A technology transformation can have a detailed plan, a confident delivery team and a reassuring board report. None of those, on their own, establishes whether the investment should proceed.
The board's job is to understand the decision in front of it, the evidence supporting that decision and the consequences of getting it wrong. These are the questions I would put to an executive sponsor before approving a major technology transformation or releasing its next tranche of funding.
What business outcome are we buying?
Start with the business. A platform replacement, cloud migration or new operating model is a means to an end. What changes for customers, staff, cost, resilience or control once the programme is complete?
Ask who owns that outcome, how it will be measured and which assumptions connect the proposed technology to the expected benefit. If success is described only as going live, the investment case is incomplete.
What does the delivery evidence tell us?
A milestone date is a commitment, not evidence that the work can be delivered. Ask about dependencies, resource constraints, testing, migration readiness and the basis of estimates.
Where dates or costs have changed, establish what has been learned and whether the revised plan reflects it. A revised baseline that simply moves the deadline leaves the underlying delivery question unanswered.
Reporting should distinguish completed work from forecast work, and verified evidence from management confidence. That distinction matters most when the next decision is difficult to reverse.
Who can make the decisions that delivery depends on?
Programmes often depend on decisions beyond the project team's authority: changes to business processes, supplier commitments, funding, data ownership or acceptance of risk.
Identify the executive who can resolve those dependencies. Ask which decisions are overdue, what their delay means and how escalation works. A governance structure has value only if it gets consequential decisions made.
Which risks are being carried into the business?
Delivery pressure can move unresolved issues into the operating environment. Ask about cyber exposure, architectural constraints, service continuity, recovery, data quality and the capability required to run the new service.
For each material issue, the board needs an owner, an understood consequence and a decision. A risk register with many entries can still conceal the few exposures that should determine whether approval is given.
Are supplier commitments strong enough?
Establish which outcomes depend on suppliers, what their contracts actually cover and where responsibility passes between parties. Examine delivery commitments, acceptance criteria, support arrangements and what happens when performance falls short.
Good working relationships are useful. They do not replace clear commercial accountability. The sponsor should understand where the organisation remains exposed even if each supplier meets its individual obligations.
What would make us pause or change direction?
Agree the conditions for intervention before they are needed. These might concern evidence of testing, unresolved control weaknesses, critical dependencies or a material change to the business case.
Ask what options remain: proceed, narrow the scope, sequence delivery differently, commission further work or stop. A board that receives only a recommendation to continue has limited visibility of the judgement behind it.
When is independent assurance warranted?
Independent challenge is useful when the stakes are material, confidence is falling, reporting conflicts with experience or the sponsor needs an objective view at an investment decision or stage gate.
It should examine the evidence behind the recommendation and identify what leadership needs to decide. It should also be explicit about gaps, access limitations and conclusions that cannot yet be supported.
My Transformation Assurance assessment provides a defined review of delivery, governance, architecture, cyber risk and commercial dependencies. For the distinction between assurance and programme reporting, read what transformation assurance is.
I bring executive experience from technology and cyber security leadership in regulated investment management. If you have an approval, stage gate or recovery decision approaching, discuss the decision with me. Scope, timing, evidence and fees are agreed before an assignment begins.
