Alan Calder on IT Governance, information security & ISO 27001

ComputerWeekly reports some timely research on what it takes to succeed as a CIO, based on work by a visiting fellow at Cranfield School of Management. She has talked to CEOs who first climbed the IT ladder, and also to CEOs about what they look for in a CIO. Her ten findings all make excellent reading, and she is bang on target with her number one conclusion:

“CIOs should become business people

Learn about general management, demonstrate enthusiasm for business matters and acquire knowledge of your industry sector. CIOs should talk business language not technical jargon. Focus on driving revenues up rather than cutting costs. And, don’t forget you cannot network enough. My CEOs, when in the top IT job, typically spent over 50% of their time communicating with non-IT people both within and outside their organisations. “

Not a sentiment you will often hear. However, Her Majesty’s Revenue & Customs (HMRC) has been rightly applauded over the matter of a stolen laptop. Not for the actual theft, of course, but for the security measures the laptop contained (password protection and ‘powerful’ encryption software) and, in particular, HMRC’s openness and honesty in coming clean about the incident quickly.

The potential loss of one’s personal data is a serious concern, so it is vital that anyone affected gets to hear about the event as quickly as possible. Full marks to the taxmen for their professional conduct and to Silicon.com for its Full Disclosure campaign, which is putting some welcome and well directed pressure on the government.