A newly hired CIO has been told the enterprise has an established IT governance process, but finds it is not being followed. To address this problem, the CIO should FIRST

Before making any changes or taking corrective action, a new CIO must understand the root causes of non-compliance. This involves comprehending the design of the existing governance process, how it was intended to work, and crucial aspects of the corporate culture that may be hindering its adoption or effectiveness.

Replacing the current process without understanding why it failed is a premature and potentially disruptive action that could lead to further resistance.

While establishing relationships is important for a CIO, it is not the first step to address a specific problem like a failed governance process; understanding the problem itself takes precedence.

Engaging audit might validate concerns, but it doesn't provide the CIO with the necessary understanding of why the process is not followed, nor does it empower the CIO to fix it without prior insight.