Responsible IT project management in an increasingly regulatory environment

Share this post

The importance of responsibility in the IT industry has grown significantly, as it helps us build more sustainable, safer, and more efficient businesses.

Graniti's HeKa (Mental Growth) network for staff competence development is committed to promoting responsible IT on a practical level. In late 2024, we published a comprehensive support package for our experts, which provides concrete tools, operating models and background information for integrating responsibility into the everyday implementation of IT projects.

For us, responsible project management means that projects are planned and implemented in accordance with legal, ethical, economic, social and environmental requirements. Today, responsibility is driven by various regulatory areas, especially information security, environmental protection, corporate responsibility reporting and due diligence obligations, which, for example, ensure the responsibility of supply chains. These regulations provide clear guidelines for ensuring responsibility, helping companies develop risk management, training, operational resilience, documentation and stakeholder cooperation.

At the beginning of the year, the HeKa network delved into responsible IT project management, especially from a regulatory perspective. Three significant pieces of legislation – DORA (Digital Operational Resilience Act), NIS2 (Network and Information Security) Directive and Data Act – were at the centre of the discussion and we examined them. Their impact on project management is significant:

DORA strengthens the requirements for digital capability and cyber resilience.
NIS2 expand information security obligations and the division of responsibilities within organizations.
Data Act brings new demands on data management and its fair distribution.

Understanding these regulations becomes a part of our experts' work and the everyday life of IT projects. At Graniitti, we ensure that our experts are able to utilize this knowledge in customer projects and thus produce added value for our customers.

How can your company benefit from responsible project management?

Responsible project management is much more than just minimizing risks – it also brings efficiency, cost savings and, above all, strengthens trust among the company's stakeholders. When projects are implemented responsibly, they not only run better, but also withstand time and changing circumstances. This is reflected in tangible benefits:

Better risk management → Responsible project management helps identify and manage legal, information security and business risks in a timely manner.

More efficient use of resources → Well-planned and responsibly implemented projects reduce waste and additional costs.

Building trust → Customers, partners and stakeholders value transparency and accountability, which improves the smoothness of cooperation and strengthens the company's reputation.

On a practical level, the following key factors should be considered in a company or project:

Contracts and rights and competition law perspectives → At the beginning of projects, it must be ensured that contracts support responsibility and are on a legally sustainable basis.

Access rights for customers and partners → Who has access to the organization's facilities and networks? Clear policies and access rights management prevent information security risks.

End of partnerships → How do you ensure that access rights are removed appropriately? This prevents data leaks and other risks.

Business model review and technological changes → Changing markets and technologies require continuous adaptation and innovation.

Data availability and portability → Are technical updates or changes required? Timely and secure data management is vital.

Data protection, information and cybersecurity → Taking GDPR into account and maintaining quality assurance processes are key aspects of responsible project management.

Data management processes → What information is shared, how and with whom?

Why is promoting responsible IT important?

Responsibility is a key part of IT security, sustainable development and long-term growth. As regulations become more stringent, companies need to ensure that IT projects meet sustainability requirements. We have deep expertise in sustainable IT projects and regulatory requirements – helping companies across all industries execute their projects efficiently, while managing risk and putting sustainability first. Contact us and let's discuss how we can develop your IT projects responsibly and take them to the next level!