An internal audit had just been completed that had been launched prior to me coming and after my
predecessor had left. . . And the audit was initiated by the CFO and the Provost. Ostensibly, to give me
some traction on a number of things. I think there is a little of, you know, “Be careful what you wish for”
regret on their part, because as you can imagine, it revealed a boatload of issues. Which, again, as a new
CIO I was grateful for, because it did give me traction. I don't think executive leadership understood quite
how costly it would be to fix it, the implications of not fixing those things and the resource allocation. Not
simply as a onetime solution, but as an ongoing; as well as, the formalization of policies and practices. . . I
think there was the assumption that I would go out buy some applications, install and everything would
be fine. And, the awareness that has developed over the last 6 months has been that we first need to
make some policy decisions. We need to be able to enforce those policies. We need to be able to define
and document business processes. And then the technology, sort of, comes along or is relevant. So, I
would say the trend is that prior to me coming here there was zero awareness. There is increasing
awareness that is occurring. The behavioral change is glacially slow and so, I see my work right now
being to educate at the executive level. — CITO, Institution D