IN their quest to enhance long-term business growth, corporate boards of directors juggle a number of responsibilities, including technology oversight. Yet even as technology cements its status as a vital linchpin of business strategy and operations, many boards do not have the appropriate technology knowledge to oversee critical technology-driven initiatives, opportunities, and threats. In 2016, more than 85 percent of new board seats were filled by CEOs, COOs, or presidents (38 percent); those with financial backgrounds (25 percent); or business, division, or other functional leaders (23 percent).1
Based on a comprehensive analysis of data on public companies and a series of phone interviews, this report contends that technology expertise has become a key criterion for corporate board appointment, one that likely cannot be ignored. (See appendix for research methodology.) It outlines steps that directors and CIOs can take individually and collectively to bridge the boardroom’s technology gap.
Our analysis finds that the number of technology-focused directors—those with meaningful technology experience—on public company boards is low, and that many executive boards are only beginning to add technology expertise. The percentage of public companies that have appointed technology-focused board members has grown over the last six years from 10 percent to 17 percent. However, this figure almost doubles (32 percent) for high performers—companies that outperformed the Standard & Poor’s 500 Index (S&P 500) by 10 percent or more for the past three years. Although having a technology-focused director may not be the sole reason for performance success, many high-performing companies appear to recognize the potential advantage of having technology expertise in the boardroom (figure 1).
The data indicate that many boards provide IT oversight and guidance without sufficient technology knowledge. Adding a technologist to the board roster can bring both new skill sets and fresh thinking to the boardroom. Business-savvy technologists can help directors better oversee technology issues such as risks beyond cybersecurity, opportunities and disruptions, complex digital transformations, and technology spending.
Risks beyond cybersecurity. Even as technology delivers value, it can create vulnerabilities. Security threats remain a top focus of corporate boards, but technology-related risks can extend far beyond cybersecurity to data protection and privacy, business resilience, and intellectual property protection. The rapidly changing business environment and competitive landscape leave little room for error or delay—a missed IT deadline or failed project implementation can negatively impact the business. Technologists can help boards understand and anticipate such business disruptions and guide risk mitigation discussions beyond cybersecurity.
Opportunities and disruptions. Technology can rapidly obsolesce businesses—or entire industries—even as it creates opportunities. Virtually every industry is on the verge of technology disruption. For example, free online courses, telemedicine, and robo-advisors can pose the risk of disruption to their respective industries, but can also offer opportunities for growth. A technologist can be well-positioned to explain the promise, hype, and threat of such technologies to the board to help it make better business and strategy decisions.
Complex digital transformations. Digital is more than a set of technologies—it is a new way of operating. Digital transformations can require a ruthless focus on organizational agility, data analytics, rapid prototyping, and customer needs across all aspects of the business. Savvy technology leaders can contribute by helping boards oversee complex digital transformations and corresponding technology and process integrations.
Technology spending. IT spending is a major part of corporate budgets and continues to increase. Thirty-seven percent of participants in the Deloitte global CIO survey say that their technology budgets increased by up to 20 percent since the last fiscal year, while 12 percent say their budgets increased by more than 20 percent.2 Boards are tasked with spending oversight and governance, but without a technologist’s insight, they may view technology spending as opaque. Just over a third (34 percent) of corporate directors surveyed say their board is not sufficiently or at all engaged in overseeing/understanding the company’s annual IT budget.3
Relevant IT know-how can dramatically change board discussions and perspectives. Some boards employ external experts or consultants to meet this need, but outsourcing this function is an approach that can frequently lack accountability, eschew specific business context, disregard the organization’s technology capabilities, or rely on generic recommendations. Boards can address this deficiency through a three-pronged approach: appointing a business-savvy technologist to the board, taking a more offensive technology position, and considering a technology committee.
Appoint a business-savvy technologist. Although current or former CIOs, CTOs, CISOs, and other C-level technology leaders could provide valuable input and perspective to boards, Deloitte’s analysis indicates that only 3 percent of all public companies appointed a technologist to newly opened board seats in 2016 (figure 2).
Although experience managing technology operations is critical, business acumen and a strategic mind-set can be more important. “There are primarily two types of CIOs, those that keep the lights on and those that focus on transformation,” says Manny Fernandez, who has served in several executive and board leadership roles. “The latter have moved to impact revenue and these are the ones that capture the attention of the board.”4
Many of today’s CIOs fit the bill: Fifty-six percent of them have had leadership experience outside of IT.5 “If a board is looking for a qualified technology person, they’re going to find a large percentage that are strong on technology but also good business people,” says Wayne Shurts, EVP and CTO of Sysco and a former member of the board of Con-way Inc. “Most CIOs didn’t get to the C-suite just by being a geek.”6
“I look for people that have horizontal experience versus only vertical experience,” says one board leader. “An effective board member ultimately has to be able to go broad as a business person and a technologist.”7
Take an offensive technology position. When it comes to technology, boards with a proactive approach may have an advantage over those that maintain a purely defensive position. Boards can go on the offensive by involving the company CIO in board meetings on a proactive and ongoing basis. “CIOs can help companies play offense, and the burden is on the board to be more interested in that,” says Shurts. “But the burden is on the CIO to make the case that IT is more than cyber and risk management, and it’s more than a cost center.”8
CIOs often interact with the board less frequently than other members of the C-suite whose roles are more historically enmeshed with board requirements. As CIOs’ business responsibilities evolve, boards are slowly increasing the level of communication and engagement with CIOs: In 2016, 25 percent of directors reported that they met with the CIO at every formal meeting, up from 18 percent in 2012.9
Deloitte CIO Larry Quinlan acknowledged that CIOs alone cannot shoulder the burden of an offensive approach to technology. “Although technology is the key enabler, it isn’t the business,” he told us. “A business unit leader has to step up and help the CIO drive the conversation about how technology enables their function.”10
To learn more about how boards can take a more offensive approach to technology, we sought first to understand the evolution of boardroom technology discussions. Our textual analysis of 10-K filings found, unsurprisingly, that security-related issues such as cybersecurity, privacy, and risk have remained the primary technology topics discussed by boards between 2010 and 2015 (figure 3).
