In 2003, Nicholas Carr, a technology writer and former Harvard Business Review editor, penned his provocative HBR essay, “IT Doesn’t Matter.” At a time when enterprise IT spending was framed as a source of strategic differentiation, Carr argued that information technology was more like a utility than a unique competitive weapon. IT is broadly available, increasingly standardized, and therefore less likely to deliver sustained advantage.
In his view, as the core technologies of computing and networking matured and diffused, management should shift from trying to “win” through IT to treating IT as essential infrastructure rather than a differentiator. Carr’s claim challenged the prevailing narrative of the time and introduced a debate about how technology contributes to superior performance.
Nicholas Carr’s core claim is simple: as IT becomes infrastructure, it stops being a differentiator. That claim still shows up in today’s budget meetings. Carr argued that as IT becomes ubiquitous and cheaper, “core functions” (storage, processing, transport) become commodity “costs of doing business,” not a basis for sustained advantage.
But in the last 20 years, academics have also gathered evidence to challenge Carr’s premise. Today, we have a more complete picture:
- Commodity IT really is table stakes.
- The way you operationalize IT can produce the measurable value. This includes org design, governance, incentives, skills, and process redesign.
- A set of digital investments can create persistent performance differences. Especially when they are tied to proprietary data, embedded in workflows, or part of an ecosystem or platform.
But first, let’s examine the evidence.
When IT Doesn’t Matter and When IT Does
1) Carr was directionally right about “utility IT,” and often wrong about where the advantage moved
Today, basic cloud, baseline cybersecurity controls, ERP/SaaS, and standard analytics are widely available. That’s Carr’s world. These are costs to compete, not weapons to win.
But research also shows there’s value when IT is paired with hard-to-copy complements, such as:
- organizational capital / process redesign / governance
- scarce skills (data/AI + domain)
- proprietary data assets
- ecosystem and network effects
- resilience engineering that reduces downtime and shock losses
Therefore, we can conclude that “IT matters, but not evenly.” It’s more nuanced than “IT doesn’t matter.”
2) The strongest evidence is not “IT spend → performance,” it’s “capability + complements → performance”
Across studies, the same technology produces wildly different outcomes. The difference often comes from execution and complementary change. A modern framing is the “productivity J-curve”. Firms invest in hard-to-measure intangibles like new processes, training, and redesign. Benefits lag, and later performance accelerates.
3) Where the evidence is clearest that enterprise IT can lift profitability/market value
Across empirical work, the most consistent “yes, it moves the needle” areas for large firms are:
- Cloud adoption (when it’s real adoption, not hosting): quasi-experimental evidence links cloud adoption to higher profitability and market value over multiple years.
- Data-driven decision making / analytics capability: firms that operationalize data-driven management show higher productivity than peers. This holds even after controlling for other factors.
- AI embedded into workflows: causal and field evidence shows sizable productivity lifts in specific work settings. Effects vary a lot. Gains are big for novices and smaller for experts.
- Digital transformation (as a firm capability, not a slogan): text-based measures of “going digital” in 10-Ks are associated with higher valuation. Evidence also says organizational capital and governance determine how much value you capture.
- Security programs as operational excellence (not just compliance): ISO/IEC 27001 certification is associated with improved profitability and labor productivity. This suggests security can be a value-creating reliability capability, not only insurance.
4) A CIO’s practical “table stakes vs differentiator” rule of thumb
- If a capability is packaged, standardized, and benchmarkable (e.g., “we moved to cloud,” “we bought an SIEM,” “we implemented BI dashboards”), it’s usually table stakes.
- If a capability is deeply embedded in your operating model (decision rights, incentives, process redesign, talent, data products, product/engineering cadence), it can be differentiating. Research increasingly shows measurable links to productivity, profitability, and valuation.
