Blog

BlackLine CISO Jill Knesek on Building Security Teams

By / Blog /

Jill Knesek, BlackLine's CISO, discusses her experience in cyber threat mitigation and building security teams. She emphasizes a structured cybersecurity team with governance, risk, compliance, application security, and operations units. Knesek prioritizes soft skills and cultural fit in hires, alongside technical training. Effective communication with executives using risk management language and transparency builds trust. She identifies ransomware as a top threat, advocating strong security practices and employee training. Knesek acknowledges the potential of AI in enhancing security while remaining cautious of its risks. Her key advice is to focus on fundamental security hygiene to address the majority of attack vectors.

https://www.infosecurity-magazine.com/interviews/blackline-ciso-jill-knesek/

How Data Storytelling Turns CIOs Into Communication Leaders

By / Blog /

Data storytelling enhances CIO communication by integrating visualization, narration, context, and emotional engagement. This approach addresses the knowledge gap between CIOs and business stakeholders, promoting effective data-driven decisions and demonstrating the value of analytics. Key strategies include creating standardized guides for visualization, providing contextual narratives to connect data with real-world implications, and fostering emotional engagement for impactful insights. Empowering decision-makers with tailored options further supports informed choices, ensuring data-driven narratives are understood and actionable, which drives organizational success.

https://www.ciodive.com/news/gartner-cio-data-storytelling-boardroom-strategy/741258/

Zero Trust Network Access: Ending Implicit Trust in Cybersecurity

By / Blog / ,

Zero Trust Network Access (ZTNA) replaces “trust but verify” with strict access controls for hybrid workforces, minimizing breaches and enhancing compliance in cloud environments. ZTNA denies implicit trust, isolates applications, restricts lateral movement, and enforces least privilege, making it essential in modern cybersecurity.

https://securityboulevard.com/2025/03/zero-trust-network-access-ending-implicit-trust-in-cybersecurity/

The 8 New Rules of IT Leadership — and What They Replace

By / Blog /

8 new IT leadership rules replace outdated practices:

  1. Collaborate with the business, not just serve it.
  2. Foster tech fluency among workers.
  3. IT should model change, leading by example.
  4. Engage across all departments beyond traditional IT scope.
  5. Advocate continuous change instead of prioritizing stability.
  6. Establish safe, flexible environments for innovation.
  7. Transition from CIO roles to COO/CEO for career growth.
  8. Drive organizational strategy rather than just tech delivery.

https://www.cio.com/article/3829606/the-8-new-rules-of-it-leadership-and-what-they-replace.html

From Meta to Airbnb, Companies Flag Risks Dealing With EU AI Act

By / Blog / , ,

Over 70 U.S. companies, including Meta and Airbnb, are highlighting potential risks from the EU's AI Act in their financial disclosures. This regulation imposes compliance costs and could force changes in product offerings. Firms express concerns about civil claims, fines for breaches, and ambiguity in the law's requirements. The Act's enforcement could apply differently across EU member states, adding to uncertainty. Companies emphasize the importance of understanding these regulations for operating in or entering the EU market.

https://news.bloomberglaw.com/financial-accounting/from-meta-to-airbnb-companies-flag-risks-dealing-with-eu-ai-act

GDPR Damages Claims

By / Blog /

GDPR allows individuals to claim compensation for non-material damages, but quantifying these damages is challenging. A study of 255 court cases in Germany from 2018 to 2023 reveals that only 25% of claims are successful, with average claimed damages around €5,200 but awarded damages averaging €3,300. Sensitive personal data results in higher damage awards, indicating that companies face unpredictable liability risks.

https://www.taylorwessing.com/en/insights-and-events/insights/2025/02/gdpr-damages-claims

SolarWinds CISO Says Security Execs Are ‘nervous’ About Individual Liability for Data Breaches 

By / Blog /

SolarWinds CISO Tim Brown highlighted growing anxiety among security executives about personal liability for data breaches, stemming from legal challenges following the company's notable cyberattack. This stress distracts CISOs from their core responsibilities, impacting their effectiveness. While individual executive liability raises concerns, some cybersecurity professionals argue it may enhance accountability. Brown emphasized the need for clearer guidelines to allow CISOs to manage cybersecurity without legal fears hindering their work.

https://cyberscoop.com/tim-brown-solarwinds-liability-cyberlawcon/

AI Companies Battle Over Europe’s AI Act as Creatives Push Back

By / Blog / , ,

AI companies, led by OpenAI, challenge transparency requirements in Europe's AI Act, particularly around notifying content creators when their works are used as training data. As the August 2 deadline approaches, creatives demand compensation, citing copyright infringement and the use of their works without consent. European rightsholders, including journalist groups, feel inadequately protected and are opting out to prevent unauthorized access, while AI firms argue regulations hinder innovation. France, a key player in both AI development and cultural protection, navigates this complex landscape as it balances technological advancement with artist rights.

https://variety.com/2025/digital/global/ai-companies-battle-europe-ai-act-creatives-push-back-1236302611/

Build Vs Buy Software: How to Make Right Choice in 2025

By / Blog /

Build vs Buy Software Decision Guide 2025: Businesses face the choice of developing custom software in-house or purchasing off-the-shelf solutions, influenced by factors such as cost, scalability, and specific needs. Buying software is quicker and cost-effective, while building offers control and customization. A thorough evaluation of team capabilities, timeline, and current solutions is vital for making an informed decision aligned with long-term goals, considering aspects like data security, ownership rights, and required customization for growth. Ultimately, the choice impacts operational efficiency and competitive advantage.

https://eluminoustechnologies.com/blog/build-vs-buy-software/

Scroll to Top