IT strategy & governance
Alignment of technology investments with business objectives, operating models, and board-level risk appetite. Includes IT operating model design, portfolio rationalisation, and steering structures.
Information Technology Consultancy · London, United Kingdom
IT & JM HARRIES LLP advises boards, leadership teams, and operational stakeholders on information technology decisions — from architecture and procurement to governance, risk, and long-term digital capability.
About the firm
IT & JM HARRIES LLP is a United Kingdom limited liability partnership focused on information technology consultancy activities. We work with clients who require impartial, commercially grounded advice on technology — whether they are refining an existing estate, planning a major programme, or responding to regulatory and operational pressures.
Our role is not to sell software licences or managed services on the side. We concentrate on analysis, design, and decision support: helping you understand options, trade-offs, and implementation paths before capital and organisational commitment are made. That independence matters when technology choices affect compliance, customer trust, and multi-year budgets.
Based from our registered office in central London, we engage with organisations across the UK and internationally where appropriate. Engagements are structured to respect your internal capabilities — we augment your team rather than replace it, and we document recommendations so they remain usable after our involvement ends.
What we do
We support decision-making at every stage — from initial discovery through design, procurement support, and post-implementation review. The sections below describe our core practice areas in more detail.
Alignment of technology investments with business objectives, operating models, and board-level risk appetite. Includes IT operating model design, portfolio rationalisation, and steering structures.
Target-state architecture, integration patterns, data flows, and non-functional requirements. We produce artefacts your technical teams can implement or tender against.
Programme framing, benefits cases, change impact assessment, and technology enablement for customer-facing and back-office modernisation initiatives.
Cloud readiness, migration sequencing, hybrid estate planning, and cost governance — with attention to UK data residency and sector-specific constraints where relevant.
Risk assessments aligned to recognised frameworks, control gap analysis, incident preparedness, and board-ready reporting on cyber posture.
Requirements definition, RFP support, evaluation criteria, contract review, and ongoing supplier performance — reducing lock-in and surprise costs.
Practice area
Many organisations accumulate technology over years of projects, mergers, and urgent fixes. The result is duplication, fragile integrations, and rising run costs — while leadership lacks a single, credible view of where to invest next.
We begin with structured discovery: interviews with business and IT stakeholders, review of current applications and infrastructure, and mapping of critical processes to supporting systems. From that evidence base we develop a prioritised roadmap with clear dependencies, indicative costs, and risk mitigations.
Deliverables typically include a current-state assessment, target architecture principles, a phased initiative portfolio, and governance recommendations — including KPIs that link technology outcomes to operational and financial performance.
Digital transformation
Digital transformation is rarely a single “big bang” replacement. Successful programmes decompose change into waves that deliver measurable value — while maintaining regulatory continuity and day-to-day operations.
We help sponsors define scope, success criteria, and organisational readiness. That includes stakeholder mapping, dependency analysis between legacy and new platforms, and explicit treatment of data migration, training, and cutover risk. Where agile delivery is in use, we align advisory work to your sprint cadence rather than imposing waterfall-only artefacts.
For regulated sectors, we emphasise audit trails, access control, and evidence retention throughout the transition. Our consultants are accustomed to working alongside internal audit, legal, and compliance functions — not around them.
Whether the driver is customer experience, cost reduction, or operational resilience, we ensure technology choices support the business narrative rather than dictating it.
Cloud & infrastructure
Moving workloads to public, private, or hybrid cloud environments can improve agility — but without disciplined planning it can also inflate spend and fragment accountability. We provide vendor-neutral guidance on what to move, when, and how.
Inventory applications and infrastructure, classify by criticality, technical debt, and migration complexity. Identify quick wins versus programmes requiring redesign.
Define landing zones, networking, identity integration, backup, and monitoring standards. Document shared services versus application-team responsibilities.
Support wave planning, cutover rehearsals, and FinOps practices so cloud consumption remains visible to finance and engineering leadership alike.
Cybersecurity advisory
Cyber risk is a business risk. We translate technical control gaps into language suitable for executive committees and risk registers — while remaining precise enough for security and infrastructure teams to remediate.
