Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Portfolio governance practiceAdvanced

IT Portfolio Management

IT portfolio management evaluates investments, services, applications, infrastructure, and technical debt as a connected set rather than as isolated projects.

What it means

Portfolio decisions consider strategic fit, value, risk, dependency, capacity, duplication, lifecycle, and the combined demand placed on people and shared platforms.

Why it matters

Optimizing one initiative can weaken the enterprise when it consumes scarce capacity, duplicates capability, or creates dependencies that other teams cannot support.

Practical focus

  • Maintain a complete portfolio with owners and lifecycle status
  • Map dependencies and shared constraints
  • Compare value, risk, cost, and strategic fit
  • Rebalance, consolidate, modernize, or retire based on evidence

Common mistakes

  • Managing only active projects
  • Ignoring operational services and technical debt
  • Allowing every investment to use a different scoring model
  • Keeping low-value systems because no one owns retirement

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

ISACA CGEITISC2 ISSMPEC-Council CCISO

Authoritative sources