What's Happening?
Mark Forman, former administrator for e-government and IT at the Office of Management and Budget (OMB), stresses the critical importance of objectively identifying and evaluating emerging risks in federal IT modernization efforts. Forman argues that the true
measure of IT modernization success lies in agencies' ability to overcome these risks and deliver promised mission outcomes within budget and schedule, rather than merely adopting specific methodologies or completing prescribed reporting. He highlights that despite advancements in development practices like agile and DevOps, fundamental management problems persist, often due to behavioral challenges such as the 'Planning Fallacy' and 'Prospect Theory,' which can lead managers to underestimate risks or hesitate to address them. The Government Accountability Office (GAO) reported in October 2026 that 24 out of 53 major IT modernization efforts were riskier than their Chief Information Officer (CIO) ratings indicated, underscoring the systemic issue.
Why It's Important?
This perspective is crucial for the U.S. federal government, which invests billions in IT modernization annually. Ineffective risk management can lead to significant cost overruns, project delays, and failure to achieve critical mission objectives, impacting everything from national security to public services. Forman's insights reveal that the problem isn't just technical; it's deeply rooted in organizational behavior and incentives. When agencies fail to accurately assess and mitigate risks, it erodes public trust, wastes taxpayer money, and hinders the government's ability to leverage technology for improved efficiency and service delivery. Addressing these behavioral aspects is vital for ensuring that federal IT modernization truly delivers on its promises and strengthens government operations.
What's Next?
Forman suggests that federal CIOs and agency heads must strengthen five management practices: establishing realistic expectations, objectively reassessing risks, requiring effective mitigation, integrating delivery and enterprise governance, and aligning incentives with outcomes. These steps aim to move beyond superficial reporting to genuine risk management. Future efforts in federal IT modernization will likely need to incorporate these behavioral and governance considerations more deeply. This includes fostering a culture where early disclosure of risks is rewarded, and where leadership actively intervenes to address cross-cutting threats that individual project teams cannot resolve. The ultimate test will be whether agencies can translate these recommendations into tangible improvements in project success rates and mission delivery.
Beyond the Headlines
The challenges highlighted by Forman extend beyond federal IT to any large-scale organizational change. The 'Planning Fallacy' and 'Prospect Theory' are psychological phenomena that affect decision-making in various contexts, leading to optimistic biases and resistance to acknowledging losses. In the federal sector, these behavioral traits can be exacerbated by political pressures and the desire to secure funding, creating an environment where risks are downplayed. Overcoming this requires not just new policies or methodologies, but a fundamental shift in organizational culture and leadership. It involves creating systems that encourage honesty about challenges and provide support for addressing them, rather than penalizing those who bring bad news. This deeper implication suggests that effective governance in complex organizations requires a sophisticated understanding of human behavior, not just technical expertise.
