In this article, we’re going to explore what citizen development is, why it is important and what the opportunities are for in-house legal teams.
What is citizen development?
Citizen development can be defined as a process in which non-IT professionals are successfully using software that can be configured to produce simple solutions or “apps” and workflows with minimal involvement from IT professionals, and little to no coding needed. Most or all of the configuration is done through interfaces specifically designed for non-IT people, although realistically some more traditional involvement from a software developer may still be required.
Generally, citizen developers are “super-users” or administrators in particular functions throughout the business with specialist needs, and work to configure custom solutions that help to improve or automate processes and ways of working. Teams or departments that typically benefit from a citizen development approach include sales, finance, marketing, operations and R&D, and potentially legal teams too.Arguably, citizen development is the latest incarnation of a mega-trend that has been developing over the past twenty years or so whereby central IT functions empower people throughout businesses by giving them the ability to manage their own technology.
What are low-code and no-code solutions?
Citizen development can be seen as part of a move away from the individual customisation of software due to the prevalence of cloud-based solutions where upgrades are provided on a continuous basis, meaning there is no longer flexibility for organisations to customise software to their own needs. Instead, IT software vendors are incorporating the ability to configure solutions into software design to suit individual organisational needs rather than having to change underlying codes. Increasingly, this is being targeted to non-IT specialists with a growing number of low-code or no-code solutions.
The growth of low-code and no-code solutions are creating opportunities for citizen developers. These invariably have various elements that make it easier for super-users, including:
- Well-designed interfaces and “authoring canvases” that make it easy for non-IT professionals to configure workflows, automation and solution.
- Libraries of pre-existing connectors to popular enterprise applications such as Salesforce, SharePoint and ServiceNow which make it easy to connect and integrate different systems.
- Libraries of popular patterns of workflow or automation that can be re-used in your own solutions.
There are numerous low-code and no-code solutions that particularly focus on automation and workflow, such as Zapier, IFFT, Kissflow, K2 and Nintex. Perhaps the most prevalent solution is the Microsoft Power Platform: a suite of apps available within some Microsoft 365 licenses that includes Power Automate (automation and workflow), Power BI (data reporting and visualisation), Power Apps (web and mobile apps) and Power Virtual Agents (chatbots). The use of the Power Platform is currently the focus for many official citizen development initiatives.
What are the advantages of citizen development?
There are a number of benefits of engaging with citizen development, including that:
- Specialists within the business who know its processes can leverage their own knowledge to create solutions that are completely focused on the way they work.
- Local and department-specific solutions can be created that resource-stretched central IT development teams cannot provide, ultimately saving on resources.
- Local teams are more invested in using solutions they have partly created themselves, leading to better adoption of particular solutions.
- It allows organisations to get a better ROI on their investment in tools like the Microsoft Power Platform.
- It arguably creates a culture of innovation and digital enablement that goes on to produce further results.
What are the disadvantages?
Of course, there are also disadvantages in citizen development. Probably the most prominent of these is a number of associated risks in “opening up” development to non-IT professionals; these range from security, to data privacy, to following best practices in design, through to whether an app produces value. However, the design of low-code and no-code platforms and the controls that can be put in place significantly reduce some of these risks.
Another risk is around resourcing - supporting and training “citizen developers” may require an investment in resources that outweighs the value gained from developing solutions in the first place.
What kind of solutions are citizen developers producing?
Generally, the kind of solutions that citizen developers are able to successfully produce tend to be basic and straightforward and focus on the automation of simple, repeatable tasks. For example:
- Triggering a simple action such as a notification based on an event or trigger, e.g. sending an automated email when somebody completes a form.
- Enabling an automated action across two separate systems, e.g. adding a piece of information to your intranet when a new project is added to Salesforce.
- Enabling data to be updated in more than one place at the same time or displayed across different systems, e.g. updating a calendar based on dates being set up in another system.
- Being able to build data reports and visualisations based on information from more than one system.
- Enabling different workflows based on values captured in a form.
- Putting some of these elements together to build simple apps that can be accessed via a browser.
What are the opportunities for in-house legal teams?
Citizen development has the potential to deliver efficiencies to the intense knowledge-work that in-house teams carry out. Adding simple automation delivered through citizen development can contribute to:
- Submitting requests for help or questions to in-house legal teams.
- Workflow around risk-related processes such as Know Your Client or any related due diligence around new suppliers.
- Gathering standard sets of information from people requesting contracts.
- Recording and tracking the progress of any task or process that is repeated across multiple jurisdictions.
In-house legal teams can also play an advisory role in reducing associated risks around the use of citizen development that can arise when it happens at-scale or without the necessary controls in place. If your organisation is considering deploying citizen development or it’s already happening in an “unofficial” form, in-house legal teams may be able to contribute to minimising risk and ensuring the right processes and approaches are being adhered to.
Security, data privacy, GDPR, where data resides and ethical considerations are all potential pitfalls, and training and review processes can be necessary.
What approaches do you need for citizen development to work?
For citizen development to work and provide value at-scale, you need to have the right governance in place, covering processes and roles. This means IT functions need to consider questions such as:
- What low-code or no-code software are users permitted to use?
- How are citizen developers trained and supported?
- What approval and review processes are in place around developing an app, and when do these reviews take place?
- Who is responsible for the app in circumstances such as someone leaving?
- How much do we support an app that goes wrong?
- How do we ensure different apps don’t undermine other digital efforts and strategies, for example, creating data siloes or bypassing important enterprise solutions?
As stated above, there are also approaches which need to take place to ensure legal and regulatory commitments are met, and here, in-house legal teams as well as other risk and compliance functions will need to be involved in designing the right governance framework.
Generally, a governance framework needs to be considered when both:
- Citizen development is being scaled-up or introduced as an enterprise programme.
- Citizen development is already happening and presenting risks.
If, in practice, your organisation’s citizen developers are limited to a handful of people who are already working closely with the IT function, it might be the case that the risk is already being managed through a close working relationship with IT, with an ongoing narrative about roles and responsibilities based on a case-by-case basis.
Citizen development should be on your radar
Citizen development may not be a significant trend in your organisation, but it should be on your radar, both because of the opportunities to improve processes within your in-house legal team and because of risk mitigation that may need your input.
Going forward, the term “citizen development” may also start to get dropped, as configuration of “apps” by super-users without a professional IT background becomes normalised. This is definitely an area to watch.