The Critical Role of IT Standards, Training, and Documentation in Mitigating Security and Compliance Risks

April, 2024

Some organizations may undervalue the significance of the IT standards, training, and documentation function due to its less immediate impact on the organization’s financial bottom line. However, it is crucial to recognize that these functions are indispensable for maintaining the seamless operation, compliance, and efficiency of IT systems – all of which are pivotal for the overall success of any business. With the rapid pace of change within IT environments, establishing processes to effectively track and manage these changes becomes paramount. So, it is not surprising that organizations have begun to allocate more resources toward staffing this critical role.

As shown in Figure 1 from our full report, IT Standards, Training, and Documentation Staffing Ratios, the result is that the percentage of IT standards, training, and documentation staff as a percentage of the total IT staff has increased from 1.8% in 2022 to 2.1% at the median level in 2023.

Trend in IT Standards 1030x687 - The Critical Role of IT Standards, Training, and Documentation in Mitigating Security and Compliance Risks

Even though only a small fraction of the overall IT staff is typically designated for this role, it is important not to underestimate its significance within an organization. Insufficient staffing of the IT standards, training, and documentation function can lead to many risks that can impact various aspects of operations.

“There is no denying the importance of this job function,” said Reneece Sterling, a senior research analyst for Avasant Research, based in Los Angeles. “Without it many organizations can be left susceptible to both security and compliance risk.”

Neglecting the IT standards, training, and documentation function can lead to security vulnerabilities, data breaches, and compliance failures, with repercussions for the whole organization. Therefore, investing in this crucial aspect of IT management is not just a matter of operational efficiency but also a critical component of risk mitigation safeguarding the organization’s assets and reputation and ensuring future success.

Our full report provides benchmarks for assessing current IT standards, training, and documentation staffing levels. We present the five-year trend in IT standards, training, and documentation staffing and provide benchmarks by organization size and sector. We conclude with recommendations for improving the effectiveness of the quality assurance function within the IT organization.


This Research Byte is a brief overview of our report on this subject, IT Standards, Training, and Documentation Staffing Ratios. The full report is available at no charge for subscribers, or it may be purchased by non-clients directly from our website (click for pricing).