Analyst Perspectives


Search within Analyst Perspectives blog:

TopBar Analyst Perspectives BottomBar

When the Recovery Time Objective Is Not Soon Enough

Posted by Jeff Orr on 13 October 2026
A software provider recently described a familiar exchange between enterprise IT and executive leadership during a disruption: IT: Systems are down. We are confident we can achieve the company’s Recovery Time Objective of eight hours. CEO: I need it sooner. What can you do? IT: We can achieve a Minimum Viable Organization in three hours. CEO: Do it. The exchange captures what happens when a... Read More

Topics: Disaster Recovery, Cybersecurity, IT & Technologies, Data Resilience, RTO, Return Time Objective, Minimum Viable Organization, Cyber Resilience, Operational Resilience, Enterprise Control Architecture, MVO

Connecting Enterprise AI Governance to Operational Control

Posted by Jeff Orr on 22 September 2026
Enterprise AI governance is advancing faster than the operational controls needed to support it. Organizations are defining principles, policies, risk tiers, review boards, lifecycle gates and accountability models for AI. These efforts establish what should be allowed, required or prohibited. They do not always determine how those requirements will be enforced once AI is embedded in... Read More

Topics: Cybersecurity, Observability, Intelligent Automation, IT & Technologies, ADM & DevOps, Cloud Infrastructure, IT Management & Operations, AI Governance, Control Layer, Operational Control

Cisco Antares Advances Continuous Vulnerability Operations

Posted by Jeff Orr on 02 September 2026
Enterprise security teams have access to extensive vulnerability intelligence but still struggle to determine where known flaws exist across large and changing software environments. Point-in-time assessments, manual code reviews and selective scanning cannot provide the coverage or frequency required as applications, dependencies and threats change. Artificial intelligence can accelerate this... Read More

Topics: Cybersecurity, IT & Technologies, Source-code Security, AI Vulnerability Management, Code Analysis, Vulnerability Operations, Application Security, Small Language Models, Vulnerability Localization

Black Hat USA: Governing Security at Machine Speed

Posted by Jeff Orr on 26 August 2026
Black Hat USA 2026 reinforced a practical shift in enterprise cybersecurity: AI is no longer just a threat vector or productivity aid. It is becoming an operating model. The most relevant software provider signals pointed toward agentic security operations, nonhuman identity, runtime control, security data architecture and AI-generated remediation. For CIOs, CISOs, platform leaders and software... Read More

Topics: Cybersecurity, IT & Technologies, Non-Human Identity, NHI, Autonomous SOC, AI Governance, AI Runtime Security, Black Hat

ServiceNow Reframes AI as Governed Autonomous Work

Posted by Jeff Orr on 04 June 2026
ServiceNow used the Knowledge 26 conference to make a clear market claim: Enterprise AI will not scale through disconnected assistants, isolated copilots or unmanaged agent experiments. It will scale through governed autonomous work tied to workflow execution, operational data, identity controls and measurable business outcomes. That is the right conversation for enterprise IT leaders. The risk... Read More

Topics: ITSM, Cybersecurity, Intelligent Automation, AIOps, IT & Technologies, ADM & DevOps, Platforms, Non-Human Identity, IT Management & Operations, ServiceNow, ESM, Cybersecurity Automation, AI Governance, Autonomous Workforce, ITAM, Identity Governance, Workflow Automation

Securing AI Moves to the Center of Enterprise Risk

Posted by Jeff Orr on 12 May 2026
A distinct security category is emerging around protecting artificial intelligence (AI) itself, driven by the shift from pilot projects to embedded operational use. As AI becomes part of everyday workflows, the risk surface expands beyond traditional controls. Enterprises now need visibility into how employees prompt and rely on AI systems, how autonomous agents execute tasks and where sensitive... Read More

Topics: Data Governance, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, Data Controls, Visibility, Behavior Monitoring, Policy Enforcement, Control Plane

