The LOOKUP Business Modernisation Framework™
Technology Doesn't Transform Businesses. Good Decisions Do.
Most organisations don't fail because they choose the wrong software. They struggle because technology is introduced without strategy, governance, security or ownership. The LOOKUP Business Modernisation Framework™ provides a practical roadmap for helping businesses modernise technology, strengthen cyber security and prepare for AI in a structured, measurable way.
Technology Decisions Should Follow a Framework — Not a Shopping List.
Many organisations invest in technology one product at a time, creating disconnected systems, inconsistent processes and unnecessary complexity. The LOOKUP Business Modernisation Framework™ provides a structured approach where every technology decision supports a measurable business outcome and builds towards a stronger, more secure and AI-ready organisation.
Why Technology Projects Fail
Most technology projects do not fail because the technology is bad. They fail because the business foundations are not in place. Here are the most common reasons technology investments do not deliver the outcomes they promised.
Buying software before fixing processes
Automating a broken process simply produces faster errors. Technology should support a clear, well-designed way of working — not paper over gaps nobody has mapped.
No executive ownership
When technology decisions are left to IT alone, they miss the business context that makes them succeed. Executive sponsorship provides the authority and accountability projects need.
Poor change management
Rolling out new systems without training, communication or support guarantees low adoption. People do not adopt what they do not understand or trust.
Weak cyber security
Building on insecure foundations means every new tool introduces new risk. Security must come before expansion, not after a breach.
Messy Microsoft 365 environments
Unstructured SharePoint sites, loose permissions and inconsistent Teams usage turn the platform into a liability instead of an asset.
No governance
Without policies, ownership and review processes, technology decisions are made ad hoc. Governance is what turns tools into a managed capability.
No roadmap
Reacting to problems one at a time produces a patchwork of disconnected systems. A roadmap ensures each decision builds on the last.
No measurement
If success is not defined, it cannot be recognised or improved. Projects without metrics stall because no one knows whether they are working.
Technology rarely fails. Implementation does.
The Eight Stages
The LOOKUP Business Modernisation Framework™ moves through eight sequential stages. Each stage builds on the foundations of the previous one, ensuring technology decisions are grounded in business strategy, security and governance.
Stage 1
Discover
Understand the business
Before any technology decision is made, we work to understand your business goals, current systems, operational risks and opportunities. This stage ensures every subsequent step is grounded in what your organisation actually needs rather than assumptions.
Stage 2
Secure
Protect the business
We strengthen your security foundations before introducing new tools. This means implementing the Essential Eight, identity protection, endpoint security, conditional access and business continuity so the environment is resilient enough to support growth and AI adoption.
Stage 3
Modernise
Upgrade the technology platform
We modernise your workplace with Microsoft 365, cloud infrastructure, managed devices and reliable connectivity. A modern platform is the foundation that makes collaboration, security and AI adoption possible.
Stage 4
Standardise
Reduce complexity
We establish consistent policies, documentation, automation and operational processes across the organisation. Standardisation reduces support costs, improves security and makes the environment easier to manage as the business grows.
Stage 5
Optimise
Improve productivity
With stable foundations in place, we focus on improving productivity through workflow improvement, reporting, knowledge management and Microsoft 365 optimisation. This is where technology starts delivering measurable business value.
Stage 6
Prepare
Prepare for AI
We prepare your Microsoft 365 environment, data quality, permissions, governance and SharePoint architecture so the business is ready for responsible AI adoption. AI introduced on unprepared foundations creates risk rather than value.
Stage 7
Implement
Deploy practical AI
We pilot AI with defined business use cases, human oversight, training and measurement. Starting small and scaling what works ensures AI delivers real outcomes rather than expensive experimentation.
Stage 8
Improve
Continuous improvement
Technology is never finished. We review, measure, optimise and expand — ensuring the environment continues to support the business as goals, risks and opportunities evolve over time.
Where Is Your Business Today?
Every organisation is at a different stage of its technology journey. Understanding your current level of maturity helps prioritise investments, reduce unnecessary complexity and create a practical roadmap for improvement.
Level 1
Reactive
Technology issues are addressed only when problems occur.