A more proactive approach to technology does not necessarily reduce a board’s concern about security and privacy, but it can provide additional space for technology conversations about technology-driven business opportunities and digitizing the enterprise.
Consider a technology committee. With responsibility for so many other oversight activities, some companies delegate technology oversight to the audit or risk committee—largely because of the importance of cybersecurity and cyber risk.11 Others have formed separate technology committees, although our analysis shows this is a rarity. Only 9 percent of S&P 500 companies had a technology committee in 2016, but this number has been increasing over time.
We reviewed the charters of more than 100 technology committees to understand their scope and responsibilities. Their mandates vary depending on company needs and industry requirements, but many boards use these committees to oversee their proactive technology moves. The charters include responsibilities such as strategy integration; review of technology disruptions in industry, market, and competition; and review of strategic technology investments and major technology. Some committees also include innovation and cybersecurity in their charters. In the long term, assigning these tasks to a technology committee could help relieve some of the time pressure faced by boards (and other committees) while still allowing them to oversee the joint business-technology agenda.
The technology committee typically includes representation from the board, executive management (that is, the CEO or CFO), and a director with a technology background. It can serve as the primary link between the board and the growing number of C-suite executives responsible for various aspects of technology (for example, the CIO, CTO, CISO, chief digital officer, and chief data officer). Establishing a board committee has some overhead associated with it and could have other potential downsides. For example, some committees might make critical decisions that should be left to the full board, or conversely, they might micromanage activities. However, especially over the long term, the benefits of a technology committee likely outweigh the potential downsides.
With or without a technology committee, a board can begin its foray into technology oversight by seeking CIO input on five questions. The answers likely will help boards understand and evaluate their companies’ current state of IT and provide a starting point for what will hopefully be an ongoing conversation with the CIO.
Part of the responsibility to bridge the boardroom’s technology gap lies with the CIO. As their engagement with the board increases, CIOs likely will need to become more strategic. “CIOs have to be able to communicate and approach problems in business terms, not just technology terms,” says one CIO.15
Another CIO told us, “The role of the CIO isn’t to go to the board to talk about every project that we’re doing. It’s to talk about how we want technology to operate across the organization and how we’re making investments to support that.”16
Here are some steps CIOs can take to better engage with their boards.
Technology still helps businesses “keep the lights on,” but it can also be a powerful force for driving business growth and performance. As a result, many corporate boards are beginning to rethink the function of technology in their organizations and consider how they can create a more tech-savvy boardroom.
Likewise, many CIOs and other C-level technologists are realizing that developing broader business skills positions them to help deliver technology’s transformation potential to businesses at both the strategic and operational level. The alignment of boards and technologists can help businesses drive growth, increase competitive advantage, and effectively manage risks. “Many boards today still look like they did 20 years ago,” says a board leader. “It used to be good to have a bunch of CFOs in the room, but we are at a crossroads in corporate board structure. We need to get to the point where the majority of the board is tech-savvy.”20
The foundation of the report is an analysis of data on board directors, their roles and responsibilities, director demographics, and other relevant information in the extensive BoardEx database, which contains over 880,000 unique directors and 1.3 million companies spanning more than 200 countries.21 Our analysis is based on BoardEx data pulled in October 2016.
Companies. We refined the data by eliminating the smallest companies and those that had not been in existence long enough to establish a clear track record of board activity, examining only those companies that reported market capitalization numbers. The end result was a list of 4,139 US public companies and approximately 221,000 directors.
We were interested in examining differences among all public companies, companies listed in the S&P 500, and companies that outperformed the index. High-performing companies were identified by a single measure: companies listed in the S&P 500 index whose stock price outperformed the index by 10 percent or more for the past three years. Among 494 S&P 500 companies, 131 met that criterion.
Technology experience. To determine whether a director had technology experience, we examined the lifetime experience and participation of every director, not just their current position. Had these individuals, in both their current and prior roles, demonstrated technical acumen? We used this lifetime view to explore key attributes of senior technology leaders and their participation on boards as directors. We specifically defined a senior technology leader as one who currently holds or has previously held a number of core positions, including:
To trace directors who have held senior technology positions throughout their career, we constructed a flag that would follow each director from position to position. Our final dataset contained 12.9 million records, 405,040 of which were related to senior technology leaders. We analyzed over 18,427 senior technology leaders, of which 7,678 were associated with companies of interest. We defined board participants as those whose board position flag was set to "yes" within the database.
Technology terms. To understand how discussions about core technology concepts have evolved over time, we performed a textual analysis of annual financial filings with the SEC—10-K statements. To better understand this evolution, we analyzed more than 61,000 filings, spanning 20 years, from 7,925 companies—those with at least $1 million in reported annual revenue. These filings were secured directly from the SEC Edgar database. When we performed the textual analysis of SEC 10-K filings, a large portion of public companies had not yet made their 2016 SEC filings. Therefore the textual analysis does not include 2016.
We defined core technology concepts into 10 umbrella categories and grouped key technology search terms in each category.
Interviews. Finally, to gain additional insight, we supplemented the the data analysis by conducting phone interviews with several board directors and CIOs.