ISG Software Research Analyst Perspectives

Cisco Antares Advances Continuous Vulnerability Operations

Posted by Jeff Orr on 02 September 2026

Enterprise security teams have access to extensive vulnerability intelligence but still struggle to determine where known flaws exist across large and changing software environments. Point-in-time assessments, manual code reviews and selective scanning cannot provide the coverage or frequency required as applications, dependencies and threats change. Artificial intelligence can accelerate this... Read More

Topics: Cybersecurity, IT & Technologies, Source-code Security, AI Vulnerability Management, Code Analysis, Vulnerability Operations, Application Security, Small Language Models, Vulnerability Localization

Black Hat USA: Governing Security at Machine Speed

Posted by Jeff Orr on 26 August 2026

Black Hat USA 2026 reinforced a practical shift in enterprise cybersecurity: AI is no longer just a threat vector or productivity aid. It is becoming an operating model. The most relevant software provider signals pointed toward agentic security operations, nonhuman identity, runtime control, security data architecture and AI-generated remediation. For CIOs, CISOs, platform leaders and software... Read More

Topics: Cybersecurity, IT & Technologies, Non-Human Identity, NHI, Autonomous SOC, AI Governance, AI Runtime Security, Black Hat

ServiceNow Reframes AI as Governed Autonomous Work

Posted by Jeff Orr on 04 June 2026

ServiceNow used the Knowledge 26 conference to make a clear market claim: Enterprise AI will not scale through disconnected assistants, isolated copilots or unmanaged agent experiments. It will scale through governed autonomous work tied to workflow execution, operational data, identity controls and measurable business outcomes. That is the right conversation for enterprise IT leaders. The risk... Read More

Topics: ITSM, Cybersecurity, Intelligent Automation, AIOps, IT & Technologies, ADM & DevOps, Platforms, Non-Human Identity, IT Management & Operations, ServiceNow, ESM, Cybersecurity Automation, AI Governance, Autonomous Workforce, ITAM, Identity Governance, Workflow Automation

Securing AI Moves to the Center of Enterprise Risk

Posted by Jeff Orr on 12 May 2026

A distinct security category is emerging around protecting artificial intelligence (AI) itself, driven by the shift from pilot projects to embedded operational use. As AI becomes part of everyday workflows, the risk surface expands beyond traditional controls. Enterprises now need visibility into how employees prompt and rely on AI systems, how autonomous agents execute tasks and where sensitive... Read More

Topics: Data Governance, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, Data Controls, Visibility, Behavior Monitoring, Policy Enforcement, Control Plane

AI Reshapes Security Architecture at RSAC 2026 Conference

Posted by Jeff Orr on 16 April 2026

Artificial intelligence (AI) just became the operating system for enterprise security. That was the clearest signal coming out of the RSAC 2026 Conference, and it materially changes how CIOs and CISOs should evaluate security platforms, operating models and investment priorities over the next 12–24 months. RSAC 2026 Conference reflects a structural shift in how cybersecurity is designed and... Read More

Topics: Cybersecurity, IT & Technologies, XDR, PAM, SIEM, IAM, SOAR, Data Resilience, NHI, AI Security Control Plane, Identity Security, Cybersecurity for AI, DSPM, Agentic AI Security, AI-driven Security, SOC Transformation, Autonomous SOC, Security Data Platforms

When AIOps and XDR Don't Talk, Your SOC Pays the Price

Posted by Jeff Orr on 25 March 2026

Your artificial intelligence operations (AIOps) platform detects a memory spike in production. Your extended detection and response (XDR) platform flags suspicious lateral movement in the same cluster. But they're not sharing context, so your security operations center (SOC) treats them as two separate incidents. You lose 45 minutes that matter. This isn't a hypothetical scenario. It's the... Read More

Topics: Cybersecurity, Observability, SOC, AIOps, IT & Technologies, XDR, SIEM, SOAR, IT Management & Operations

