How 100 Enterprise CIOs Are Building and Buying Gen AI in 2025

/

TLDR Summary:
In 2025, enterprise AI spending exceeds expectations, becoming a permanent budget item driven by internal and customer-facing use cases. Enterprises increasingly utilize multiple AI models, with OpenAI, Google, and Anthropic leading the market. Procurement processes mirror traditional software buying, emphasizing cost and security. Enterprises are shifting from building to buying AI applications as the ecosystem matures, particularly in software development and customer support. However, concerns around outcome-based pricing persist. Overall, the landscape shows strategic deployment, diversified model use, and a shift towards AI-native applications.

https://a16z.com/ai-enterprise-2025/

10 Tough Cybersecurity Questions Every CISO Must Answer

/

CISOs face various complex challenges in cybersecurity, requiring regular reflection and strategy. Key questions include whether they enable or hinder business, how to balance security and risk, which metrics to report to the board, and understanding their organization's definition of cybersecurity. Furthermore, effective communication of risks, fostering a team environment for dissent, addressing customer security needs, mapping data locations, and adapting staff strategies with AI insights are vital. Lastly, anticipating emerging threats and ensuring the security infrastructure is fit for future demands are crucial for proactive risk management.

https://www.csoonline.com/article/4009212/10-tough-cybersecurity-questions-every-ciso-must-answer.html

A CISO’s AI Playbook

/

CISO AI Playbook: In a tough security budget climate, improving analyst productivity is crucial. Adopt a strategic framework focusing on throughput over headcount, leveraging AI to handle alerts efficiently. Key steps include calculating alert investigation costs, addressing analyst attention constraints, improving throughput via AI tools, ensuring transparency for trust, valuing time savings, and aligning security outcomes with business goals. AI aids in reducing investigation times and refocuses analysts on high-value tasks while balancing costs and risk mitigation for sustainable operations.

https://www.darkreading.com/vulnerabilities-threats/ciso-ai-playbook

CISO’s Guide to Implementing a Cybersecurity Maturity Model

/

CISO guide: Implement cybersecurity maturity models to effectively navigate evolving threats and compliance. These frameworks assess current capabilities, identify gaps, establish benchmarks, and prioritize investments for improvement, leading to enhanced security, better ROI, risk management, continuous progress, and compliance. Major models include NIST CSF, CMMC 2.0, CIS Controls, and C2M2. Steps for implementation: select a framework, conduct self-assessment, identify gaps and prioritize actions, and monitor improvements continuously.

https://www.techtarget.com/searchsecurity/tip/CISOs-guide-to-implementing-a-cybersecurity-maturity-model

EU AI Act Unpacked #25: European Commission Releases Critical AI Act Implementation Guidelines (Part 3)

/ , ,

European Commission released guidelines on prohibited AI practices under the EU AI Act on February 4, 2024. These non-binding guidelines clarify interpretations and enforcement of Article 5's prohibitions, impacting developers and deployers of AI systems. Key prohibitions include:

  1. Predictive policing: AI cannot predict criminal behavior based on profiling or personality traits.
  2. Untargeted facial image scraping: Prohibits collecting facial data from the internet without targeting specific individuals.
  3. Emotion recognition in workplaces/education: Bans AI systems recognizing emotions in these contexts to prevent discrimination.

Exceptions exist for certain practices, but companies must ensure compliance to navigate the regulatory landscape.

https://www.lexology.com/library/detail.aspx?g=ef05513f-5e88-4614-86b4-659468de7f05

EU – NIS2: Three Difficult Implementation Issues

/

NIS2 Directive aims to enhance EU cybersecurity but faces implementation challenges. Key issues include:
1. Scope – Expansive definitions make it unclear who is covered, especially for diverse organizations.
2. Implementing Regulation – Complex obligations may lead to non-compliance; partially flexible requirements exist.
3. Director Liability – Management boards could face personal liability variably across jurisdictions, complicating compliance.

Overall, the EU's legislative push seeks to address cyber threats, stressing that cybersecurity must be a priority amidst regulatory complexities.

https://www.linklaters.com/en/insights/blogs/digilinks/eu-nis2—-three-difficult-implementation-issues

CIO Wants to Clone Top Techies as Digital Twin and AI Agents

/ ,

CIO Dr. Vince Kellen at UC San Diego plans to enhance tech staff productivity by creating digital twins and AI agents to automate repetitive tasks. He aims to address funding pressures and security challenges through automation, enabling his team to focus on complex threats. Kellen proposes digitizing expert knowledge to improve AI's network management and reduce IT professionals' after-hours work.

https://www.theregister.com/2025/06/12/cio_wants_to_grow_tech/

Support for AI Act Pause Grows but Parameters Still Unclear

/ , ,

Support for delaying parts of the EU's AI Act is increasing, following a meeting of member states and the European Commission's tech leaders. They propose a “stop the clock” approach due to impending deadlines and unresolved guidelines. Member states differ on how long to postpone implementations, with calls for up to two years for some components. The AI industry endorses this delay, citing the need for additional time for compliance. However, any amendments would require legislative review, and predictions on outcomes are uncertain, highlighting divisions within the Commission.

https://iapp.org/news/a/support-for-ai-act-pause-grows-but-parameters-still-unclear

Scroll to Top