Our reviews may cover identity and access management, endpoint and email security, logging and detection, third-party exposure, and backup or recovery testing. We reference commonly used standards and guidance (including NCSC-aligned practices where appropriate for UK organisations) without treating certification as a substitute for operational effectiveness.
Following assessment, we prioritise remediation into “now / next / later” workstreams with owners and success measures — avoiding exhaustive punch lists that paralyse action.
Why IT & JM HARRIES LLP
We do not resell products or take referral fees from vendors. Recommendations follow your requirements and total cost of ownership — not our margin on licences.
Advice is grounded in budget cycles, procurement timelines, and internal delivery capacity. We flag when ambition outpaces organisational readiness.
Work products are written for your organisation — clear enough for new joiners and auditors to understand decisions long after the engagement ends.
From short diagnostic sprints to multi-month programme support, we scale involvement to the decision you need to make next — not a fixed package you do not need.
Our approach
We clarify the decision to be made, stakeholders, constraints, and existing documentation. A concise engagement charter sets expectations on deliverables, timing, and access required.
Evidence is gathered through workshops, system reviews, and data requests. Assumptions are tested with the people who operate the processes daily — not only leadership interviews.
Options are presented with explicit pros, cons, costs, and risks. We recommend a preferred path where appropriate, while documenting alternatives for informed dissent.
Where useful, we stay involved through procurement, design assurance, or programme checkpoints — ensuring intent is preserved as delivery teams execute.
Closing reports capture outcomes, open items, and metrics for post-implementation review. Knowledge transfer sessions help internal teams own the result.
Sectors we support
While every client is different, we regularly advise organisations facing similar patterns: legacy modernisation, regulatory reporting, distributed workforces, and pressure to demonstrate ROI on technology spend.
We tailor language, controls emphasis, and reference architectures to sector norms — for example, heightened attention to data protection in regulated industries, or integration with ERP and shop-floor systems in manufacturing. If your sector has specific supervisory expectations, we align deliverables to support evidence requests without over-engineering documentation.
Representative outcomes
The following examples are anonymised composites illustrating the types of outcomes our work is designed to support. They are not guarantees of future results.
“A mid-sized professional services firm reduced overlapping SaaS spend by consolidating tools after a portfolio review — freeing budget for a controlled CRM migration.”
“A healthcare-adjacent organisation received a prioritised cyber remediation plan that satisfied board scrutiny and gave IT a sequenced 18-month work programme.”
“Leadership gained a single cloud migration narrative with wave definitions, exit criteria, and contractual guardrails before signing a major hyperscaler agreement.”
Perspectives
Significant regulatory change, M&A activity, or a step-change in revenue model often invalidates prior roadmaps. We recommend a formal strategy review at least every two to three years — and sooner when major disruption occurs.
Contract exit clauses, data portability, and API access should be negotiated before signature — not treated as technical details for implementation teams alone.
Define leading indicators (cycle time, error rates, adoption) alongside lagging financial metrics. Benefits tracking should be owned by the business sponsor, with IT providing instrumentation.
Allocate capacity explicitly between “run” and “change” functions. Without that discipline, urgent incidents erode programme delivery and undermine stakeholder confidence.
Frequently asked questions
It covers advisory and professional services related to IT — strategy, architecture, security, procurement support, programme assurance, and related analysis. It does not, in our case, imply retail sale of hardware or software on our account.
Our primary focus is consultancy and decision support. We can work alongside your delivery partners or internal teams during design and assurance phases. Implementation remains your organisation’s responsibility unless separately agreed.
After an initial conversation we propose scope, deliverables, timeline, and fees — often as a fixed phase for discovery followed by time-based support for iterative work. We align reporting to your governance forums.
Our registered office is at 8f Gilbert Place, London, WC1A 2JD, United Kingdom. Meetings may be held on site, remotely, or at client premises by arrangement.
Use the contact section below to outline your situation. We will respond to arrange a confidential discussion about fit, timing, and any conflict checks required before formal engagement.
Contact
Tell us about the technology decision or programme you are facing. We will respond to arrange an initial discussion — typically within two UK business days.
IT & JM HARRIES LLP
Registered office:
8f Gilbert Place
London, London
WC1A 2JD
United Kingdom