GxP AI Deep dive: AI Consulting Security Deep dive: Security Awareness Training Strategy Deep dive: Strategy About Book a call
Language
IT Strategy & Leadership

From where you are,
to where you need to be.

IT evolves organically — systems get added, teams grow, data accumulates, decisions get deferred. After a few years, no one has the full picture. Start with an honest assessment of your technology, your data, and your team. Plan what needs to change. Bring in senior leadership to deliver it when you need it. You pick where you start.

— terra incognita — — hic sunt roadmaps — The Road of Decisions Plains of Pain Denial Flats STAGE 01 · ASSESSMENT Basecamp of Findings Budget Pass STAGE 02 · STRATEGY Roadmap Ridge Integration Swamp STAGE 03 · INTERIM Delivery Valley Sea of Relief N 0 12 MONTHS
When this conversation starts

The trigger isn't usually a crisis. It's accumulated uncertainty.

Most companies that engage us don't have their IT on fire. They have a quieter problem: IT grew to match the business as it was, and no one's stepped back to check if it still fits where the business is going.

Trigger 01 · The board is asking

You're being asked questions IT can't fully answer. "Are we secure enough?" "What's our cloud strategy?" "Why are we spending X?" — without an independent view, the answers sound defensive.

Trigger 02 · Organic drift

Systems got added over years, each for good reasons. Now no one has the full map. Integrations are patchy, ownership is unclear, and the team's running on institutional memory.

Trigger 03 · Succession or gap

Your IT Director is leaving, taking a sabbatical, moving to another role, or you've been running without one. Six months without senior IT leadership compounds quickly.

Trigger 04 · Growth outpacing setup

You've scaled past the IT you built for an earlier stage. What worked at 50 people doesn't work at 200. Systems, team, and governance all need to catch up.

Trigger 05 · Audit or compliance event

Something surfaced gaps. Or you're heading into an audit, certification, or investor diligence and realise the house isn't quite in order.

Stage 01 · Independent IT Assessment

The honest starting point. A clear picture of where you are.

Most IT assessments stop at technology. Ours looks at three dimensions at once — the systems you run, how your data and organisation are structured, and whether the team you have can run the future you need. The output isn't a scorecard. It's a map from where you are to where you need to be, with the gap between them made explicit.

The three dimensions

Each dimension gets the same treatment: we establish the current state, define the target state based on your business trajectory, then identify the gap and what it would take to close it.

01

Technology

What you run, and how well it's running.

The systems, infrastructure, and security posture that run your business today. Including the parts no one talks about — end-of-life servers, integrations held together by scripts, vendor contracts no one's renegotiated in three years.

  • Infrastructure and cloud posture — what's running where, and why
  • Application landscape and technical debt
  • Integration architecture and data flows between systems
  • Security posture and known vulnerabilities
  • Vendor stack, contracts, and renewal exposure
  • End-of-life systems and upgrade paths
  • Disaster recovery and business continuity readiness

Typical findings: two to four systems nobody's audited in years, one vendor lock-in they'd forgotten about, and a security gap that's been on the "we should fix that" list since someone left three years ago.

02

Data & Organisation

How information moves, and where it lives.

Where your information actually lives, how it moves between systems, and whether that structure still fits how your business works today. The hardest dimension to see from the inside, because the people closest to it built it.

  • Systems of record — is it clear where the canonical data lives?
  • Data flow and integration patterns between systems
  • Duplication, inconsistency, and manual reconciliation
  • Master data management and governance
  • Process-data alignment — does the structure match how work actually happens?
  • Reporting reliability and source-of-truth clarity
  • Data ownership, access, and compliance posture

Typical findings: three copies of the customer list, two systems-of-record competing for the same data, and a reporting pipeline that breaks quietly when someone renames a field. The data usually isn't wrong. It's just not organised for the way the business works now.

03

Team & Capabilities

Whether your team can run what you have, and what you need next.

Roles and capabilities — not performance reviews. Can the team you have run the current setup well? More importantly: can it run where you're heading? Gaps here usually take longer to close than technology gaps, which is why we surface them early.

  • Current roles, responsibilities, and reporting structure
  • Capability coverage against current-state demands
  • Capability coverage against future-state demands
  • Under-capacity, over-reliance on specific individuals, and key-person risk
  • Outsourcing balance — what's external that should be internal, and vice versa
  • Hiring needs and realistic time-to-fill
  • Training, upskilling, and leadership development opportunities

We speak in roles and capabilities, never in individual performance. The assessment report names gaps in the org chart, not names in the team.

