I am an information security professional working as an IT auditor. I am also the lead for my team. Recently we realized we had more budget money to spend for next year after immediate needs were fulfilled.
I am currently experimenting with some tooling that I am thinking of recommending we purchase for the team. A team member in the team recently asked me whether he can be involved in "playing" with some of the new tools we may be adopting if all goes to plan. However, just today I checked some of this work and the "ordinary" or "boring" work was not done well or completed. These items would include IDS / SIEM monitoring, quarterly access reviews, SOX documentation updates etc.
To a certain extent, I understand as I too considered these tasks to be boring and mundane when I used to be a junior. However, these are necessary. I agree that experimenting with new tools is more exciting, but I can't assign these types of tasks to the team until I see basic tasks are done and done well.
Other than saying just "get the work done" because it needs to be done, how do I tell the team the importance of "ordinary / boring work?