Get the basics right
Doing the basics correctly and consistently is not ‘Sexy IT’. It’s not cutting edge or headline grabbing. In fact, if you don’t communicate ‘Why?’ correctly, it can be seen to be an utter hassle.
But if you don’t get the basics right, it can also grab headlines. Just not good ones.
“…the business reiterated that it did not design and maintain effective program change management controls to ensure that IT programs, data changes and migrations affecting financial IT applications and underlying records are identified, tested, authorized and implemented appropriately…It failed to effectively implement user access controls to ensure appropriate segregation of duties, restricted user and privileged access to financial applications, data and programs to the appropriate personnel.”
As more attention switches to supply chain weaknesses, I’d suggest fixing the basic issues should take a lot less than two years.