How should a company decide which IT risks are worth taking? How do youdecide how much to spend to mitigate the risks you’ve opted to take?Why should a CIO pursue senior management participation and oversight whenmanaging IT risk?Would…

How much emphasis should the IVK IT group put on top-line benefits from ITsystems, as opposed to traditional cost savings benefits?What role should IT leaders such as the CIO play in discussions of the use of IT toenhance…

Can the IT trend toward ever-more maintenance be stemmed?What should be the ideal ratio of maintenance to new applications?Is there a trade-off between standardization and flexibility? How are the tworelated in most companies?What should Barton do about Sales’…

What should Barton and Gordon do about the Ivan Korsky problem?How might IT managers best measure and compare the output of diverseemployees? Do you think this measurement should impact the kind of “deal”(contract) that IVK makes with talented…

Should acquisition of infrastructure replacement services be an arm’s-lengthtransaction or a close partnership transaction?Which vendor, contract structure, and service delivery model should IVKchoose?How important is “control” to a company like IVK when outsourcing IT? Howshould control be maintained?How…

Given near-universal web access, ubiquitious personal net-connected portabledevices, and the widespread use of social technologies, can companies still keeptheir information “secret”? As a manager, what should you assume peopleoutside the company know?How would you respond to Bernie Ruben’s…

Conventional wisdom suggests that it’s important to “manage your boss.” As aCIO, what is the best approach to managing your boss? How should Bartonhandle the bad “advice” coming from Williams?How should Barton communicate with people outside the IT…

Which option for securing IVK in the aftermath of the security incident wouldyou choose?What would you disclose?Did CEO Williams make the best decision for IVK? Why didn’t Williams fireBarton?

How should Barton handle the meeting with the analysts? What questionsshould he be prepared to answer and how should he answer them?How vulnerable is your company (or a company that you know) to a denial ofservice (DoS) attack…