IT infrastructure modernisation: Expert Insights with Tom Richards

Why modernising IT infrastructure matters now

As organisations face increasing pressure to remain competitive and secure, IT infrastructure modernisation has become critical.
Tom Richards provides expert guidance on how businesses can modernise legacy systems, optimise storage, and strengthen security—especially in highly regulated industries.

Q: What are the biggest IT infrastructure challenges your clients are facing today?

A: Modernisation is a key challenge. The Power platform has undergone a massive transformation over the past 20 years, yet many clients still use their systems much as they did 30 years ago. Additionally, recent market uncertainty has caused some clients to fall behind in their infrastructure refresh cycles. Because Power systems offer high reliability and availability, they are often the first upgrades to be delayed in favour of less resilient platforms, making it easy for clients to lag further behind.

In terms of storage, I’d say it’s the understanding and classification of data—not all data is created equally. Many clients are provisioning expensive primary storage for low-value data that’s infrequently or never accessed.

Q: How can organisations modernise legacy systems like IBM i and AIX without disrupting critical operations?

A: There are so many ways. The problem is that they remain some of the best-kept secrets of the platform. Many clients simply aren’t aware of what’s possible.

For example, you can run open-source applications written in languages like Node.js, Python, or Perl within an IBM i environment, bringing modern functionality alongside core business applications. Operations can be automated using tools like Git and Ansible, while AI workloads can run directly on Power processors next to the data they rely on—capabilities that IBM is strengthening with Power11 and its new AI accelerator. Organisations can also run container workloads using Red Hat OpenShift on Power and modernise legacy RPG and SQL programs with updated development tools, making them accessible to today’s developers.

You can also run IBM i and AIX in IBM Cloud, paying for what you consume as part of a hybrid or full cloud strategy, or integrate microservices—such as those provided by IBM Watsonx analytics—to add context and enhance user experience.

Q: You’ve helped clients meet strict compliance and audit standards — what are some common pitfalls IT teams run into when trying to secure large-scale systems?

A: One common pitfall is not securing a strong project sponsor or involving line-of-business teams early on. Security and compliance requirements—such as GDPR, DORA, or NIS2—are about much more than just IT. No single tool or “widget” can guarantee compliance; despite marketing claims, success largely depends on employee education and adapting business practices.

In many large organisations, IT teams often act as service providers delivering platforms to the business, and they rarely know where sensitive data resides or how applications are used. That’s why the most important factor is a joined-up, organisation-wide approach to compliance.

When we help clients, we start from business requirements and work downwards, rather than focusing on IT challenges first. This approach makes it far easier to ensure true compliance.

Q: As hybrid IT environments become the norm, what role does storage architecture play in maintaining both performance and reliability?

A: Storage architecture becomes even more critical when moving to a hybrid environment. In traditional on-premises setups, storage was tightly governed and controlled. But in hybrid environments—where you might be using multiple types of storage from different providers—it’s essential to make sure that the same enterprise-grade SLAs are applied across the board.

That means consistent policies for backup and recovery, data security, and availability—regardless of where the data resides.

Q: How can IT leaders balance infrastructure scalability with increasing pressure around data security and governance?

A: When it comes to scalability, the first thing that comes to mind is automation. We’ve seen a major shift toward automated deployments through infrastructure as code, along with using automation for monitoring and compliance. For example, many organisations now use tools like Ansible to perform regular immutability checks against VMs, ensuring they meet regulatory standards like CIS.

As IT environments expand beyond the traditional data centre, with cloud services and BYOD, many clients are recognising that traditional perimeter security isn’t enough. As a result, we’re seeing more organisations adopt zero trust frameworks.

However, the best results ultimately come from a shared responsibility model for security, one that involves not only IT but also educating employees and partners on good security practices.

Q: From your experience with enterprise clients, what’s one overlooked infrastructure decision that ends up costing teams more later?

A: One of the most common mistakes I see is having too narrow a focus on individual projects without considering the wider impact on surrounding systems. For example, when a server reaches its end of service, the quick option is to simply replace it like-for-like and move on. But that server may have been installed 5–7 years ago, and in that time, requirements, integrations, and available technologies have likely changed.

It’s a bit like building a house—it’s much harder (and more expensive) to adjust the foundations after the fact than to plan properly from the start.

Q: How are your clients approaching modernisation — is it more about cost reduction, performance gains, or risk mitigation?

A: A few years ago, modernisation was often seen as “move to the cloud at all costs,” driven by the mistaken belief that it would automatically reduce costs. In reality, many organisations saw their costs increase, and we’ve helped several clients repatriate workloads that were better suited to on-premises environments.

Today, clients are taking a more cautious, balanced approach, focusing on the overall experience for their customers and users rather than chasing cloud adoption for its own sake.

 Q: Looking ahead, what trends do you see shaping the future of enterprise infrastructure and storage strategy over the next few years?

A: I don’t want to fall into the common trap of simply saying AI, because we all know it’s here to stay—but I don’t subscribe to the idea that it’s going to take over anytime soon. Instead, I see AI becoming a key tool to enrich IT operations, particularly through platforms like Co-Pilot and the broader use of automation. These technologies will help remove much of the low-value, repetitive work that takes up valuable time, allowing IT teams to focus on more strategic priorities.

Beyond that, a growing trend I’ve seen—particularly in conversations with procurement leaders from large financial services organisations—is the increasing importance of ESG (Environmental, Social, and Governance) in procurement decisions. I expect that focus to continue to grow over the coming years.

Conclusion

Enterprise infrastructure and storage continue to evolve rapidly, presenting both challenges and opportunities for organisations across industries. As Tom Richards’ insights demonstrate, successful strategies strike a balance between modernisation and practical considerations, including security, compliance, and business value. Whether you’re looking to optimise your storage architecture, modernise legacy systems, or enhance your security posture, a thoughtful, business-aligned approach yields the best results.

Northdoor specialises in helping organisations modernise IT systems securely and efficiently. To see where you could benefit most, book your complimentary storage assessment today.