The Evidence for When IT Does Matter
| Domain | “Table stakes” IT (Carr-world) | Differentiating IT (where evidence says outcomes diverge) | What tends to improve (per evidence) |
|---|---|---|---|
| Cloud | Basic IaaS/PaaS, “data center exit,” lift-and-shift | Cloud-native rebuild, faster release cycles, FinOps discipline, reliability engineering, DR tested as a capability | Profitability and market value improvements show up in adopter vs non-adopter comparisons in matching + DiD cloud adoption research. Results depend on real adoption. |
| Analytics | Dashboards, reporting, generic KPIs | Data-driven operating model, experimentation, decision rights, domain data products | Productivity and output uplift for data-driven decision making firms. |
| “Big data” | Commodity tooling once mature | Early-stage tech + scarce skills + proprietary data | Faster productivity growth appears where data assets and complementary skills exist. |
| AI / GenAI | Using off-the-shelf copilots without workflow redesign | AI embedded into workflows, governance, feedback loops, proprietary data, human-AI redesign | Meaningful productivity gains in field settings. Gains are strongest for novices. Effects are heterogeneous. |
| Cybersecurity | Compliance checklists, point solutions | “High reliability” security program, incident readiness, measurable reduction of operational fragility | ISO/IEC 27001 links to better profitability and labor productivity. Breaches are penalized by markets, with mixed estimates. |
| Digital transformation | Rebranding + scattered projects | Org capital + governance + information quality; tech fused with strategy | Digital disclosure links to higher valuation. Complements shape value capture. |
| Platforms / ecosystems | “We built an API portal” | Network effects, complementor strategy, ecosystem orchestration capabilities | Platform and e-commerce orientation links to higher firm value. Incumbents can struggle to launch platforms. |
| Resilience | BCP as paperwork | Resilience-by-design (IT + data assets + skills), recovery speed as a capability | IT adoption and data assets link to resilience and productivity during shocks. |
1) Cloud: “utility compute” is table stakes; cloud-enabled operating performance is not
If Carr were rewriting his thesis today, cloud would be Exhibit A. It offers standardized, scalable compute and storage that everyone can buy.
Yet the academic evidence does not say “cloud has no performance impact.” One strong example studies worldwide listed firms adopting cloud services (2010–2016). It uses matching + difference-in-differences and finds adopters see improved profitability (ROA) and market value (Tobin’s Q) for multiple years after adoption in this cloud adoption study.
The CIO takeaway is not “cloud always improves performance.” It is closer to this:
- Cloud adoption can be performance-positive. The measured effect is more plausible when “cloud adoption” reflects real operating model change. That means standardized platforms, faster delivery, and better resilience. It does not mean a simple hosting swap.
- As cloud becomes ubiquitous, the differentiator shifts. It moves from “are you on cloud?” to “how fast, cheap, and reliable are you on cloud?”
Case Study: Capital One, A Traditional Regulated Enterprise
Capital One’s AWS case study describes exiting on-prem data centers. It also ties the change to measurable outcomes. Examples include faster environment provisioning and improved disaster recovery test results. It also cites fewer transaction errors and improvements in incident resolution.
You may see an AWS case study as marketing. Even so, it illustrates the mechanism in the academic papers. Performance comes from execution plus complementary change, not from the commodity layer itself.
2) Analytics and “data-driven decision making”: dashboards are cheap; changing how decisions get made is hard (and shows up in productivity)
One of the most cited CIO-relevant results of the last decade is clear. Firms that actually run the business using data outperform peers.
Using survey data from 179 large publicly traded firms, Brynjolfsson, Hitt, and Kim find a meaningful effect. Firms adopting data-driven decision making have output and productivity about 5–6% higher than expected.
Two important “Carr-test” interpretations:
- The differentiator is not the analytics tool. Everyone has dashboards. The differentiator is the management system. That system includes instrumentation, accountability, and decision rights that make the organization act on the data.
- This is where Carr’s commodity logic breaks. The tool commoditizes, but the organizational complements don’t.
A second strand shows the same idea using labor market data. Early “big data” investments, such as Hadoop-era work, were linked to faster productivity growth. That pattern showed up only for firms with significant data assets. It also depended on labor markets with available complementary skills.
Notably, the study observes that these labor-market benefits decline for mature data technologies. That happens as skills diffuse and become easier to buy. That is Carr again, but with a twist. Advantage exists, but it is time-bound unless you keep moving up the stack.
3) Digital transformation: markets reward “going digital,” but the premium depends on organizational capital
A modern empirical trick measures “digital-ness” through what firms say in filings. Researchers then link that measure to valuation.
