Data is an Asset. Treat it as Such. In today’s rapidly evolving business world, the lines between technology and business have blurred. Organisations need to modernise and transform their technology in order to successfully compete. CIOs play a critical role in transforming the world of work using automation and technology – but they can’t do it alone. Collaboration among the C-suite is critical. In this blog series, Protiviti’s Technology Consulting leaders share insights on the key areas CIOs need to consider on the transformation journey and the impact across the C-suite and business. Topics Cybersecurity and Privacy Data is the building block of business. If a company loses its data or if its data is compromised, it could significantly damage the business in terms of financial performance, brand reputation or loss of customers. Executives understand that data is an asset when it is transformed to bring value. Whether an organisation leverages data to fundamentally run its business, the data is a byproduct of conducting day-to-day operations, or the business sells the data assets as a unique product, data must be managed, protected, traced and updated. The importance of valuable data is even more amplified as an enterprise undergoes digital transformation. CIOs must be deeply involved in unlocking and protecting the organisation’s data to gain its full value as an asset. Data that is not properly integrated will cause enterprise transformation to fail. CIOs who want to modernise their application architecture or any other architecture must have a data structure, know where their data originates, and understand its lineage and how it interacts with operational flows. Fragmented and uncontrolled data impede technology modernisation. Thus, fundamental data challenges must be addressed to enable full value. When an organisation’s data is scattered, vague and unmanaged, time and money must be spent correcting these deficiencies prior to technology modernisation. While many organisations have access to sufficient technology, they do not have a process, discipline and the fundamentals to leverage data as an asset, and therefore aren’t getting the anticipated return on investment. To optimise data for enterprise transformation, CIOs must: Understand the organisational strategies for driving value from data Implement a data workstream Understand the past to arrive at a desired future state Focus on people to extract legacy information Brainstorm new ways of working Understand the organisational strategies for deriving value from data The purpose behind collecting and retaining data is to meet business objectives. A key for driving and treating data as an asset is to first value that asset by understanding how it is used within the organisation. IT professionals must fully understand the business strategy and then provide guidance for how to collect, store and protect the data assets needed to drive to that strategy. In any digital transformation, data is essential, so clearly this alignment must occur. Implement a data workstream It is important that data not be an afterthought in technology modernisation efforts. On the contrary, organisations must understand the origins and characteristics of their data, including whether it contains personally identifiable information (PII), as well as the requirements to manage it. Organisations should develop and implement a dedicated data workstream, including integrating and harmonising data from different systems and addressing data timing, including real-time, near real-time and batch data. Organisations that do not develop data as a workstream will reap subpar results — at best — from their modernisation efforts. Understand the past to arrive at a desired future state CIOs must understand their organisation’s legacy architecture and desired future state, and they must bridge the gap between the two. Technology environments are layered with multiple years of various technologies. As an organisation implements new technology year after year, a mixture of techniques and programming are deployed, each of which pose unique data challenges. Disassembling old data structures and reassembling them for a future state requires unique skill sets, including a strong understanding of legacy systems. Focus on people to extract legacy information The talent shortage of workers with experience in legacy systems is a real and prominent challenge for many organisations. As an aging workforce looks toward retirement, organisations risk losing valuable information about their legacy systems, and will be challenged to find replacement candidates who can understand why legacy systems were built the way they were (many decisions were made for good reasons but caused complexity). To proactively address this problem, CIOs should implement focused programmes to gather institutional knowledge and legacy systems information from internal subject matter experts while they can, and then should use data governance techniques to persist this knowledge. This will ensure the organisation is in a good position to implement new technologies. Brainstorm new ways of working The old way of working, now obsolete or becoming obsolete, applied a siloed resources method where various resources (data analyst, mapper, architect, ETL resource and API developer, etc.) were used to perform tasks. Today’s organisations are looking for new ways of working and are engaging full-stack developers and engineers who can perform a broad range of technology skills. Companies want a single team that can build and have security overlays and operations — without calling in specialised resources at every turn. This makes it possible to continuously develop and build applications while incorporating security and operational aspects throughout. Companies can adopt new ways of working by addressing remote working arrangements and building best-of-breed technologies into their models. Companies should also seek out resources with the right skill sets in the right locations and for the right price to address data DevSecOps or continuous development, continuous security, continuous improvement and continuous operations. Holistic collaboration brings company-wide modernisation Collaboration across the enterprise is essential to optimising the modernisation of the organisation. Addressing only one function or department’s transformation may be detrimental if consideration is not given to other functions or departments. Therefore, a holistic collaboration brings company-wide transformation, as opposed to only partial transformation. C-suite members each have unique concerns about the integrity of data and the extent to which it impacts their respective functions: Chief Risk Officer (CRO) The integrity of the data being applied in risk models is of utmost importance to the CRO because if the data is not reliable, true risk cannot be properly determined. Chief Financial Officer (CFO) Financial reports, including audited financial statements for public companies, are based on data in the general ledger. To the extent the data is not reliable, there could be severe consequences, including financial statement restatements and inaccurate valuations. Chief Audit Executive (CAE) and Chief Data Officer (CDO) A collaboration triangle should be formed among the CIO, CAE and CDO. Their communications support the organisation’s audit activities as the CDO (for public companies) ensures that all controls are performing as intended (especially for compliance purposes), the CAE ensures controls are properly defined and the CIO supports the technical aspects of the audit function. Chief Compliance Officer (CCO) Confirming that the right people have the right access to the right data is of utmost importance to the CCO for compliance purposes. Therefore, understanding and securing the parameters and permissions for access to data is paramount. What should companies do now? To gain full value of their data, organisations must ensure that it is understood, tracked, optimised and controlled. As they move through their transformation efforts, companies should: Understand their data ecosystem, including where the data resides and how it is transformed and leveraged. Understand the relative value of data within the data pipeline and eliminate data sources that are not needed for business purposes. Know what data is being acquired from outside vendors and how it is being used internally. Don’t buy, keep or ask for more data than the organisation needs. Eliminate irrelevant, erroneous and duplicative data from the environment, depending on the organisation’s industry and how controlled its environment is. Create a golden source of data across the data ecosystem to ensure accuracy and consistency. CIOs must work with leadership across the entire organisation to resolve fundamental data challenges if they are to achieve a successful technology transformation. A focus on correcting deficiencies and developing a process and discipline for managing and protecting data through proper governance will ensure the organisation transforms and leverages its data for maximum value. Next up in our Technology Modernisation and Transformation series, we’ll discuss key considerations for the CIO on Data Governance. Stay tuned!