Why Software Risk Is Now Decided Before Code Is Written

Posted by Jeff Orr on 24 February 2026

Threat modeling software has emerged as a distinct security category focused on identifying and mitigating design-level risks early in the software development lifecycle (SDLC). Unlike vulnerability scanners or runtime security controls that surface issues after deployment, threat modeling tools operate upstream, enabling organizations to analyze system architectures before code is written or... Read More

Topics: Cybersecurity, DevSecOps, CI/CD, IT & Technologies, Threat Modeling, SDLC, Proactive, Vulnerability

A Practical Enterprise Playbook to Integrating NHI with IAM/PAM

Posted by Jeff Orr on 28 October 2025

Enterprises with established Identity Access Management and Privileged Access Management must extend governance to non-human identities to protect APIs, services, automation and agentic AI. Effective evaluation of NHI security software hinges on risk-driven prioritization, integration fidelity and measurable outcomes. CIOs, CISOs and IT leaders should align the identity strategy with enterprise... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

Dedicated NHI Security Software: The Enterprise Need

Posted by Jeff Orr on 22 October 2025

Enterprises are accelerating digital initiatives powered by APIs, services, IoT and agentic artificial intelligence (AI), expanding non-human identity (NHI) risk faster than legacy Identity Access Management (IAM) and Privileged Access Management (PAM) can govern. CIOs, CISOs and IT leaders need an identity strategy that treats NHIs as first-class identities, integrates with IAM/PAM and advances... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

IT Is at the Heart of the AI-Enabled Economy

Posted by Jeff Orr on 26 August 2025

Artificial intelligence (AI) is no longer a futuristic concept but a current reality, and enterprise leaders are recognizing its profound impact on the IT sector. The development and deployment of AI-driven applications across various industries hinge on a robust IT infrastructure and skilled expertise. The words of industry leaders reinforce this sentiment: Amazon's CEO Andy Jassy indicates that... Read More

Topics: GRC, Operations, Learning Management, Business Planning, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, IT Management, Skills Gap, Bias, Risk Management

Cyber Software Procurement is a Team Sport

Posted by Jeff Orr on 06 August 2025

The need for effective cybersecurity strategies remains a priority as enterprises face ever-increasing complex cyber threats. Nonetheless, the conventional approach in which IT departments, especially Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs), exclusively manage the procurement of cybersecurity software, is showing its limitations. A crucial shift is... Read More

Topics: Collaboration, Cybersecurity, Security Posture, Generative AI, IT & Technologies, Agentic AI, Data Backup and Recover, EDR

Accelerating ZTNA Goals with PAM

Posted by Jeff Orr on 31 July 2025

The shift toward a Zero Trust Network Access (ZTNA) framework is a strategic move for enterprises aiming for an enhanced security posture. ZTNA operates on the principle of "never trust, always verify," ensuring that every user and device is authenticated and authorized before accessing resources. In this context, Privileged Access Management (PAM) emerges as a critical enabler for an effective... Read More

Topics: Cybersecurity, IT & Technologies, Identity and Access Management, PAM, IAM, ZTNA, Privileged Access, Zero Trust

Why Cybersecurity Maturity is Critical After RSAC 2025 Conference

Posted by Jeff Orr on 23 July 2025

The annual RSAC Conference took place in late April in San Francisco, where over 40,000 professionals from the cybersecurity industry converged at the Moscone Center to discuss the latest trends, products and services aimed at threat identification and organizational security. I last attended the RSAC Conference in 2020, just weeks before the world was instructed to stay home in response to the... Read More

Topics: Cybersecurity, GenAI, IT & Technologies, Agentic AI, EDR, XDR, PAM, SIEM, IAM, Quantum, Threat Intelligence, SOAR, Data Recovery, Data Resilience, ZTNA

Preparing for Q-Day: Safeguarding Enterprises Against Quantum Threats

Posted by Jeff Orr on 15 May 2025

As quantum computing advances at an unprecedented pace, the concept of Q-Day—a day when quantum computers can fundamentally undermine our current encryption methods—has entered discussions among cybersecurity professionals and business leaders alike. While there is no definitive date set for Q-Day, we are approaching a critical juncture where traditional cryptographic techniques may no longer... Read More

