Cybersecurity and identity management projects need multi-year funding and planning, not one-time rollouts. Early adoption often stalls at 10%, with full user adoption taking two or three years. Without sustained resources built into the business plan from the start, these investments fail and organizations waste money.
I think you've got to not just move on to the next thing. Like sometimes, like you have a big go-live for a project or a system and then next year's projects come up and it's like, well, I've got fumes remaining in my gas tank for the stuff that I did last year. So that's a resourcing thing. That's a leadership issue. That is something that needs to be built into a business plan upfront, not an afterthought after a project's already done. And that's really where I see a lot of these technology investments kind of die on the vine. Because you don't get the results you want out of the gate. Maybe you have 10% adoption of an identity access management solution and you're not even getting to a quorum of adoption until maybe year 2 or 3. Like, did you plan on that in your investment? Did you ask for that money? Or are you going back to the well and being like, well, we're still kind of not doing well with this service. It's mild adoption. I built it and they did not come.
