ISG Software Research Analyst Perspectives

Securing AI Moves to the Center of Enterprise Risk

Posted by Jeff Orr on 12 May 2026

A distinct security category is emerging around protecting artificial intelligence (AI) itself, driven by the shift from pilot projects to embedded operational use. As AI becomes part of everyday workflows, the risk surface expands beyond traditional controls. Enterprises now need visibility into how employees prompt and rely on AI systems, how autonomous agents execute tasks and where sensitive... Read More

Topics: Data Governance, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, Data Controls, Visibility, Behavior Monitoring, Policy Enforcement, Control Plane

AI Reshapes Security Architecture at RSAC 2026 Conference

Posted by Jeff Orr on 16 April 2026

Artificial intelligence (AI) just became the operating system for enterprise security. That was the clearest signal coming out of the RSAC 2026 Conference, and it materially changes how CIOs and CISOs should evaluate security platforms, operating models and investment priorities over the next 12–24 months. RSAC 2026 Conference reflects a structural shift in how cybersecurity is designed and... Read More

Topics: Cybersecurity, IT & Technologies, XDR, PAM, SIEM, IAM, SOAR, Data Resilience, NHI, AI Security Control Plane, Identity Security, Cybersecurity for AI, DSPM, Agentic AI Security, AI-driven Security, SOC Transformation, Autonomous SOC, Security Data Platforms

When AIOps and XDR Don't Talk, Your SOC Pays the Price

Posted by Jeff Orr on 25 March 2026

Your artificial intelligence operations (AIOps) platform detects a memory spike in production. Your extended detection and response (XDR) platform flags suspicious lateral movement in the same cluster. But they're not sharing context, so your security operations center (SOC) treats them as two separate incidents. You lose 45 minutes that matter. This isn't a hypothetical scenario. It's the... Read More

Topics: Cybersecurity, Observability, SOC, AIOps, IT & Technologies, XDR, SIEM, SOAR, IT Management & Operations

Why Software Risk Is Now Decided Before Code Is Written

Posted by Jeff Orr on 24 February 2026

Threat modeling software has emerged as a distinct security category focused on identifying and mitigating design-level risks early in the software development lifecycle (SDLC). Unlike vulnerability scanners or runtime security controls that surface issues after deployment, threat modeling tools operate upstream, enabling organizations to analyze system architectures before code is written or... Read More

Topics: Cybersecurity, DevSecOps, CI/CD, IT & Technologies, Threat Modeling, SDLC, Proactive, Vulnerability

A Practical Enterprise Playbook to Integrating NHI with IAM/PAM

Posted by Jeff Orr on 28 October 2025

Enterprises with established Identity Access Management and Privileged Access Management must extend governance to non-human identities to protect APIs, services, automation and agentic AI. Effective evaluation of NHI security software hinges on risk-driven prioritization, integration fidelity and measurable outcomes. CIOs, CISOs and IT leaders should align the identity strategy with enterprise... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

Dedicated NHI Security Software: The Enterprise Need

Posted by Jeff Orr on 22 October 2025

Enterprises are accelerating digital initiatives powered by APIs, services, IoT and agentic artificial intelligence (AI), expanding non-human identity (NHI) risk faster than legacy Identity Access Management (IAM) and Privileged Access Management (PAM) can govern. CIOs, CISOs and IT leaders need an identity strategy that treats NHIs as first-class identities, integrates with IAM/PAM and advances... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

IT Is at the Heart of the AI-Enabled Economy

Posted by Jeff Orr on 26 August 2025

Artificial intelligence (AI) is no longer a futuristic concept but a current reality, and enterprise leaders are recognizing its profound impact on the IT sector. The development and deployment of AI-driven applications across various industries hinge on a robust IT infrastructure and skilled expertise. The words of industry leaders reinforce this sentiment: Amazon's CEO Andy Jassy indicates that... Read More

Topics: GRC, Operations, Learning Management, Business Planning, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, IT Management, Skills Gap, Bias, Risk Management

Cyber Software Procurement is a Team Sport

Posted by Jeff Orr on 06 August 2025

The need for effective cybersecurity strategies remains a priority as enterprises face ever-increasing complex cyber threats. Nonetheless, the conventional approach in which IT departments, especially Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs), exclusively manage the procurement of cybersecurity software, is showing its limitations. A crucial shift is... Read More

Topics: Collaboration, Cybersecurity, Security Posture, Generative AI, IT & Technologies, Agentic AI, Data Backup and Recover, EDR

Accelerating ZTNA Goals with PAM

Posted by Jeff Orr on 31 July 2025

The shift toward a Zero Trust Network Access (ZTNA) framework is a strategic move for enterprises aiming for an enhanced security posture. ZTNA operates on the principle of "never trust, always verify," ensuring that every user and device is authenticated and authorized before accessing resources. In this context, Privileged Access Management (PAM) emerges as a critical enabler for an effective... Read More

Topics: Cybersecurity, IT & Technologies, Identity and Access Management, PAM, IAM, ZTNA, Privileged Access, Zero Trust

Why Cybersecurity Maturity is Critical After RSAC 2025 Conference

Posted by Jeff Orr on 23 July 2025

The annual RSAC Conference took place in late April in San Francisco, where over 40,000 professionals from the cybersecurity industry converged at the Moscone Center to discuss the latest trends, products and services aimed at threat identification and organizational security. I last attended the RSAC Conference in 2020, just weeks before the world was instructed to stay home in response to the... Read More

