How do you work with a manager who is confidently wrong about basic IT infrastructure and security? Their reasoning is often that something was done a certain way years ago, so it must still be the right approach today. They do not research current practices or consult the team, and modern tools in our hybrid Microsoft 365 environment—such as Conditional Access—are unfamiliar to them. I want to avoid coming across as a know-it-all, but I also do not feel comfortable implementing poorly considered ideas or quietly doing the manager's job for them. What is the best way to handle this without putting my career at risk?
5 Answers
Cover yourself carefully. Send concerns through an auditable channel such as email, include the likely impact, and suggest safer alternatives. If leadership still approves the plan, implement it as directed rather than repeatedly fighting the same battle. Keeping that documentation can protect you when the predictable outage, security issue, or budget problem eventually appears.
Stop framing it as a contest over who is right. Ask what outcome they want, then explain the risks, costs, and tradeoffs of their proposed approach versus a current alternative. Put the recommendation in writing and ask them to confirm the decision. If they still choose the older method, you have made the concern clear and documented their decision.
Try to create ownership without making the manager feel publicly challenged. Ask for confirmation in neutral language, such as: “To make sure I build this correctly, can you confirm that you want option A instead of option B, accepting these specific risks?” Having the decision written down often makes people reconsider, and at minimum it establishes who approved the approach.
Numbers often persuade managers more effectively than technical arguments. Compare the old and proposed approaches using costs, support effort, security exposure, compliance requirements, and likely business impact. Concrete figures and a short written comparison are much harder to dismiss than general claims that industry practice has changed.
There is a limit to how much you can fix from below. Do your job professionally, make reasonable recommendations, and do not take personal responsibility for decisions you do not control. If the manager blocks modernization and the environment becomes a dead end, start looking for a healthier workplace rather than burning yourself out trying to win every argument.
I have mostly been keeping my head down because the local job market is rough and I cannot risk losing my income. Escalating could easily backfire, so documenting decisions seems like the safest first step.