Is Your Board Ready to Approve Technology Strategy in 2026?
A UK board should approve technology strategy only through a structured annual review, distinct from routine IT reporting, under FRC Corporate Governance Code oversight duties.
That distinction matters because most boards still treat technology as an operational update item rather than a strategic decision requiring the same rigour as a capital project or an acquisition. The UK Corporate Governance Code 2024 — specifically Provision 29, applicable from 1 January 2026 — expands what boards must demonstrate about monitoring risk management and internal controls, and technology risk sits squarely inside that expectation. A board that cannot show how it reviewed, challenged and approved technology strategy is exposed on governance grounds long before any project fails operationally.
Regulators and investors are converging on the same point from different directions. The Financial Reporting Council’s expanded monitoring expectations sit alongside growing investor pressure for boards to evidence technology-literate oversight, particularly where AI and cloud dependency now represent material operational risk rather than a back-office concern. For NEDs without a technical background, that raises a genuine question: what does credible challenge look like when the subject matter is unfamiliar, and how does a board avoid rubber-stamping a strategy it does not fully understand?
What does “approving technology strategy” actually require of a UK board?
Approval is not a briefing slot on the agenda. It requires the board to see technology strategy as a standalone paper — architecture direction, vendor and cloud dependency, workforce and skills implications, cyber exposure, and return expectations — presented separately from the CIO’s quarterly delivery update. NEDs are expected to challenge assumptions, not simply note progress. Where technology spend is material to the balance sheet, the same capital discipline applied to acquisitions or infrastructure investment should apply here, with clear go/no-go gates rather than open-ended funding.
Executive Action:
- Separate the annual technology strategy paper from routine IT/delivery reporting on the board calendar
- Require the CIO or CTO to present alongside the CFO so investment and capability are reviewed together
- Document the board’s specific challenge and rationale for approval in board minutes, not just the decision
Why are boards struggling to oversee technology investment right now?
According to a 2026 board effectiveness study covering FTSE-listed companies, 80% of directors believe their boards remain stuck in operational detail rather than strategy, up from 71% in 2022 — and technology is one of the areas most likely to get pulled into that detail because it is unfamiliar territory for many NEDs. The same research found the average board pack now runs to 294 pages, up from 267 in 2023, while only 36% of directors said their board pack added value, down from 48% the previous year. Bloated, technical papers are precisely what push boards toward passive sign-off rather than genuine scrutiny of technology strategy.
Executive Action:
- Cap technology strategy papers at a fixed page limit with a one-page executive summary up front
- Ask the company secretary to track whether technology papers are approved with recorded challenge or simply noted
- Commission an externally facilitated review of board technology oversight if none has run in the last three years
What should a board technology strategy review actually cover?
A credible review covers five areas: architecture and technical debt exposure, vendor and cloud concentration risk, workforce and skills readiness, cyber resilience alignment, and a return-on-investment framework the board can actually interrogate. AI is now inseparable from this list — according to KPMG International and INSEAD’s 2026 AI Governance Principles for Boards, expectations for demonstrable AI oversight at board level have risen sharply this year, and separate research from the Diligent Institute and Corporate Board Member found 84% of directors have changed their approach to scenario planning in response, with 39% saying technology-enabled compliance monitoring tools would most improve their board’s oversight capability.
None of this requires NEDs to become technologists. It requires a review structure that forces the right questions into the room: where is the organisation dependent on a single cloud provider or vendor, what happens if that dependency fails, how is AI-related risk being tracked separately from general IT risk, and whether the skills exist internally to deliver the strategy being approved. A board that cannot answer those four questions in under ten minutes has not actually reviewed the strategy — it has received a presentation.
Executive Action:
- Use a structured self-assessment, such as INFORMD’s AI governance test, ahead of the annual technology strategy review
- Request a vendor and cloud concentration map as a standing item, not an ad hoc request
- Benchmark the technology ROI framework against the board’s existing capital approval criteria
How should boards structure technology capital allocation approval?
Technology capital should move through the same staged approval discipline as any other material investment: an initial mandate with bounded scope, a funded pilot with defined kill criteria, and a full-scale approval gate tied to measurable return evidence — not a single upfront commitment. This links directly to directors’ duties under section 172 of the Companies Act 2006 to promote the company’s success with regard to long-term consequences, and to Provision 29’s monitoring expectations. INFORMD’s prior briefing on AI ROI accountability set out how CEOs are being asked to prove technology returns to their boards (AI ROI: How UK CEOs Must Prove Technology Returns to Their Boards) — the capital allocation structure below is the board-side counterpart to that framework.
Staging matters most where the executive team is under pressure to move fast on AI-enabled transformation. A single large commitment made on the strength of a vendor pitch or a competitor’s announcement removes the board’s ability to course-correct, and it is precisely the pattern investors and the FRC are now asking boards to demonstrate they have moved away from. Staged gates do not slow delivery — they give the board defensible evidence, at each stage, that continued spend is justified by results rather than momentum. That evidence is what a board needs on file if a technology programme is later scrutinised by shareholders, auditors, or a regulator.
Executive Action:
- Adopt staged funding gates for technology investment above a defined materiality threshold
- Require documented kill criteria before releasing funding beyond the pilot stage
- Use INFORMD’s technology strategy review and capital approval templates to standardise papers coming to the board
At least annually, as a standalone agenda item separate from routine IT delivery updates. Under Provision 29 of the UK Corporate Governance Code, boards must show ongoing monitoring, so many boards now supplement the annual review with a shorter mid-year check on major programmes.
The CIO or CTO alongside the CFO, so the board reviews capability and capital together rather than as separate conversations. This also ensures return-on-investment assumptions are challenged by the same rigour applied to any other material capital paper.
Provision 29 covers risk management and internal controls broadly, not technology specifically, but technology risk — including AI and vendor concentration — falls within its scope. Boards are expected to evidence how they monitored and challenged this risk, not just that a paper was presented.
A funding structure that releases capital in phases — mandate, pilot, scale — each tied to defined evidence and kill criteria, rather than approving the full budget upfront. It gives the board recorded checkpoints to pause or stop a programme before losses compound.
INFORMD provides intelligence briefings, tools and frameworks for senior business leaders across technology, finance, strategy and compliance. Based in Milton Keynes, UK, we help executives stay informed and act with confidence. Explore our full briefing library (/resources/) or access our free assessment tools (/tools-assessments/).
Stay ahead. Subscribe to INFORMD’s weekly executive briefing at informd.co.uk.