- No documented roadmap
- Reactive support
- Limited cyber security
- Technology decisions made individually
Level 2
Stabilising
Security, consistency and reliability are becoming priorities.
- Cyber security improvements
- Better documentation
- Standardised devices
- Improved operational consistency
Level 3
Modernising
Technology actively supports productivity and collaboration.
- Microsoft 365 optimisation
- Improved workflows
- Better reporting
- Cloud-first operations
Level 4
AI Ready
Business information, governance and Microsoft 365 are prepared for responsible AI.
- Data quality
- Permission management
- Governance
- Security
- Microsoft Copilot readiness
Level 5
AI Enabled
Artificial Intelligence is delivering measurable business outcomes.
- AI integrated into workflows
- Human oversight
- Continuous improvement
- Executive governance
- Business value measurement
Most organisations operate somewhere between Reactive and Modernising. The objective is not to skip stages. The objective is to build strong foundations that support sustainable growth, cyber resilience and successful AI adoption.
How Every LOOKUP Service Fits the Framework
Each LOOKUP service supports specific stages of the framework. This is not a product catalogue — it is a structured approach where every service has a clear purpose within the modernisation journey.
| Service | Stages | How it supports the framework |
|---|---|---|
| Managed IT | 1, 3, 4, 5, 8 | Provides the day-to-day monitoring, support and management that keeps the platform running across Discover, Modernise, Standardise, Optimise and Improve. |
| Cyber Security | 2, 4, 6, 8 | Delivers the security baseline at Secure, supports Standardise with policies, underpins Prepare with governance and continues through Improve. |
| Microsoft 365 | 3, 5, 6, 7 | The collaboration and productivity platform at Modernise, Optimise, Prepare and Implement — the foundation AI is built on. |
| Essential Eight | 2, 4, 6 | The security framework applied at Secure, embedded in Standardise and validated during Prepare for AI readiness. |
| AI Readiness | 6, 7 | The assessment and preparation work at Prepare, leading directly into the pilot AI work at Implement. |
| IT Consultancy | 1, 4, 5, 8 | Strategic advice and planning at Discover, Standardise, Optimise and Improve — keeping technology aligned with business goals. |
| Business Internet | 3, 5 | Reliable connectivity at Modernise, supporting the cloud and collaboration tools that power Optimise. |
How Every Executive Guide Fits the Framework
LOOKUP's executive resources are not standalone articles. Each one supports specific stages of the framework, providing the depth and guidance businesses need at each step of the journey.
| Executive Guide | Stages | How it supports the framework |
|---|---|---|
| ISO 27001 Advisory | 2, 4, 6 | Governance and information security management at Secure, Standardise and Prepare — the framework for managing risk across the journey. |
| Microsoft Copilot Readiness | 6, 7 | Preparing Microsoft 365 for Copilot at Prepare, then deploying it with governance at Implement. |
| AI Governance | 6, 7, 8 | Policies, oversight and continuous improvement at Prepare, Implement and Improve — ensuring AI stays responsible as it scales. |
| Cyber Insurance Readiness | 2, 4 | Security and governance work at Secure and Standardise that satisfies insurer expectations. |
| Business Technology Roadmap | 1, 8 | Planning at Discover and continuous planning at Improve — the strategic thread that ties the framework together. |
| Microsoft Secure Score | 2, 5, 6 | Security measurement at Secure, Optimise and Prepare — tracking and improving the Microsoft 365 security posture. |
| AI Adoption Roadmap | 6, 7, 8 | The path from Prepare through Implement to Improve — scaling AI from pilot to organisation-wide. |
| Virtual CIO | 1, 4, 5, 8 | Executive-level technology leadership at Discover, Standardise, Optimise and Improve — keeping strategy aligned with outcomes. |
How the Framework Creates Better Technology Decisions
Technology projects often fail because organisations focus on products before understanding business priorities. The Business Modernisation Framework™ encourages leaders to ask better questions before making technology investments.
Business before technology
Understand what the business needs to achieve before evaluating which tools will help achieve it.
Security before expansion
Strengthen security foundations before introducing new systems, so growth does not introduce new risk.
Governance before AI
Establish policies, ownership and oversight before deploying AI into business operations.
