Your IT Organization Was Built to Keep the Lights On. Can It Lead What Comes Next?
Created on 2026-07-23 12:27
Published on 2026-07-23 12:43
Why AI, Cybersecurity, Data, and Automation Challenges Are Often Operating Model Challenges.
By Lavlesh Lamba
Most organizations believe they have an AI challenge; Or a cybersecurity challenge; Or perhaps a data, analytics, or automation challenge.
In my experience, many actually have something more fundamental:
An IT operating model challenge.
As AI, cybersecurity, advanced analytics, automation, OT/IT, and/or digital platforms become core business capabilities, executive teams are asking technology organizations to deliver faster, innovate more aggressively, and scale globally.
Yet in many companies, these strategic capabilities are still managed as side responsibilities.
AI is added to an applications leader's portfolio.
Cybersecurity sits alongside infrastructure operations.
Data ownership is fragmented across functions.
Automation advances through isolated initiatives whenever resources become available.
The ambition is strategic. The ownership is part-time.
When progress stalls, organizations often question the technology, the talent, or the pace of change.
But the underlying issue is frequently much simpler:
Operational responsibilities will always crowd out strategic transformation when both compete for the same people, capacity, and attention.
This is not a commitment problem.
It is an organizational design problem.
And it's becoming one of the most important leadership challenges facing CEOs, CIOs and technology executives today.
The New Reality: IT Has a Dual Mandate
For decades, IT's primary mission was clear:
Keep the business running.
That responsibility remains critical. Every organization still depends on reliable infrastructure, secure systems, stable applications, responsive support, and operational continuity.
But today, that is only half the job.
Modern technology organizations must simultaneously:
Protect and operate today's business
Build the capabilities required for tomorrow's business
I call this the Dual-Mandate IT Operating Model.
One mandate focuses on operational excellence:
Reliability
Security
Service quality
Cost management
Risk mitigation
The other focuses on business transformation:
AI and GenAI enablement
Data and analytics
Automation
Platform modernization
Digital innovation
Enterprise simplification
Both are essential.
The challenge is that they do not naturally coexist.
Without intentional design, urgent operational demands consistently consume the very time, talent, and resources needed to build future capabilities.
The result?
The organization stays busy.
Transformation moves slowly.
Start With the Future, Not the Org Chart
One of the biggest mistakes organizations make is beginning with the question:
"How should IT be organized?"
The better question is:
"What capabilities will our business need from technology over the next three to five years?"
Before redesigning an IT organization, leaders should understand:
Growth ambitions
Geographic expansion plans
Customer expectations
Regulatory requirements
Risk tolerance
Digital maturity
Capacity for organizational change
Only then can they determine whether the current operating model can support future business needs without adding unsustainable complexity, cost, or risk.
When organizations outgrow their operating model, the symptoms are often obvious:
Fragmented systems
Duplicate tools
Inconsistent standards
Rising technical debt
Limited cross-regional visibility
Knowledge concentrated in a few individuals
Strategic initiatives repeatedly delayed by operational priorities
These aren't simply technology problems.
They are signals that the operating model was designed for a different stage of the business.
Strategic Capabilities Require Dedicated Ownership
One observation consistently emerges across organizations:
A strategic capability without an accountable owner is an aspiration.
Capabilities such as:
AI & Machine Learning
Cybersecurity
Enterprise Data & Analytics
Automation
Enterprise Architecture
Digital Workplace
Global Service Delivery
need more than sponsorship.
They require leaders with clear accountability for:
Strategy
Roadmaps
Standards
Investments
Talent
Risk
Performance outcomes
Just as importantly, they need authority.
Assigning accountability without decision rights, funding, or influence creates one of the most common organizational failures:
Leaders are held responsible for outcomes they are not empowered to deliver.
This helps explain why changing titles and reporting lines rarely creates meaningful transformation.
The organizational chart is an output of the operating model. It is not the operating model.
Final Thought
When major technology initiatives continuously struggle to gain traction, executive teams should pause before blaming the platform, the technology, or the people.
Instead, ask a more important question:
Have we created an operating model capable of delivering what we're asking IT to achieve?
An IT organization designed solely to keep the lights on will naturally prioritize operational stability.
A strategic technology organization must do something more difficult:
Operate today's business while intentionally building tomorrow's capabilities.
The organizations that succeed in the AI era will not simply deploy better technology.
They will build operating models designed to continuously create new capabilities, scale innovation, and translate technology investments into business outcomes.
And that may be the most important competitive advantage of all.
What are you seeing in your organization?
Is AI, data, automation, or cybersecurity being managed as a strategic capability with dedicated ownership, or is it still someone's second job?
I'd be interested in hearing how other technology leaders are balancing operational excellence with transformation at scale.
#CIO #DigitalTransformation #AI #TechnologyLeadership #OperatingModel #Cybersecurity #DataStrategy #EnterpriseArchitecture #ITLeadership #Innovation #GlobalIT #FutureOfWork
