Podcast

Secure by Design: Rethinking Process, Control, and Adaptability

Digital transformation is often approached as a technology project: identify an outdated system, select a replacement, implement it, and move on. But as James Davies  explains in this episode of Tech Transforms, true transformation requires a fundamentally different approach—one built around outcomes, adaptability, user experience, and continuous improvement.

Drawing on a career that began on the help desk and eventually led to running a software company, James shares how firsthand experience with users shaped his approach to technology leadership. He argues that organizations should begin modernization by understanding what employees and customers are actually trying to accomplish, rather than starting with a software platform.

Carolyn and James explore the value of composable architectures that allow organizations to integrate best-of-breed technologies and replace individual components as needs change. That flexibility becomes increasingly important as AI accelerates software development and introduces new capabilities that organizations may want to adopt without rebuilding their entire technology environment.

The conversation also examines one of the biggest sources of inefficiency inside large organizations: the handoffs between teams. Processes that cross HR, finance, procurement, IT, security, and other functions often rely on emails, spreadsheets, shared mailboxes, and disconnected systems. James explains how organizations can create a more unified user experience while allowing individual teams to continue working within the systems that support their functions.

Security is another critical part of the discussion. Rather than adding security requirements after a system has been designed, James advocates building security, governance, access controls, and auditability into the architecture from the beginning.

They also tackle shadow workflows and the continued reliance on spreadsheets. Instead of blaming employees for creating workarounds, James encourages leaders to understand why those tools emerged in the first place and use them as signals of where processes may need improvement.

Finally, the conversation turns to vendor lock-in and why it represents more than a financial concern. Organizations that become overly dependent on a single technology provider can lose the ability to respond quickly to new technologies, changing requirements, and emerging AI capabilities. A composable approach can help preserve that agility.

For leaders wondering where to begin, James offers a straightforward first step: inventory your processes, establish a baseline, understand the outcomes you want to achieve, and then determine where modernization can deliver the greatest impact.