Standardisation before automation
Create consistent, well-documented processes before automating them — automating chaos simply produces faster chaos.
Measure before scaling
Pilot, measure and prove value before rolling out across the organisation.
Continuous improvement over one-off projects
Treat technology as an ongoing capability, not a project with a finish line.
Business Outcomes
The framework is not about technology for technology's sake. It is about the business outcomes that well-managed technology makes possible.
Reduced business risk
Security, governance and standardisation reduce the likelihood and impact of technology failures, breaches and outages.
Higher productivity
Modern tools, optimised workflows and proactive support help your team spend more time on valuable work.
Improved collaboration
Microsoft 365, cloud services and standardised processes make it easier for teams to work together from anywhere.
Better governance
Clear policies, ownership and review processes turn technology from an ad hoc collection of tools into a managed capability.
AI readiness
Secure systems, quality data and strong governance create the foundation for responsible, valuable AI adoption.
Stronger customer confidence
Clients trust businesses that take security, governance and technology seriously. A modern environment is a competitive advantage.
Operational consistency
Standardised systems, policies and processes reduce complexity and make the business easier to run and scale.
Scalable growth
A technology roadmap aligned with business goals supports sustainable expansion rather than holding it back.
Common Mistakes
The framework exists to prevent these common pitfalls. Recognising them is the first step to avoiding them.
Treating technology as an IT project
Leaving technology decisions to IT without executive ownership, business objectives or cross-functional involvement.
Buying AI too early
Introducing AI before securing the environment, organising data and establishing governance — creating risk instead of value.
Ignoring governance
Operating without policies, ownership or review processes, so technology decisions are made ad hoc and inconsistently.
Poor Microsoft 365 adoption
Leaving SharePoint unstructured, Teams inconsistent and permissions loose, turning the platform into a liability.
Weak executive sponsorship
No clear accountability for technology outcomes, leading to stalled projects and unmanaged risk.
No measurable outcomes
Failing to define or track success metrics, so there is no way to assess whether technology investments are delivering value.
“The organisations that achieve the greatest return from technology rarely buy more tools than everyone else. They make better decisions because they follow a structured framework that aligns technology with business goals.”
Executive Checklist
Use this checklist to assess where your organisation sits within the framework. If you cannot confidently answer these questions, a Technology Strategy Session will help.
- Do we have a technology roadmap that aligns with our business goals?
- Do we know our key technology and cyber security risks?
- Are our systems secure — have we implemented the Essential Eight and identity protection?
- Is our Microsoft 365 environment optimised for collaboration, security and governance?
- Are we ready for AI — is our data organised, our permissions clean and our governance in place?
- Who owns technology outcomes in our organisation?
- Do we measure the success of our technology investments?
- Do we have a continuous improvement process for our technology environment?
Frequently Asked Questions
What is the LOOKUP Business Modernisation Framework?
The Framework is an eight-stage methodology — Discover, Secure, Modernise, Standardise, Optimise, Prepare, Implement and Improve — that guides businesses through modernising technology, strengthening cyber security and adopting AI in a structured, measurable way. It ensures every technology decision supports a clear business outcome rather than reacting to problems one at a time.
Why do we need a framework rather than just buying technology?
Technology projects fail most often because of poor implementation, not poor products. A framework provides the strategy, governance, security and measurement that turn tools into outcomes. Without it, businesses accumulate disconnected systems that do not work together and do not deliver measurable value.
How long does the framework take to implement?
It depends on the size and complexity of the organisation. A small business with a relatively clean environment may move through the first five stages in three to six months. Larger organisations or those with significant legacy systems may take twelve months or more. The framework is designed to be continuous — Improve is an ongoing stage, not a finish line.
Do we have to complete every stage in order?
The stages are sequential by design — each builds on the foundations of the previous one. However, in practice there is overlap. A business may begin Modernise while completing elements of Secure, for example. The key principle is that no stage is skipped: trying to Implement AI without first completing Prepare will create risk rather than value.
Is the framework only for businesses planning to adopt AI?
No. The first five stages — Discover, Secure, Modernise, Standardise and Optimise — deliver significant business value on their own. AI readiness and adoption are stages six and seven, available to businesses that want them. The framework is about building a strong, secure, productive technology foundation first.
