What do you do if your strategic decision making in Information Systems is putting your organization at risk?

1 Risk Assessment

A comprehensive risk assessment should be your immediate action. Evaluate the decisions you've made, focusing on their impact on data security, system reliability, and overall business operations. Consider the potential for data breaches or compliance violations. This assessment should involve all stakeholders and include a review of existing controls, policies, and procedures. By identifying vulnerabilities, you can prioritize which areas need immediate attention and which can be scheduled for later review.

2 Decision Review

Next, scrutinize the decision-making process that led to the risky situation. Did you rely on outdated information, or were there gaps in your understanding of the technology involved? It's important to address these shortcomings by ensuring that future decisions are based on accurate, up-to-date information and a thorough understanding of the IS landscape. Consult with IS professionals and consider engaging external experts if necessary to gain a broader perspective.

4 Implement Controls

To mitigate risks, implement new controls or strengthen existing ones. This could involve more rigorous IT security protocols, enhanced data encryption, or stricter access management. It's also critical to establish a regular monitoring system to detect and respond to threats quickly. Employee training is equally important; ensure that everyone understands the new controls and the role they play in maintaining the organization's security and integrity.

5 Communication Plan

Developing a clear communication plan is vital for managing the fallout from risky IS decisions. This plan should outline how you will inform internal and external stakeholders about the issue and the steps you're taking to address it. Transparency is key to maintaining trust and managing your organization's reputation. Keep communication channels open for feedback and be ready to adjust your approach based on stakeholder input.

6 Ongoing Evaluation

Finally, commit to an ongoing evaluation of your IS strategy. The technology landscape is constantly evolving, and what works today may not be sufficient tomorrow. Regularly review your IS policies, procedures, and infrastructure to ensure they continue to align with your organization's goals and the latest industry standards. This proactive stance will help prevent future risks and keep your organization on a path to success.

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?