Nov 20, 2018 - 05:37 AM
Nov 21, 2018 - 02:56 AM
However - if your manager is not giving you a guide (they do not need say all to justify their actions) to why this is happening, and it is happening alot I would just keep records and notes of this type just in case it lands on your head later. There is a time for creative truth, but not when there is a substantial issue.
For the "reporting the brutal scary" truth, I would just do it. But ensure there is a practical solution to go with it. We have identified a shortfall XXX created (monetary value) because YYY (so they know you know why and it won't happen again), I believe the best resolution for the business is ZZZ (purchase/remove/confess all at feet of vendors sobbing wildly hoping they will give you a discount).
This shows you have found an issue plus have a resolution and know it shouldn't happen again becuase you can change process - how could they fire you after that?
It's better for the board to know which risks they are sitting on than have a cash surprise (that might upset the shareholders for example) later - which is more likely to get you fired.
Saying all this - each situation is diferent. Honesty is still the best policy.
Nov 26, 2018 - 03:44 PM
Speak the truth as high up the chain as you must, speak it clearly with solid facts to back you up. Avoid direct confrontation and if required leave some room if you can, for anyone that might be involved to save face. I've had to bring up touchy subjects more than once, the kinds of subjects that get C team folks questioning why they ever hired some ITAM guy in the first place.... It is never comfortable, but at some point, at some level, $'s count and risk is unacceptable... Perhaps your issue isn't so much the message you are trying to communicate but the audience.... at which point I'd advise you to try another audience all togehter. If the CIO doesn't want to hear "it", try the CFO, or CISO....
Dec 07, 2018 - 07:25 AM
In the short run, ITAM should proactively set expectations with and enlist the support of GRC.
In the long run, our profession can eliminate 'integrity issues' by adopting a code-of-conduct that is taken seriously by practitioners.
Ethics plays a major role in every major profession. In fact, a profession’s hallmark is its claim to professional integrity.
Physicians can be stripped of their medical license. Accountants can have their CPA license revoked. Attorneys can be disbarred.
Professional integrity must be taken seriously by practitioners first. Violations must have consequences and violators must but kicked out of the club.
A good start would be for the ITAM community to create a code-of-ethics and bright-lines test.