skip to content

In IT governance, 'demand management' and 'supply management' are treated as two separate disciplines within demand-supply alignment. What does each one actually control, and what typically goes wrong when a company builds strong supply-side portfolio management but never builds a comparable demand-management process?

level: seniorimportance: must knowfreq 42%

answer

  1. demand = what/prioritize
  2. supply = how/deliver
  3. PMO dashboard green while CEO unhappy
  4. shadow IT as rational bypass
  5. tiered governance to avoid bottleneck

basics

~20 s

Demand management decides which requests for IT work get approved and in what order; supply management decides how IT actually delivers that approved work. If a company is great at delivering work but bad at deciding what to accept, IT ends up efficiently building a pile of things nobody prioritized well, or business units just go around IT entirely.

solid answer

~40 s

Demand management is the intake and prioritization side: capturing requests for new capability from the business, sizing and scoring them, and deciding what gets funded and in what sequence, usually through a governance board or portfolio committee. Supply management is the delivery side: allocating engineering capacity, managing sourcing/vendor decisions, and running the actual build against whatever demand was approved. When supply-side discipline (capacity planning, delivery metrics, a mature PMO) outpaces demand-side discipline, the pipeline fills with whatever got requested loudest or first rather than what matters most, delivery teams optimize for throughput on a poorly-prioritized backlog, and business units that can't get timely intake through the formal process start commissioning shadow IT outside it — supply excellence without demand discipline just means 'we're very efficient at building the wrong things.'

go deeper

for a junior

Should be able to distinguish 'deciding what to build' from 'building it' as two different jobs.

for a middle

Should be able to describe what a demand-intake process and a supply/delivery process each typically involve in a real organization they've worked in.

for a senior

Should be able to diagnose the strong-supply/weak-demand failure pattern from symptoms (dashboard green, stakeholders unhappy, shadow IT) and propose a fix.

for a principal

Should be able to design tiered governance that scales demand management to request size/risk, and connect it to cost-transparency practices like TBM so prioritization is evidence-based rather than political.

## Two control problems under one label Demand-supply alignment splits IT governance into two distinct control problems that are often conflated under the single label 'IT governance.' - **Demand management** governs the question 'what should we build, and in what order' — it is the intake process: business units submit requests (a new feature, a new system, a compliance-driven change), those requests get sized, scored against strategic criteria (value, risk, urgency, dependency on other work), and a governance body — commonly a portfolio or investment committee with both business and IT representation — decides what gets funded this cycle and what gets deferred or rejected. - **Supply management** governs the separate question 'given what's been approved, how do we actually deliver it' — it covers engineering capacity planning, team allocation, sourcing decisions (build in-house, buy, or outsource), vendor management, and the delivery mechanics (sprint cadence, release management, a PMO tracking status). The distinction matters because these two disciplines can each be independently mature or immature, and the combinations produce very different failure signatures. ## Why supply matures first The specific failure the question asks about — strong supply, weak demand — is common because supply-side maturity is easier to build and easier to demonstrate. A PMO with velocity dashboards, capacity utilization reports, and a well-run delivery machine is a visible, measurable achievement that IT leadership can point to. Demand management is harder: it requires business stakeholders to agree on a shared prioritization framework, to accept that their pet request might rank below someone else's, and to sit through a governance process that inherently produces some losers every cycle — organizationally painful in a way that improving delivery velocity is not. So it's common to find IT organizations that have invested heavily in delivery excellence while demand intake remains informal: whoever has the most political capital, the loudest executive sponsor, or simply got their request in first jumps the queue, regardless of actual business value. ## The mechanism of the failure — a very efficient bad backlog The mechanism of the resulting failure is that supply-side excellence has nothing to correct for a bad backlog — a highly efficient delivery organization will very efficiently ship whatever is in front of it, at high velocity, with clean metrics, while never questioning whether that backlog reflects the company's actual priorities. This produces the well-known enterprise IT paradox where the PMO dashboard shows green (on time, on budget, high throughput) while the CFO or CEO is separately convinced that IT delivers no strategic value — both can be true simultaneously, because delivery quality and portfolio quality are orthogonal, and only demand management governs the latter. ## The second symptom — shadow IT The second, more corrosive symptom is shadow IT. When the formal demand-management process is slow, opaque, or perceived as arbitrary — long queues, unclear scoring criteria, requests silently deprioritized without explanation — business units with a budget of their own stop submitting requests through the front door and instead: - buy SaaS tools directly, - hire contractors outside IT's sourcing process, - or build spreadsheet-and-macro 'systems' that later become load-bearing and unsupported. This isn't a business-side failure of discipline so much as a rational response to a demand process that isn't delivering: if going around IT gets the marketing team its campaign tool in two weeks instead of the eight months a backlogged intake process would take, they will go around it, and no amount of supply-side delivery excellence fixes that, because supply management was never the bottleneck — demand intake was. ## The trade-off — governance overhead, answered by tiering The trade-off in building out demand management is governance overhead: a rigorous intake and scoring process adds friction and latency to every request, including genuinely urgent or small ones, and if the scoring criteria and committee cadence aren't calibrated to request size, it produces the opposite failure — a lightweight bug fix stuck behind the same six-week portfolio review cycle as a multi-million-dollar platform investment, which pushes teams right back toward shadow IT to avoid the process entirely. Mature organizations solve this with **tiered governance**: | Request | Approval path | |---|---| | Small, low-risk requests | get lightweight, delegated approval close to the team | | Large or cross-cutting investments | go through the full portfolio committee | So demand management adds rigor where it earns its cost without becoming supply management's bottleneck. Financial services and large regulated enterprises — where every IT spend traces back to a portfolio committee — are the canonical setting where this split is formalized explicitly, often under a technology business management (TBM) or similar cost-transparency framework so that demand decisions are made with real cost data rather than guesses.

  • How would you detect, from the outside, that an organization has strong supply management but weak demand management?
    Look for a mismatch between delivery metrics and stakeholder sentiment: velocity, on-time delivery, and budget adherence all look healthy on the PMO dashboard, but business leadership separately complains that IT isn't delivering strategic value, or that getting anything prioritized takes political maneuvering rather than a transparent process. A rising rate of SaaS purchases and shadow tooling outside IT's official portfolio is another strong external signal.
  • What's the risk of over-correcting by making demand management too heavyweight?
    If every request — no matter how small — has to go through the same portfolio committee cadence as a major platform investment, the latency itself pushes teams back toward shadow IT, recreating the exact problem the process was meant to solve. The fix is tiering: lightweight, delegated approval for small/low-risk requests, full committee review reserved for large or cross-cutting investments.

It's like a restaurant kitchen versus the host stand: supply management is the kitchen running at flawless efficiency, plating every order fast and correctly; demand management is the host stand deciding which orders get taken and in what sequence. A world-class kitchen with no host stand discipline just cooks whatever the loudest customer shouted first, perfectly.

saying these in an interview costs you the question

  • Treats 'IT governance' as one undifferentiated thing
  • Assumes fixing delivery velocity will fix prioritization problems
  • Can't explain why a highly efficient delivery org can still be seen as strategically useless
  • Doesn't recognize shadow IT as a symptom of a governance gap rather than a business-side discipline failure
  • Proposes a single uniform governance process regardless of request size/risk

context