With the increase use of technology, in all aspects of life, the company’s IT department is becoming a strategic asset. This transformation forces the CEO and CIO to work together, in order to increase innovation and to implement successful strategies, to meet the needs of the future (Reiser &
Short, 2014, p. 4). Therefore, when deciding on IT priorities, all options need to be considered carefully. Even though not all IT projects can be considered as producing seeable customer value and ROI, they are necessary, either for legal and security reasons, which are mandatory, or for creating future options for investments. Out of those, one of the most important issues that need to be focused on is infrastructure security, which is often ignored, due to the fact that it’s costly and seemed unnecessary to the business units of the company. CIOs might encounter resistance from the other business units to use some of their budget towards an area that is considered technical and doesn’t bring value for their units. According to Austin (2007) by formalize the process of prioritizing the resistance will decline. processes should have three phases. First, the process of deciding on the level of priorities needs to be made by all business units. Each unit will have a representative in the committee, who has decision-making authority. Second, the process needs to be completely transparent to all units. Everyone needs to know what the consequences will be for each path the committee decides to go with and what the process will be. Lastly, all units need to agree to stick to the agreed