- Chen & Srinivasan measure “digital activities” using digital-related words in 10-K business descriptions, using 10-K text-based measures of “going digital”. They find those activities are associated with market-to-book ratios meaningfully higher than peers. The premium is roughly 8%–26% higher, depending on specification.
- A 2024 Finance Research Letters paper builds a digital transformation score from 10-K text, finding a positive link to corporate value in this digital transformation score paper. It also finds organizational capital and governance or information quality shape the value created.
If you’re a CIO, the “so what” is not “add more digital words to the 10-K.” It is this:
- You can’t treat digital transformation as a set of projects.
- The value capture is mediated by what your org chart controls. That includes operating cadence, decision speed, governance, talent systems, and process discipline.
This also lines up with a broader economics view: general-purpose technologies require complementary intangible investment, often creating a lagged “J-curve” pattern.
4) AI: the strongest evidence says productivity gains are real, but uneven, lagged, and tied to workflow design
On the macro side, Brynjolfsson, Rock, and Syverson argued for an “AI productivity paradox”. AI brings big capabilities and big hype. Measured productivity can still lag because implementation and complementary innovation take time.
The “Productivity J-curve” work formalizes the same idea: intangible complements are costly and poorly measured, and benefits often appear later in the J-curve framing.
On the micro side, the evidence has gotten more concrete since 2023:
- Generative AI at Work (field evidence): a staggered rollout of a GenAI assistant to thousands of customer support agents increased productivity. Measured issues resolved per hour rose by about 14–15% on average. Improvements were about 34% for novice or low-skilled workers. Effects were much smaller for the most experienced workers.
- AI investment and firm outcomes (large-sample evidence): a Journal of Financial Economics paper builds a measure of firm AI investment from resumes. It finds AI-investing firms have higher growth in sales, employment, and market valuations. The effects appear largely via product innovation. The paper also uses an instrument based on exposure to university AI graduate supply.
- AI focus and performance (10-K-based evidence): research measuring AI focus from 10-K reports finds positive associations. The links show up in sales, operating efficiency, and related metrics.
Mini vignette: JPMorgan COiN (workflow-embedded AI) A widely cited example is JPMorgan’s COiN system for contract review. It is reported to dramatically reduce document review effort. The number is often cited as about 360,000 hours.
You can treat that as a PR number rather than a precise time study. Even so, it demonstrates a pattern supported by the academic work. AI creates value fastest when it replaces a high-volume, relatively standardized workflow. It also helps when the organization redesigns the process around it. That includes exception handling, governance, and controls. AI is slower to pay off when it is bolted on as a “tool.”
Carr-test conclusion for AI:
- The base models are rapidly commoditizing.
- The differentiators are shifting to proprietary data, human-in-the-loop workflow design, and integration into operating processes. Organizational capability also matters. You need it to deploy, monitor, and improve models over time.
5) Cybersecurity and resilience: security is table stakes, until it isn’t (and then it’s existential)
Carr’s original essay emphasized a key shift: when IT becomes essential but not strategically differentiating, risk management becomes paramount.
Cybersecurity is where this shows up most clearly in modern data:
- Cyber incidents and markets: an event study of cyber-attack news on U.S. listed firms (2012–2022) reports negative stock market responses on average. Severity matters. “First-time vs repeat” dynamics also influence the reaction.
- But estimates vary materially by method: another event-study approach (also 2012–2022) argues for caution. When you adjust for event-induced variance and cross-correlation, the “significance” of abnormal returns can weaken. That means you should not treat any single breach-impact number as universal truth.
The evidence becomes especially interesting for CIOs in one area: security programs can correlate with positive operating performance, not just avoided losses:
- A large-scale study of ISO/IEC 27001 certification finds associations with improvements. The improvements include profitability and labor productivity. The study also finds partial effects on sales performance. It uses a long-term event study with matched controls.
That result supports a “security as high reliability operations” view. Mature security can proxy for disciplined processes, better change management, and lower operational fragility.
Regulatory reality check (public companies):
Since July 2023, the SEC requires disclosure of material cybersecurity incidents on Form 8-K Item 1.05. It is generally due within four business days after determining materiality. The SEC also requires ongoing disclosures about cyber risk management and governance.
So even if you treat security as table stakes, the implications changed. Governance and incident readiness now have direct reporting consequences.