How does the framework relate to the Essential Eight?
The Essential Eight is the security framework applied during the Secure stage. It provides the technical controls that protect the business before new tools are introduced. The Business Modernisation Framework is broader — it encompasses security, productivity, governance and AI — but the Essential Eight is the security baseline it builds on.
Can the framework help us prepare for ISO 27001?
Yes. ISO 27001 is an information security management system, and the Secure, Standardise and Prepare stages of the framework align closely with its requirements. Businesses working towards ISO 27001 certification will find that the framework provides the structure and governance needed to support that journey.
What happens if we skip the Secure stage?
Building on insecure foundations means every new tool introduces new risk. Skipping Secure leads to environments where AI can surface sensitive information, breaches go undetected and business continuity is not guaranteed. Security is the foundation that makes everything else possible.
How does the framework help with Microsoft Copilot adoption?
The Prepare stage is specifically designed to get Microsoft 365 ready for Copilot — organising SharePoint, cleaning up permissions, establishing governance and ensuring data quality. The Implement stage then pilots Copilot with defined use cases, human oversight and measurement. This approach delivers value rather than expensive experimentation.
What size businesses is the framework for?
The framework is designed for small and medium businesses — typically 5 to 250 staff — that have outgrown ad hoc IT and need a structured approach to technology. It is particularly valuable for businesses that want to adopt AI but recognise they need to build the foundations first.
How is the framework different from a technology roadmap?
A roadmap is a plan; the framework is a methodology. The Business Technology Roadmap is one of the resources that supports the framework — it sits within the Discover and Improve stages. The framework provides the structure, stages and principles that guide the roadmap and every other technology decision.
Do we need to work with LOOKUP to use the framework?
The framework is published openly so any business can understand and apply it. However, most businesses benefit from experienced guidance — particularly during Secure, Prepare and Implement, where the technical and governance work is complex. LOOKUP provides that guidance through managed IT, cyber security, Microsoft 365 and AI readiness services.
How do we measure success with the framework?
Success is measured against the business objectives defined during Discover. Common metrics include reduced downtime, faster support response times, improved security posture (Microsoft Secure Score, Essential Eight maturity), increased productivity, higher Microsoft 365 adoption and measurable AI outcomes. The Improve stage ensures these metrics are reviewed regularly.
What industries benefit most from the framework?
Any business that relies on technology to operate benefits. The framework is particularly valuable for accounting firms, law firms, financial services, franchise groups and HVAC businesses — industries where security, compliance, consistency and productivity are critical. The principles apply regardless of industry.
How do we get started?
Start by booking a Technology Strategy Session. We will help you assess where you are across the eight stages, identify priorities and build a roadmap for moving forward. The first conversation is about understanding your business — not selling a product.
Related Resources
Each of these executive guides supports specific stages of the framework. Explore them to go deeper into the areas most relevant to your business.
Ready to modernise your business?
Every organisation starts at a different point. Whether your priority is strengthening cyber security, improving Microsoft 365, preparing for AI or creating a long-term technology roadmap, the first step is understanding where your business sits within the Business Modernisation Framework™.
Book a Technology Strategy Session to identify your current stage, prioritise opportunities and build a practical roadmap for modernisation.
Peter Kantarelis
Founder, LOOKUP
Business Technology Strategist
Peter Kantarelis is the Founder of LOOKUP and a business technology strategist helping Australian organisations modernise technology, strengthen cyber security and prepare for practical AI adoption. He developed the Business Modernisation Framework™ to give businesses a structured, measurable approach to technology decisions — one that focuses on business outcomes rather than technology products.
The Business Modernisation Framework™ reflects more than 25 years of helping Australian businesses improve technology, strengthen cyber security and prepare for practical AI adoption.
Rather than promoting individual products, the framework provides a repeatable methodology that helps organisations make better technology decisions over the long term.
View More InsightsGet the latest IT & AI insights
Join over 5,000 SMB owners receiving our weekly newsletter on tech trends, security alerts, and AI automation tips.
We respect your privacy. Unsubscribe at any time.
