Blog

The Inside Track on How Boards Evaluate Their CIOs

Corporate boards increasingly expect CIOs to translate complex technology initiatives into clear strategic opportunities by demonstrating strong business acumen, especially around investment, growth, and risk. Effective CIOs communicate technology’s impact on business outcomes concisely and align their presentations to board members’ perspectives, balancing operational improvements with innovation to support both running and transforming the business.

https://www.cio.com/article/4149185/the-inside-track-on-how-boards-evaluate-their-cios.html

EUDR in Practice: How to Correctly Set Up Due Diligence in the Supply Chain

The EU Deforestation Regulation (EUDR) establishes new due diligence requirements for companies dealing with certain commodities, mandating proof that products comply with EUDR and are deforestation-free before entering or leaving the EU market. Companies must collect detailed supply chain information, assess risks, implement mitigation measures if necessary, submit a Due Diligence Statement, maintain an internal due diligence system, and retain documentation for inspections.

https://www.grantthornton.cz/en/news/eudr-in-practice-how-to-correctly-set-up-due-diligence-in-the-supply-chain/

Ransomware’s New Era: Moving at AI Speed

Ransomware attacks are accelerating in speed and sophistication, with threat actors increasingly using artificial intelligence to quickly exploit valid credentials and bypass traditional security tools like endpoint detection and response (EDR). Reports from Halcyon and Arctic Wolf highlight that ransomware tactics have evolved from encrypting data to multi-extortion schemes and direct victim targeting, while AI enables automated, high-fidelity social engineering, making defense more challenging and emphasizing the need for improved access management and transparency in cybersecurity efforts.

https://www.darkreading.com/endpoint-security/ransomware-new-era-moving-ai-speed

Why AI Scaling Is so Hard – and What CIOs Say Works

The article explains that many organizations struggle to scale AI beyond pilot projects due to high costs, poor data quality, unclear business value, and difficulty integrating it into everyday workflows. CIOs say successful scaling starts with solving real operational problems, involving end users early, improving data foundations, and measuring outcomes instead of experimenting without goals. The article concludes that AI delivers results only when treated as a business transformation effort with governance, user adoption, and clear return on investment, rather than as a standalone technology project.

https://www.informationweek.com/machine-learning-ai/why-ai-scaling-is-so-hard-and-what-cios-say-works

Google Unleashes Gemini AI Agents on the Dark Web

Google has launched its Gemini AI agents in public preview to monitor the dark web, analyzing up to 10 million posts daily with 98 percent accuracy to detect relevant security threats for organizations. The tool builds detailed profiles of customers and uses advanced AI models to identify and prioritize genuine risks such as data leaks or initial access brokers, aiming to reduce false positives common in traditional dark web monitoring. Additionally, Google has integrated AI agents into its Security Operations platform to automate threat responses and investigations.

https://www.theregister.com/2026/03/23/google_dark_web_ai/

Ten Things to Ask Your IT Team About NIS2 Compliance

The article discusses the key areas organizations must address to ensure compliance with the EU's NIS2 directive, which mandates robust cybersecurity governance and resilience. It highlights ten critical focus points including risk analysis, incident handling, business continuity, supply chain security, and the importance of continuous evidence gathering and proper IT tools. The article emphasizes that leadership must proactively oversee cybersecurity measures to meet strict regulatory requirements and maintain business continuity in the face of threats.

https://www.kaseya.com/blog/nis2-compliance/

Where Your Data Team Sits Matters More Than the Code They Write

Naveen Mylarappa argues that the organizational placement of a data team significantly impacts the return on investment (ROI) of data engineering, beyond just the technical work they perform. The article highlights how data teams aligned under different departments—finance, marketing, engineering, or as standalone units—face distinct incentives and priorities, shaping how their value is perceived and how effectively they drive business outcomes. Ultimately, the key to demonstrating data's impact lies in aligning data efforts with the business goals and incentives of the department sponsoring the work.

https://www.cio.com/article/4148162/where-your-data-team-sits-matters-more-than-the-code-they-write.html

10 Things Keeping IT Leaders up at Night

The article outlines the top ten concerns keeping IT leaders, especially CIOs, awake at night in 2026, highlighting cybersecurity threats, responsible AI deployment, and governance challenges as foremost. It emphasizes the pressure on CIOs to align technology initiatives with business outcomes, continuously drive impactful transformation, and ensure their teams rapidly upskill amid rapid tech evolution, all while maintaining flawless IT operations.

https://www.cio.com/article/4148311/10-things-keeping-it-leaders-up-at-night-2.html

CISO’s Perspectives – The 4 Recommendations to Sleep Without a Worry

Paul Bayle, Group CSO at Atos, discusses key recommendations for CISOs to manage cybersecurity effectively and maintain peace of mind despite evolving threats. Emphasizing the importance of thorough IT system mapping, investing in multiple security technologies, fostering strong governance involving cross-department collaboration, and engaging with expert ecosystems, he highlights the challenges posed by “unknown unknowns” and the need for continuous awareness, training, and management support to mitigate risks across the organization.

https://atos.net/en/lp/cybershield/cisos-perspectives-the-4-recommendations-to-sleep-without-a-worry

How CISOs Can Survive the Era of Geopolitical Cyberattacks

Geopolitical cyberattacks, particularly destructive Iranian wiper campaigns, are increasingly targeting critical infrastructure and organizations to cause operational chaos rather than financial gain. These attacks rely on stolen credentials and legitimate administrative tools to move laterally within networks, making containment and strict internal access controls essential for CISOs to limit damage and ensure organizational resilience.

https://www.bleepingcomputer.com/news/security/how-cisos-can-survive-the-era-of-geopolitical-cyberattacks/

Scroll to Top