IT managers and policy ownership

An IT manager is the person who usually writes an organisation's IT policies: the rules that tell staff how to use systems safely and consistently. They are well placed to do this because they understand how the organisation's systems work and what can go wrong. They turn legal requirements into clear rules staff can follow, for example keeping personal data secure, and they do the same for business needs, such as letting staff work from home.

Reviewing policies

Writing a policy is not a one-off job. IT managers review policies regularly to check they are still suitable, and they recommend how policies should be updated. A review may be triggered by a security incident, a change in the law, new software or a new way of working. For example, at a chain of pet supply shops, the IT manager reviews the remote access policy after branch managers begin checking stock levels from home. The manager recommends adding a rule that company laptops must connect through the organisation's secure service before stock records can be opened. This closes a gap before it causes a problem.

Taking ownership

Ownership means the IT manager is accountable for making a policy change actually happen, not just suggesting it. They might plan the change, arrange training, explain to staff what is different and check that the new rules are being followed. They do not have to carry out every task themselves. IT and technical staff may update settings or reset accounts, while the IT manager sets the direction and makes sure the work is completed.