Topics: Digital Technology, Cybersecurity, Digital Security

Addressing Overwhelm in Enterprise Security Leadership

Posted by Jeff Orr on 29 April 2025

In an era defined by the relentless advance of cyber threats, enterprise security leaders grapple with an overwhelming landscape. Enterprises face complex challenges as sophisticated attacks and increasing responsibilities stretch security teams thin. Many describe daily experiences as perpetual "firefighting," trapped in cycles of reacting to incidents rather than developing proactive strategies... Read More

Topics: Digital Technology, Cybersecurity

AI Cybersecurity Lessons: Insights from the DeepSeek Incident

Posted by Jeff Orr on 22 April 2025

In a defining moment for the artificial intelligence (AI) sector, the recent breach involving Chinese company Liang Wenfeng (makers of DeepSeek AI) has shed light on the emerging cyber threats that challenge the industry. The reported incident revealed that DeepSeek AI had left its ClickHouse database accessible to the public, exposing over one million lines of log entry data. This data included... Read More

Topics: Digital Technology, Cybersecurity, Generative AI, DeepSeek, OpenAI

Restructuring Cybersecurity: Lessons from Microsoft's Recent Changes

Posted by Jeff Orr on 06 November 2024

The structures that govern enterprise security teams are under scrutiny. A recent report from a government watchdog group has taken issue with Microsoft’s cybersecurity strategies in the wake of its Exchange Server attacks, prompting the enterprise software giant to re-evaluate its reporting structures. The implications of this shift extend beyond Microsoft itself, with cybersecurity becoming a... Read More

Topics: Digital Technology, Cybersecurity, CISO

Ransomware Disaster for UKG & Customers: Business Continuity Required

Posted by Mark Smith on 27 January 2022

The necessity of business continuity came to a reality with the pandemic in early 2020, with the requirement to avoid the risk of interruption to the fundamentals of an organization. I outlined this challenge in my perspective, “The Business Continuity Imperative: The Workforce Experience and Human Capital Management in 2020 and Beyond.” Ensuring that software in cloud computing environments is... Read More

Topics: Cybersecurity, Ransomware, UKG

AI in Business: Hypocrisy and Opportunity

Posted by Mark Smith on 06 June 2018

We now are well beyond the year depicted in 2001: A Space Odyssey, a cinematic perspective on the future of artificial intelligence in which HAL 9000, a computer, is able to simulate human behavior and control machines. Anyone reviewing the past two years of marketing around AI in the business technology industry can be forgiven for believing that we have arrived at the futuristic state Stanley... Read More

Topics: Big Data, Data Science, Mobile, Customer Analytics, Customer Engagement, Customer Experience, Machine Learning, Mobile Technology, Analytics, Business Intelligence, Cloud Computing, Collaboration, Customer Service, Data Governance, Data Integration, Data Preparation, Internet of Things, Contact Center, Information Optimization, Digital Technology, Machine Learning and Cognitive Computing, Cybersecurity, Billing and Recurring Revenue, Workforce Optimization, collaboration for business

GDPR: Business or Technology Vendors Ready or Not?

Posted by Mark Smith on 11 May 2018

We are have arrived at the May 25, 2018 date when the European Union’s General Data Privacy Regulations (GDPR) become enforceable, following what has been a two-year transition period. Companies were given this time to put in place reasonable measures and the systems necessary to support the legislation’s wide-ranging personal data privacy requirements, which apply to any organization with more... Read More

Topics: Big Data, Data Science, Mobile, Sales, Customer Analytics, Customer Engagement, Customer Experience, Marketing, Analytics, Business Intelligence, Cloud Computing, Collaboration, Data Governance, Data Integration, Data Preparation, Internet of Things, Contact Center, Digital Technology, Digital Marketing, Digital Commerce, Cybersecurity, Billing and Recurring Revenue, collaboration for business, mobile marketing