Typical findings: two missing roles that should exist, one role that's over-scoped for one person, and a succession risk no one's planned for. The future-state usually needs one or two senior hires the company hasn't budgeted for yet.

How we establish "where you need to be"

"Where you need to be" isn't a theoretical maturity model. It's derived from three specific inputs:

01

Your business trajectory

Growth plans, regulatory obligations, M&A activity, new market entry. What the business will demand of IT in 2–3 years.

02

Industry benchmarks, selectively

What comparable companies at your stage have typically found necessary. Used where it's useful, ignored where it's not.

03

What the assessment surfaces

Challenges and risks that only become visible during the engagement itself — the ones nobody flagged because nobody had stepped back to look.

Engagement shape

Duration depends on complexity, not on a fixed template. We scope after a first call — below are typical ranges:

Shape 01 · Focused

3–5 days

Companies ~20–50 people, single-site, straightforward IT landscape. Output: condensed findings report, prioritised gap list, executive summary.

Shape 02 · Standard

1–2 weeks

Companies ~50–200 people, moderate complexity, some regulated processes. Output: full three-dimension report, target-state profile, prioritised roadmap, board-ready presentation.

Shape 03 · Complex

3–4 weeks

Companies 200+, multi-site, regulated or multi-entity environments. Output: full three-dimension report, detailed gap analysis, investment framing, executive and operational deliverables.

What you take away

What happens next

About half our assessment clients take the findings and execute internally. About a third continue into a Strategy & Roadmap engagement to plan the changes in depth. A smaller group brings us in directly as Interim IT Director to deliver. There's no upsell pressure built into the process.

Field noteThe hardest conversation in an assessment is almost always about the team, not the technology. Systems can be replaced; org charts can't be, at least not quickly. We surface capability gaps early in the engagement — not at the final read-out — so leadership has time to think before the report lands.
Stage 02 · IT Strategy & Roadmap

The plan that survives contact with reality.

Most IT strategy documents are slide decks that get nodded at once and shelved. A useful strategy is different: specific about what changes and when, honest about what it costs and who does it, and structured so a new CFO or IT Director can pick it up two years in and still execute against it. Built to outlast the person who commissioned it.

What the strategy covers

Same discipline as the Assessment: three co-equal dimensions. The plan itself. The people who'll deliver it. The investment case that makes it viable.

01

The Plan

What changes, in what order, and why.

The technical and architectural direction, made concrete. Not "we should modernise our infrastructure" — specifically which systems change, which stay, what replaces what, and in what sequence.

  • Target operating model for IT — how the function should be structured 2–3 years out
  • Systems and application strategy — what stays, what changes, what's replaced, and when
  • Data strategy — information architecture, master data, integration patterns
  • Infrastructure and cloud posture — data residency, disaster recovery, network approach
  • Security and compliance trajectory — where the posture needs to be, by when, against what framework
  • Sequencing and dependencies — which changes unlock others, which can't happen until another is done

A real roadmap tells you what to do in Q1, Q2, Q3, and why. A useful one also tells you what to stop doing — the projects and contracts that were defensible five years ago and no longer are.

02

The People

Who delivers it, and how they're shaped to do so.

Every strategy needs people to execute it. Most strategy documents wave at this. Ours is explicit: what capabilities you need, when, whether they're hired or trained or outsourced, and what the org chart looks like at each stage of the plan.

  • Capability roadmap — what skills and roles are needed, and when
  • Hiring sequence — which roles to fill first, what seniority, realistic time-to-fill
  • Training and upskilling — where internal development closes gaps faster than hiring
  • Outsourcing strategy — what stays external, what comes in-house, and why
  • Organisational structure evolution — how the IT function reshapes over the multi-year plan
  • Leadership succession — continuity planning for critical roles

A strategy that needs five senior hires in year one is either wrong or unfunded. We model the realistic hiring cadence and adjust the plan's sequencing accordingly.

03

The Investment

What it costs, over what timeline, and how to defend it.

Strategy without a credible budget is aspiration. We build multi-year investment plans that translate the roadmap into annual spend, broken down into categories a CFO can actually work with — and packaged into a business case a board can approve.