Case Study: Maersk and NotPetya (resilience as business value)
The NotPetya attack on Maersk is a reminder that “table stakes security” can still fail. When it fails, resilience shapes the business outcome. Maersk publicly estimated the impact in the hundreds of millions of dollars.
6) Platform effects and ecosystems: when IT becomes the competitive arena (and incumbents don’t automatically win)
For traditional public companies, “platform” often shifts the discussion. It moves from cost efficiency to competitive advantage.
First, research suggests upside, but it also shows traps.
- A study measures “platform economy” orientation via text analysis. It uses e-commerce as a keyword. It reports a positive relationship with enterprise value (Tobin’s Q). The effect is mediated by technological innovation. The sample is Chinese listed firms from 2015–2020.
- However, research on incumbent platform launches finds a “paradox.” Incumbents can struggle after launch. Factors like firm status, platform type, and network effects matter.
Furthermore, platforms can sustain performance differences:
- Work on business ecosystems (iOS/Android complementors) finds structure matters. Ecosystem transitions also matter. They shape whether participants can sustain superior performance.
- A 2024 qualitative meta-analysis synthesizes ecosystem orchestration practices for industrial firms. It reinforces a key point: orchestration is a capability set, not a technology purchase.
Case Study: Schneider Electric and the “digital flywheel”
Schneider describes a “digital flywheel.” It combines connectable products, software, and digital or field services. Schneider reports this represents 57% of group revenues in 2024. The example shows how industrial incumbents try to convert digital capability into sustained commercial advantage. It is not just one-off IT modernization.
Takeaways on When IT Doesn’t Matter and When IT Does
Next Steps
- Separate “commodity layer” decisions from “advantage layer” decisions. Optimize the first for cost/risk; optimize the second for speed of learning and execution quality.
- For every “digital transformation” initiative, ask: what organizational capital are we building? If the answer is fuzzy, expect J-curve pain without harvest.
- Treat data/AI as operating model change, not a tooling program; measure adoption in workflow terms (cycle time, error rate, throughput), not model accuracy alone.
- In analytics, focus less on dashboards and more on decision latency + decision quality..
- In cyber, assume the baseline is table stakes—but invest in reliability because (a) markets respond to incidents and (b) disciplined security programs can correlate with operating performance.
- For public companies, ensure your incident playbooks and governance are aligned to disclosure realities (e.g., Item 1.05 material incident reporting).
Carr wasn’t wrong that “IT” (as generic infrastructure) tends to commoditize. What the 2010–present evidence adds is that advantage didn’t disappear—it relocated: upward into execution, complements, unique data/AI, ecosystems, and resilience.
Next Steps
So… does enterprise IT “matter” for competitive advantage? The answer, as usual, is that it depends.
First, IT is table stakes when:
- it is easily purchased and widely diffused (commodity cloud, baseline cyber controls, standard SaaS, generic analytics)
- best practices are obvious and copyable
- the main decision is cost/risk optimization ( Carr’s “manage it like a utility” world )
However, IT can improves productivity, profitability, and/or valuation when:
- You pair the tech with organizational complements (process redesign, governance, incentives, skills), as shown in evidence linking organizational capital to value capture. This is the repeated punchline across digital transformation, analytics, and AI evidence.
- You accumulate scarce, firm-specific assets, especially proprietary data and the capability to exploit it. This pattern shows up in evidence on big data returns and resilience during shocks.
- You embed AI into workflows with feedback loops, where the strongest causal productivity evidence sits today.
- You invest in reliability and resilience as an operating capability. The upside can appear as productivity or profitability in certification-linked outcome studies. Downside protection is also more visible to markets and regulators.
- You operate or orchestrate ecosystems and platforms. Network effects can create persistent asymmetry, but incumbency alone does not guarantee success.
Post a comment
Related Posts
Role of NodeJS Development in Modern Web App Solutions
Nowadays, web application development has become powerful with the inclusion of Nodejs Development in the…
Strategic Tech Investments to Maximize Your Small Business Returns
In today’s fast-paced and technology-driven market, small businesses must make strategic tech investments in the…
How to Build a New IT Strategy Roadmap
In a world where technology advances at a rapid pace, a firm that wants to…
