Issues arrive in five categories: Process, knowledge and skills, attitudes and behaviors (that is, culture), technology, and organizational structure. The fix doesn’t have to be the same as the cause, however. For example, you can fix a process problem with training to increase skills and knowledge.

Finding suitable solutions to problems while showing good judgment and a sense of perspective is an important characteristic of leadership. I just heard an excellent example … of the exact opposite.

The situation: IS, in the final stages of cleaning up after a computer virus, announced its plan for preventing future ones. Its “solution”: Eliminate floppy drives. My correspondents work in the marketing department. Floppy diskettes are their sole medium for exchanging data between the PCs they use themselves and the Macintoshes favored by their outside contractors, so they raised objections.

IS responded by offering to leave one PC intact, but with a locking device attached to its floppy drive. The user of this PC is to interrupt her work, unlock the drive, manually scan the diskette, transfer files, and re-lock the drive whenever someone needs to read a floppy. To satisfy the rest of the company, IS also plans to set up a central scan station it will administer and operate.

“We are not trying to make life difficult for you,” wrote the person responsible for this policy. It’s a true statement, too. “Trying” means expending effort, and as is usually the case, making life difficult is effortless. It’s making life easy that takes thought and work.

Three features of this case make it especially sad. The first is that whether the issue is virus-prevention, security, or data corruption, the first reaction of many in IS is to erect barriers that interfere with end-users’ ability to do their work. Getting rid of floppy drives in response to a virus attack is a predictable, baby-with-bath water response to the problem, equivalent to eliminating keyboards because someone sent out a letter containing erroneous information.

The second feature of this case, and an especially unfortunate one, is that the steps outlined by IS, while draconian, don’t solve the problem. The vast majority of viruses these days are macro viruses arriving through documents attached to incoming e-mail. Eliminating floppy diskettes is a lot like nailing the windows shut while leaving the front door unlocked – you get neither security nor fresh air.

And of course, there’s the third, most obvious flaw in IS’s strategy: Through the simple expedient of installing a reputable virus-scanner on every workstation, the enterprise could receive real protection from virus attacks.

Why did IS ignore this obvious choice? In the absence of hard evidence, we can only guess. One likely culprit is the budgeting process. IS would have to pay for the virus scanning software and the labor needed to install it (although in most cases virus scanners can be installed painlessly across the network). Floppy disk elimination moves most of the costs and all of the inconvenience to the rest of the business. So once again budgeting, a process that exists to promote good planning and fiscal accountability, instead has its customary effect of creating incentives to make wrong decisions.

No process is perfect – not budgeting, not inventory management, not salary administration – nothing. When you blame your own bad decisions on a process you’re making an excuse, much like a customer service representative who tells you, over and over again, “I can’t do that for you because it would violate our policy.”

Issues may stem from process problems, deficient skills, bad habits or attitudes, poor technology, or organizational barriers. In this case, a virus attack, the problem was technological – the susceptibility of modern PCs to virus attacks. IS (if our guesses are accurate) allowed the budgeting process to divert it from the optimal response of installing a companywide virus scanner, an easy technological fix.

Instead, it responded to one process problem by creating another one. Why?

The problem is one of culture, the attitudes and behaviors of an IS leadership that chooses to erect barriers to effectiveness throughout the company because it isn’t ept enough to find a creative solution to its budget limitations.