. She enthusiastically told me of the importance of regulatory compliance in their industry and the stature of her position as the one person accountable for the compliance of the entire IT function.

"The regulators require a single point of contact," she explained. "We need to ensure consistent processes and metrics throughout the organization. And our CIO gave me the authority to make it happen."

I was reminded of past discussions with Chief Security Officers, quality managers in the pharmaceuticals industry, and business continuity managers. All these people had been made accountable for other people's compliance, and believed they had the authority to control other people's behaviors.

Sigh. I hated to burst Allison's bubble. But time and again, history has proven that this approach doesn't work. Here's why:

Executives have businesses to run, and they're not going to let a compliance officer tell them how to do it. Sure, they'll comply when it's easy or when they really have to—with the big, visible initiatives. But on a day-to-day basis, Allison has three factors going against her:

1. Others are not being held accountable for their own compliance—she is. Why should they put effort into something that's outside their own personal performance objectives?

2. Executives are held accountable for business results, and they aren't going to let Allison cause them to fail at that. They're not going to change their processes or disrupt their operations to help with her objectives.

3. Allison is the one who's accountable. So if others mess up and bad things happen, she'll take the fall.

Allison may as well have been given the title, "Chief Scapegoat."

The Path of Accountability

The trap of the scapegoat occurs in many situations beyond compliance. It may be that ITIL "process owners" are tasked with implementing changes in the way the rest of the IT organization works. Or perhaps IT is asked to implement ERP and takes responsibility for changing clients' business processes.

The organizational principle that applies in all these situations is straightforward: Accountability and authority must flow down through the solid lines of the reporting hierarchy. It must never flow sideways such that someone is given accountability or authority for peers' behaviors.

Loading...
 
 
ABCs
 

Just the basics, please. Sometimes we all need a refresher or we need to make sure our team and our colleagues are all on the same page.

Over 25 tutorials on everything from business intelligence to virtualization.

 
 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Tripwire PCI DSS Solutions: Automated, Continuous Compliance

ITCi White Paper: Challenges and Opportunities of PCI

Best Practices in Choosing and Consuming Managed Security Services

A Guide to Messaging Archiving

2008 Google Communications Intelligence Report

The Impact of Messaging and Web Threats

Comparing Google and Other Leading Messaging Security Solutions

Deploying a Google Search Appliance is Not your Typical IT Implementation

Google Case Study: Pioneer Investments

The Case for Universal Search

Universal Search in Financial Services Organizations

Google Case Study: Sunnybrook Health Sciences

Learn About the Features of the Google Universal Search Solution.

Mission Impossible: Building the Right Project Metrics

Project Portfolio Management - Boost the Value of IT

Embedding Architecture into the Organization

Data Center Asset Planning - Regaining Control of the Data Center

Develop new insights that deliver better business results

"Enterprise-Proven" is the Prerequisite for Enterprise SaaS Portal Solutions

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

IT Cost Transparency & Performance Management for Optimizing IT

IT Service Management: Metrics That Matter

Proving Control of the Infrastructure

Solving Online Credit Fraud Using Device Reputation

Stimulating Innovation: Meeting IT's New Mission

The PCI Data Security Standard

7 Requirements of Data Loss Prevention

A Guide to Understanding Hosted and Managed Messaging

Google Apps Premier Edition Helps Indoff Manage E-mail More Effectively

CapGemini Cut Call Center Costs with Google Apps Premier Edition

Comprehensive Review of Security and Vulnerability Protections for Google Apps

Web 2.0 The New Face of the Web

Universal Search in Healthcare Organizations

Google Case Study: Agile Software

Universal Search in High Tech Organizations

Providing Universal Search for Business

Google Case Study: Kimberly-Clark

Put Enterprise Communications on Autopilot

Portfolio Management for Effective IT Governance

Making Enterprise Architecture Work within the Organization

Telepresence - A Realistic Solution Connecting a Global Workforce

Enabling Enterprise 2.0

Customer Hubs Deliver on the Failed Promises of CRM

Live Webcast - Ensuring Business Services Delivery

Top 10 Ways to Protect Against Web Threats

The Case for Business Software Assurance ~ Securing Your Applications

Secure your virtual and physical environments with the same software.

Tripwire and Visible Ops: A Four-Phase Approach to Instituting Change Management

The Benefits of Data Deduplication for Data Protection in the Enterprise

Reap the Benefits of Unified Communications