Professor Dawson’s recommended roadmap is based on research into past experiences in IT modernization at the Federal and State level, as well as in industry. He draws lessons from his research and extensive case interviews with Federal and State Chief Information Officers (CIOs). Using these lessons, the author frames impediments to modernization and risks for agencies that do not modernize, including continued cybersecurity weaknesses.