Enterprise IT Management: How Much Has Changed in 20 Years?
By David C Howell, Regional Sales Director at ManageEngine South Africa
Twenty years ago, enterprise IT management in South Africa looked very different from what it does today.
For many organisations, the technology environment was relatively contained. Employees largely worked from offices on desktop computers connected to corporate networks, while applications, data and infrastructure were primarily hosted and managed within the organisation.
When a system failed or an employee experienced a technical problem, IT teams generally knew where to look. The boundaries of the technology environment were easier to define, and managing IT was largely about keeping those systems available, secure and operational.
Two decades later, those boundaries have become considerably harder to draw.
The rise of laptops, smartphones, cloud computing, software-as-a-service applications, remote working and increasingly connected business environments has transformed the responsibilities of IT departments. Organisations are no longer managing technology that exists primarily within the walls of the office. They are managing an increasingly distributed ecosystem of devices, applications, identities, data and infrastructure.
From the office desktop to the distributed enterprise
The first major shift came with the rise of mobility.
As laptops and smartphones became commonplace, employees were no longer tied to a single desktop or physical office. IT teams had to manage software, configurations, security and access across devices that could move between locations and networks.
Remote and hybrid working accelerated this transformation even further.
Employees could work from home, from customer sites, while travelling or from virtually anywhere with a reliable internet connection. As a result, the traditional corporate network perimeter became less meaningful.
The question for IT teams was no longer simply whether a device was connected to the company network. They increasingly needed to know who was accessing what, from which device, through which application and from where.
Cloud computing added another layer to this complexity.
Instead of organisations owning and maintaining every server, application and piece of infrastructure themselves, cloud platforms allowed them to consume computing resources and software as services.
Software-as-a-service platforms also introduced a growing number of externally hosted applications into enterprise environments.
According to PwCโs 2025 Africa Cloud Business Survey, 86% of African organisations are using more than one cloud infrastructure provider. The survey also highlights how difficult it can be for organisations to modernise legacy environments at scale. Only 29% reported having modernised legacy systems across many parts of their organisations, while 53% had done so in some parts. Similarly, 33% had modernised data architecture for cloud analytics across many areas, compared with 52% that had done so in some areas.
This illustrates an important reality about modern enterprise IT management: organisations have not simply replaced old technology with new technology.
Instead, IT teams are often managing multiple generations of technology at the same time.
Legacy applications may sit alongside cloud platforms. On-premises infrastructure can coexist with multiple cloud providers. Employees may use company-managed devices alongside personal devices, while business processes increasingly depend on third-party applications and services.
The result is an IT environment that is far more distributed and complex than it was 20 years ago.
IT management has become a security challenge
The expansion of the technology environment has also expanded the number of potential points of exposure.
Every connected device, application, identity and cloud service can introduce new security considerations. As organisations become increasingly dependent on technology, an IT problem can quickly become a business problem.
Cybersecurity is therefore no longer something that can be treated as a separate concern sitting alongside IT operations.
It has become part of the wider IT management responsibility.
PwCโs Digital Trust Insights Survey found that 63% of South African business and technology leaders rank cyber risk investment among their top three strategic priorities. Yet only 28% of South African organisations report spending significantly more on proactive measures such as monitoring, assessments and testing than on reactive measures such as incident response and recovery.
For organisations, this highlights the importance of moving beyond simply responding when something goes wrong.
Visibility is becoming critical.
IT teams need to understand what devices are connected to their environments, which users have access to sensitive systems, where organisational data resides and how applications interact with one another.
The more distributed the environment becomes, the more difficult it is to protect something that cannot be seen or understood as a whole.
Data protection adds another layer of responsibility
For South African organisations, data protection has also become an important part of the IT mandate.
The Protection of Personal Information Act (POPIA) requires responsible parties to take appropriate and reasonable technical and organisational measures to protect the integrity and confidentiality of personal information.
Section 19 of the Act specifically requires organisations to identify reasonably foreseeable risks, establish appropriate safeguards, regularly verify that those safeguards are effectively implemented and update them as risks change.
The POPI Act therefore reinforces the importance of treating information security and data governance as ongoing responsibilities rather than once-off compliance exercises.
For IT teams, this means that managing technology increasingly involves understanding not only whether systems are functioning, but also how information moves through those systems and whether it is adequately protected.
The IT department’s role has expanded
Twenty years ago, the core IT mandate was largely operational.
Keep systems running. Resolve technical problems. Maintain infrastructure. Support employees.
Those responsibilities have not disappeared, but the expectations placed on IT departments have expanded significantly.
Today, IT teams are increasingly expected to support digital transformation, enable remote and hybrid working, protect organisational data, improve employee productivity, manage increasingly complex technology estates and contribute to business resilience.
Technology has become so deeply embedded in everyday business operations that IT can no longer operate in isolation from the wider organisation.
A decision about cloud infrastructure can affect costs, security, compliance and business continuity.
A decision about an employee application can affect productivity and data security.
A decision about how identities and access are managed can affect both operational efficiency and an organisation’s ability to protect sensitive information.
This means that effective enterprise IT management increasingly requires an understanding of business priorities as well as technical requirements.
AI and automation are changing the next phase of IT
The latest stage in this evolution is being shaped by artificial intelligence and automation.
Automation can reduce repetitive manual tasks that previously consumed significant amounts of IT teams’ time. AI can help analyse large volumes of operational data, identify unusual activity, highlight potential problems and support faster responses.
These technologies could allow IT teams to move away from spending so much time on routine intervention and towards more proactive management.
However, AI does not eliminate the need for strong IT foundations.
In fact, the growing use of AI makes visibility, governance and data management even more important.
Organisations need to understand what information AI systems can access, how those systems are being used, what decisions are being automated and what risks could emerge as AI becomes more deeply integrated into business operations.
For IT leaders, the challenge is therefore not simply to adopt AI.
It is to ensure that AI is introduced into an environment that is sufficiently visible, secure and well governed.
Breaking down the silos
One of the biggest changes in enterprise IT management is the growing need to connect functions that were traditionally managed separately.
Endpoint management, identity management, network operations, cloud infrastructure and cybersecurity can no longer be viewed as completely isolated disciplines.
A security incident may originate from an endpoint but involve an identity, an application and data stored in the cloud.
A performance issue may involve infrastructure that sits across multiple environments.
A compliance requirement may depend on understanding both who can access information and where that information is stored.
The ability to connect these different areas gives IT teams a more complete picture of the technology environment and can help them respond more effectively to problems.
What the next 20 years could bring
South Africa’s enterprise technology environment is almost unrecognisable compared with the one many organisations were managing two decades ago.
The desktop-centric office has evolved into a distributed environment involving mobile devices, cloud platforms, remote workers, software-as-a-service applications, increasingly sophisticated cyber threats and emerging AI technologies.
The next 20 years are likely to bring another wave of transformation.
New technologies will emerge, existing technologies will evolve and the boundaries between physical infrastructure, cloud services, applications and intelligent systems will continue to change.
For IT teams, however, the fundamental challenge will remain familiar: ensuring that technology works for the organisation while protecting the systems and information on which the organisation depends.
The difference is that doing so now requires a much broader view.
Enterprise IT management is no longer simply about keeping technology running. It is about creating visibility across a complex technology environment, managing risk, protecting data, enabling innovation and helping the business remain resilient as technology continues to evolve.
After 20 years of extraordinary change, the lesson is clear: the technology environment may keep changing, but the ability to manage that change effectively will remain one of the most important responsibilities of the modern IT team.