  • Multi-year investment plan — CapEx and OpEx modelling year by year
  • Categorised spend — infrastructure, licences, people, services, projects
  • Prioritisation framework — what gets funded first if the budget is cut 20%
  • Risk register — execution risks and mitigation approach
  • Business case artefacts — materials for board and executive approval
  • Governance model — how decisions get made as the plan executes

The investment case has to work at two levels: the total multi-year commitment, and each annual slice on its own. Both should be defendable in a boardroom without the rest of the deck.

Standalone or sequenced

If you've done our Assessment, the Strategy & Roadmap is faster — typically 1–2 weeks — because the current-state picture is already built and agreed. If you're coming in cold, or your state is already well-understood internally, we can start directly with the strategy work in a 2–4 week engagement. Either path produces the same final deliverables.

What you take away

What happens next

Most clients execute the roadmap internally — that's the intent. Some ask us to stay on as Interim IT Director to deliver the first phases, particularly when the plan depends on senior leadership the company doesn't yet have. Either path works. The strategy is yours either way.

Field noteA roadmap that names the things you should stop doing is worth more than one that only adds. Every IT strategy inherits five-year-old projects that survived because no one wanted the argument. We include the stop-list explicitly. Some clients tell us it's the most useful page in the document.
Stage 03 · Interim IT Director

When the plan needs someone to run it.

Some engagements don't end at the strategy document. Sometimes the plan depends on senior IT leadership the company doesn't currently have — during a transition, a growth phase, or a period between permanent hires. When that's the case, we stay on as Interim IT Director: embedded in the leadership team, accountable for outcomes, and with a clear handover path to whoever takes over permanently.

Typical situations

Interim engagements aren't theoretical. Below are the four situations that drive most of them — usually in combination, rarely in isolation.

01

Succession gap

Your IT Director has left, is leaving, or has moved to another role. You need senior coverage while recruiting their permanent replacement — or while deciding whether the role should stay the same shape.

02

Transition or restructuring

An acquisition, reorganisation, or system migration is underway. The current team needs leadership-level support during the transition, even if the long-term structure is already clear.

03

Growth phase

The company has outgrown the IT leadership it had. You need someone operating at director level now, while you figure out what a permanent hire should look like — often a different role than the one that existed before.

04

Roadmap execution

You've built a strategy (with us or internally) and the early phases need senior oversight that the current team can't provide. Interim engagement spans the first 6–12 months of execution.

How the engagement runs

Shape 01 · Part-time embedded

2–3 days per week, ongoing

For companies needing director-level presence without a full-time salary commitment.

Shape 02 · Full-time embedded

6–18 months, handing over

For succession gaps, active transitions, or roadmap execution phases.

Shape 03 · Advisory + steering

1–2 days per month

For companies with strong day-to-day IT management but needing senior independent oversight.

The arc of an engagement

Week 1–2 · Discovery & assessment

Embed with the team. Understand current state, active issues, stakeholder dynamics. Identify the first three things worth fixing.

Month 1 · Quick wins & stabilisation

Clear the most visible operational issues. Establish cadence with leadership and governance. Build trust with the team before asking for bigger changes.

Ongoing · Strategic delivery

Execute against the roadmap, adjust as reality demands. Prepare the organisation — and the role itself — for a permanent hire when the time is right.

Current engagements

Two engagements are active — one with a Nordic life-science company, one with a Swedish medtech group — and a third starts shortly with a European clinical research organisation. We pick these engagements carefully: senior attention matters more than volume, and we'd rather turn work down than dilute it.

What this isn't

We're not a staffing agency. We don't place IT contractors. An Interim IT Director engagement is a senior consulting relationship with an embedded presence — not body-shopping a resource into your org chart. That means longer scoping conversations up front, genuine fit checks both ways, and a real handover plan. It also means we don't take every engagement that's offered.

End of engagement

Interim engagements end one of three ways: the permanent hire arrives and we hand over; the scope narrows to advisory as the new team stabilises; or the original plan evolves and we scope a new engagement shape together. The intent from day one is a clean handover — not an open-ended extension.

Field note"Permanent" IT Director hires are taking 6–9 months on average in the Nordic market right now, sometimes longer. That's the gap Interim engagements exist to cover — not a month, not two. If you're planning succession, start the Interim conversation before the current director gives notice, not after.
How clients actually use this

Three stages. Pick where you start.

The three stages are designed to sequence — Assessment surfaces what needs to change, Strategy plans the changes, Interim delivers them. In practice, most clients don't do all three. The structure exists to give you a clear entry point without committing you to a path you haven't chosen yet.