Topics: Cybersecurity, GenAI, IT & Technologies, Agentic AI, EDR, XDR, PAM, SIEM, IAM, Quantum, Threat Intelligence, SOAR, Data Recovery, Data Resilience, ZTNA

Preparing for Q-Day: Safeguarding Enterprises Against Quantum Threats

Posted by Jeff Orr on 15 May 2025

As quantum computing advances at an unprecedented pace, the concept of Q-Day—a day when quantum computers can fundamentally undermine our current encryption methods—has entered discussions among cybersecurity professionals and business leaders alike. While there is no definitive date set for Q-Day, we are approaching a critical juncture where traditional cryptographic techniques may no longer... Read More

Topics: Digital Technology, Cybersecurity, Digital Security

Addressing Overwhelm in Enterprise Security Leadership

Posted by Jeff Orr on 29 April 2025

In an era defined by the relentless advance of cyber threats, enterprise security leaders grapple with an overwhelming landscape. Enterprises face complex challenges as sophisticated attacks and increasing responsibilities stretch security teams thin. Many describe daily experiences as perpetual "firefighting," trapped in cycles of reacting to incidents rather than developing proactive strategies... Read More

Topics: Digital Technology, Cybersecurity

AI Cybersecurity Lessons: Insights from the DeepSeek Incident

Posted by Jeff Orr on 22 April 2025

In a defining moment for the artificial intelligence (AI) sector, the recent breach involving Chinese company Liang Wenfeng (makers of DeepSeek AI) has shed light on the emerging cyber threats that challenge the industry. The reported incident revealed that DeepSeek AI had left its ClickHouse database accessible to the public, exposing over one million lines of log entry data. This data included... Read More

Topics: Digital Technology, Cybersecurity, Generative AI, DeepSeek, OpenAI

Restructuring Cybersecurity: Lessons from Microsoft's Recent Changes

Posted by Jeff Orr on 06 November 2024

The structures that govern enterprise security teams are under scrutiny. A recent report from a government watchdog group has taken issue with Microsoft’s cybersecurity strategies in the wake of its Exchange Server attacks, prompting the enterprise software giant to re-evaluate its reporting structures. The implications of this shift extend beyond Microsoft itself, with cybersecurity becoming a... Read More

Topics: Digital Technology, Cybersecurity, CISO

Ransomware Disaster for UKG & Customers: Business Continuity Required

Posted by Mark Smith on 27 January 2022

The necessity of business continuity came to a reality with the pandemic in early 2020, with the requirement to avoid the risk of interruption to the fundamentals of an organization. I outlined this challenge in my perspective, “The Business Continuity Imperative: The Workforce Experience and Human Capital Management in 2020 and Beyond.” Ensuring that software in cloud computing environments is... Read More

Topics: Cybersecurity, Ransomware, UKG

AI in Business: Hypocrisy and Opportunity

Posted by Mark Smith on 06 June 2018

We now are well beyond the year depicted in 2001: A Space Odyssey, a cinematic perspective on the future of artificial intelligence in which HAL 9000, a computer, is able to simulate human behavior and control machines. Anyone reviewing the past two years of marketing around AI in the business technology industry can be forgiven for believing that we have arrived at the futuristic state Stanley... Read More

Topics: Big Data, Data Science, Mobile, Customer Analytics, Customer Engagement, Customer Experience, Machine Learning, Mobile Technology, Analytics, Business Intelligence, Cloud Computing, Collaboration, Customer Service, Data Governance, Data Integration, Data Preparation, Internet of Things, Contact Center, Information Optimization, Digital Technology, Machine Learning and Cognitive Computing, Cybersecurity, Billing and Recurring Revenue, Workforce Optimization, collaboration for business

GDPR: Business or Technology Vendors Ready or Not?

Posted by Mark Smith on 11 May 2018

We are have arrived at the May 25, 2018 date when the European Union’s General Data Privacy Regulations (GDPR) become enforceable, following what has been a two-year transition period. Companies were given this time to put in place reasonable measures and the systems necessary to support the legislation’s wide-ranging personal data privacy requirements, which apply to any organization with more... Read More

Topics: Big Data, Data Science, Mobile, Sales, Customer Analytics, Customer Engagement, Customer Experience, Marketing, Analytics, Business Intelligence, Cloud Computing, Collaboration, Data Governance, Data Integration, Data Preparation, Internet of Things, Contact Center, Digital Technology, Digital Marketing, Digital Commerce, Cybersecurity, Billing and Recurring Revenue, collaboration for business, mobile marketing

Beyond Digital Transformation: Effective Technology Innovation in 2018

Posted by Mark Smith on 07 May 2018

Advancing the potential of any business requires continuous improvement in the processes and technology that support it. Many companies have embraced attempts at a digital transformation, and it’s become a goal to which organizational resources and budgets have been dedicated around the globe. But this goal is also a moving target. Pursuing it involves a transition from software that operates... Read More

Topics: Big Data, Data Science, Mobile, Sales, Customer Analytics, Customer Engagement, Customer Experience, Human Capital Management, Machine Learning, Marketing, Marketing Performance Management, Mobile Technology, Office of Finance, Wearable Computing, Analytics, Business Intelligence, Cloud Computing, Collaboration, Customer Service, Data Governance, Data Integration, Data Preparation, Internet of Things, Contact Center, Information Optimization, Product Information Management, Digital Technology, Digital Marketing, Digital Commerce, Operations & Supply Chain, Machine Learning and Cognitive Computing, Pricing and Promotion Management, Cybersecurity, Billing and Recurring Revenue, Workforce Optimization, collaboration for business, mobile marketing