Meaningful digital transformation does not require large, expensive specialist teams. It requires collaboration. Through Shared Services and collective procurement, organisations across Northern Ireland’s voluntary and community sector (VCS) can access the same quality of digital capability, cybersecurity infrastructure and AI readiness as much larger companies and at a fraction of the cost without the need to recruit expertise they cannot afford to retain individually.
This is a practical model that is already working in other environments and one that NI’s third sector, with its extraordinary reach, resilience and capacity for cross-community partnership is well placed to adopt.
The persistent myth
There is a persistent myth in the world of digital transformation that it belongs to large, well funded, and technically sophisticated organisations with significant technology budgets and dedicated innovation labs. This belief is wrong and especially for charities, hospices, housing associations, community organisations and voluntary bodies who arguably need transformation most. These organisations serve the most vulnerable and yet have the least room to fail.
Most VCS organisations in NI have passionate, committed people doing extraordinary work often with basic and outdated systems, fragmented data, and an IT administrator who doubles up as the unofficial IT support desk. There is no cybersecurity analyst. There is no procurement specialist. There is no digital transformation lead. There is someone who knows more than everyone else about the spreadsheet, and that person is often holding everything together through dedication to their role and organisation need.
This is not a criticism. It is a reality. It is also a reality that digital transformation policy has too often failed to address. These organisations don’t have the capacity to hire expertise they cannot afford. What’s needed is a model that makes that expertise collectively available.
Shared Services: the practical catalyst for change
Shared Services are not a new concept, but their relevance to Northern Ireland’s VCS has never been greater.
A small disability charity in Derry cannot justify the cost of a full-time cybersecurity professional. A community housing association in Newry cannot negotiate enterprise grade software licensing on its own. A network of food banks stretching from Ballymena to Enniskillen cannot build a unified data infrastructure without external support.
When VCS organisations pool their resources, which can include technology infrastructure, procurement experience, specialist expertise, licensing costs and staff capability they achieve something individually impossible: the benefit of scale without the loss of core values or identity.
Critically, a Shared Service model does not require organisations to give up on their independence or community roots.
No single participating organisation in a Shared Services model need employ a large specialist team. They require only the collective will to pool resources and the governance to manage them fairly.
The opportunity for technology deployment applies equally to back office functions. Finance, HR, payroll, compliance and governance support are areas where many organisations are carrying duplicated cost and effort independently. Pooling these functions, whether through a formal Shared Services vehicle or looser consortium arrangements, frees up both resource and leadership for more business critical work.
There would be no procurement exercise, no implementation risk to carry and no major learning curve on a new system. The service would already be proven to work, already compliant and already trusted. The ongoing overhead is shared across the consortium rather than borne alone.
Collective procurement: an underexploited lever
If Shared Services are the driver for change, collective procurement is one of the most underexploited levers available to NI’s VCS.
Most smaller charities respond to immediate procurement needs, often without specialist legal or technical knowledge. The result can be a landscape of mismatched systems, duplicated spending and contracts that differ significantly. Northern Ireland’s eleven councils, its arm’s length bodies and its VCS are, in many cases, procuring similar or identical tools entirely independently of one another.
If organisations align their procurement cycles, agree on common specifications and go to market collectively, potentially through existing frameworks such as those enabled through central procurement directorates and CoPEs, the transformation can be immediate and significant. Best value is not achieved by each small charity negotiating its own contract in isolation. It is achieved by presenting the market with something worth competing for on a larger scale.
Shared procurement is particularly relevant for technology and cybersecurity. Software licensing, cloud infrastructure, security environments and managed services all carry significant economies of scale. A consortium of VCS organisations procuring together is not only a more attractive client than any one of them individually; it is a fundamentally different type of client, capable of accessing products, services and support structures that are simply not available to small individual buyers.
This model demands a cultural shift from competition to collaboration,and from independence to interdependence. Those who make it do not lose their identity; they gain capability they could not otherwise access.
Cybersecurity: a collective responsibility
The arrival of AI reshapes the cybersecurity landscape in ways that are particularly acute for our third sector. Over the past five years, the DCMS Cyber Security Breaches Survey has consistently shown that between a quarter and a third of UK charities report experiencing a cyber attack or breach each year. This is a growing concern for charities.
AI is already being deployed by threat actors to automate attacks, personalise phishing at scale and identify vulnerabilities in digital systems. What makes the AI-enabled threat environment totally different is the speed at which it evolves.
An organisation that was adequately protected six months ago may not be today, not because it has done anything wrong, but because the threat landscape around it has shifted faster than any manual response can track. Adequate cyber security is a continuous, actively managed process and one that demands dedicated capability the vast majority of VCS organisations simply cannot afford. However, a shared cybersecurity capability, shared threat intelligence, collective incident response, AI-assisted defence tools and a central security operations function is entirely achievable through a Shared Services model.
Ethics and accountability: structure and oversight
Many conversations around AI ethics have focused on principles; fairness, transparency, explainability, harm avoidance. The challenge is not defining them it is embedding accountability. For VCS organisations in NI that often work with the most marginalised people in some of the most deprived communities here this is not a theoretical concern.
When an algorithm shapes a benefits or care decision, accountability cannot be left vague. A Shared Services model makes genuine ethical oversight more achievable through ethical governance frameworks.
Talent: shared investment in shared capability
Access to digital and AI talent is no longer simply a HR challenge. It is a regional strategic issue. The VCS is almost entirely locked out of the talent market for senior digital, data and cybersecurity professionals not through lack of ambition, but through an inability to compete on salary and career development.
However, through proven shared apprenticeship programmes, regional digital talent partnerships, secondment arrangements with institutions, like universities and larger housing associations, and collaborative workforce planning, the VCS can begin to build the capability pipeline it needs.
Conclusion: the opportunity to act together
Digital transformation is not only for large corporate organisations. Shared Services and collective procurement, designed around the specific realities of the voluntary and community sector can make meaningful digital transformation genuinely achievable without large specialist teams, without unsustainable investment, and without the loss of core values or identity that comes from trying to become something an organisation was never meant to be.
Northern Ireland’s voluntary and community sector has survived conflict, austerity and too often political paralysis. It has shown determined resilience. What it needs now is the infrastructure, the investment and the collective will to ensure that the digital era does not leave it behind.
The opportunity and obligation is to make Shared Services a lived reality, together.
Iggy O'Doherty is an experienced digital health solutions and cyber security consultant, with a distinguished career that included serving as Director of Public Sector Shared Services and Cyber Security.
Beyond his technical expertise, he has demonstrated a strong commitment to social impact, serving as Chairman of Simon Community, Northern Ireland's leading homelessness charity for over six years.
Pivotal Platform is a home for guest writers to contribute their perspectives on public policy debates in Northern Ireland. The views expressed by guest writers are not necessarily those of Pivotal.