Path 01

Assessment only

Roughly half of clients.

A clear, independent picture of where the IT function is, where it needs to be, and what it takes to close the gap. Some clients take the findings and execute internally with their existing team. Some share the report with their board and revisit in six months. Some shelve it deliberately because the assessment surfaced bigger questions first.

Path 02

Assessment → Strategy

About a third.

The assessment surfaces the shape of the problem; the strategy engagement turns it into a plan with sequencing, investment, and capability roadmap. Execution stays internal. We've sometimes reviewed the execution at 6-month intervals; that's optional and separate.

Path 03

Full sequence, or direct to Interim

The remaining clients.

Either the full journey — assessment, strategy, interim delivery — or a direct engagement because the company already knows what it needs. These are longer relationships, usually 12+ months total across stages.

How this is different

Most consultancies' engagement models are upsell ladders. Ours isn't — we make more revenue per client when they engage across stages, but we make better engagements when clients only do the stages they actually need. Sometimes the best outcome of an Assessment is a clear report, a board conversation, and nothing else. That's a successful engagement.

Field noteThe consulting industry's favourite trick is to make the end of an engagement feel like the start of a conversation about the next one. We try to do the opposite: the end of an engagement should feel like a handover, not a handshake. Clients who come back a year later come back because something new surfaced, not because we planted the seed.
Ready when you are

Start where you are. We'll meet you there.

Most engagements start with a 30-minute scoping call — no commitment, no pitch deck. You tell us what's prompting the conversation, we tell you which stage makes sense and what a realistic engagement would look like. Sometimes the answer is "you don't need us yet." That's also a useful outcome.

Things you'll want to know

Questions clients ask before committing.

How is your assessment different from a traditional consultancy review?

Scope and independence. We assess technology, data, and team as three co-equal dimensions — most large-firm assessments stop at technology or run the team question as a separate and expensive workstream. We're also independent in the specific sense that we don't resell software, implement vendor products, or receive referral fees. Findings are unbiased because the commercial structure makes them unbiased.

Do you work outside life-science?

Yes. The IT Strategy work is industry-agnostic — growth companies, regulated industries, professional services. Our deep expertise is in life-science and regulated sectors, and that experience translates well to companies with complex compliance, data-sensitivity, or multi-entity structures. But the assessment and strategy frameworks apply to any company that's scaling past its current IT setup.

How confidential are your engagements?

Very. The team dimension of an assessment is genuinely sensitive — findings name capability gaps in an org chart, not individual people, but senior leadership still needs to handle them carefully. We operate under signed NDAs by default, and our deliverables are structured so that the raw team-capability analysis can be shared at CEO/Board level without circulating inside the IT function. Most clients keep the full report in a small circle.

Can we combine or stage the services differently?

Yes. The stages are described sequentially but the engagements are independent. You can do a standalone strategy engagement without an assessment, an interim engagement without either, or an assessment followed by a six-month pause before strategy work. We scope each engagement individually — no retainers, no forced packages.

How quickly can you start?

For Assessment: typically within 2–3 weeks of a signed scope, sometimes faster for focused engagements. For Strategy: 2–4 weeks lead time. For Interim IT Director: longer — Interim engagements need proper fit conversations on both sides, so expect 4–6 weeks from first call to embedded start. If you need interim coverage faster than that, we may not be the right fit.

What does pricing look like?

Assessment and Strategy & Roadmap engagements are fixed-price, typically five to six figures depending on scope. Interim IT Director runs on a monthly retainer based on engagement shape — part-time, full-time, or advisory. We quote specifically after a scoping call, not before.

Is there a conflict of interest if you do the assessment and then the strategy?

We disclose this explicitly in every engagement. An assessment firm that benefits from "finding problems" has an incentive to find them. Our structural answer: assessment findings are costed independently, and we're equally happy if a client doesn't continue — roughly half don't. If that's not reassuring enough, some clients split: another firm does the assessment, we do the strategy. We support that explicitly.

What if we don't like what the assessment finds?

Clients occasionally find the picture we return harder to look at than expected — usually on the team dimension. That's the point. We deliver findings in a format that supports a real conversation with the board and with the IT function itself, not as a blunt document that lands and causes problems. If findings are genuinely contested, we'll rework the analysis with the client's input before the report is finalised. The goal is accuracy, not confrontation.

We store and handle your contact-form details only to reply to you. No tracking cookies, no analytics profiling. See our privacy policy for the full picture.