AI Reshapes Security Architecture at RSAC 2026 Conference

Posted by Jeff Orr on 16 April 2026
Artificial intelligence (AI) just became the operating system for enterprise security. That was the clearest signal coming out of the RSAC 2026 Conference, and it materially changes how CIOs and CISOs should evaluate security platforms, operating models and investment priorities over the next 12–24 months. RSAC 2026 Conference reflects a structural shift in how cybersecurity is designed and... Read More

Topics: Cybersecurity, IT & Technologies, XDR, PAM, SIEM, IAM, SOAR, Data Resilience, NHI, AI Security Control Plane, Identity Security, Cybersecurity for AI, DSPM, Agentic AI Security, AI-driven Security, SOC Transformation, Autonomous SOC, Security Data Platforms

When AIOps and XDR Don't Talk, Your SOC Pays the Price

Posted by Jeff Orr on 25 March 2026
Your artificial intelligence operations (AIOps) platform detects a memory spike in production. Your extended detection and response (XDR) platform flags suspicious lateral movement in the same cluster. But they're not sharing context, so your security operations center (SOC) treats them as two separate incidents. You lose 45 minutes that matter. This isn't a hypothetical scenario. It's the... Read More

Topics: Cybersecurity, Observability, SOC, AIOps, IT & Technologies, XDR, SIEM, SOAR, IT Management & Operations

Why Software Risk Is Now Decided Before Code Is Written

Posted by Jeff Orr on 24 February 2026
Threat modeling software has emerged as a distinct security category focused on identifying and mitigating design-level risks early in the software development lifecycle (SDLC). Unlike vulnerability scanners or runtime security controls that surface issues after deployment, threat modeling tools operate upstream, enabling organizations to analyze system architectures before code is written or... Read More

Topics: Cybersecurity, DevSecOps, CI/CD, IT & Technologies, Threat Modeling, SDLC, Proactive, Vulnerability

A Practical Enterprise Playbook to Integrating NHI with IAM/PAM

Posted by Jeff Orr on 28 October 2025
Enterprises with established Identity Access Management and Privileged Access Management must extend governance to non-human identities to protect APIs, services, automation and agentic AI. Effective evaluation of NHI security software hinges on risk-driven prioritization, integration fidelity and measurable outcomes. CIOs, CISOs and IT leaders should align the identity strategy with enterprise... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

Dedicated NHI Security Software: The Enterprise Need

Posted by Jeff Orr on 22 October 2025
Enterprises are accelerating digital initiatives powered by APIs, services, IoT and agentic artificial intelligence (AI), expanding non-human identity (NHI) risk faster than legacy Identity Access Management (IAM) and Privileged Access Management (PAM) can govern. CIOs, CISOs and IT leaders need an identity strategy that treats NHIs as first-class identities, integrates with IAM/PAM and advances... Read More

Topics: Cybersecurity, NIST, IT & Technologies, Agentic AI, PAM, IAM, Zero Trust, Identity, Non-Human Identity, NHI, Machine Identity

IT Is at the Heart of the AI-Enabled Economy

Posted by Jeff Orr on 26 August 2025
Artificial intelligence (AI) is no longer a futuristic concept but a current reality, and enterprise leaders are recognizing its profound impact on the IT sector. The development and deployment of AI-driven applications across various industries hinge on a robust IT infrastructure and skilled expertise. The words of industry leaders reinforce this sentiment: Amazon's CEO Andy Jassy indicates that... Read More

Topics: GRC, Operations, Learning Management, Business Planning, Cybersecurity, Generative AI, IT & Technologies, AI and Machine Learning, IT Management, Skills Gap, Bias, Risk Management

Cyber Software Procurement is a Team Sport

Posted by Jeff Orr on 06 August 2025
The need for effective cybersecurity strategies remains a priority as enterprises face ever-increasing complex cyber threats. Nonetheless, the conventional approach in which IT departments, especially Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs), exclusively manage the procurement of cybersecurity software, is showing its limitations. A crucial shift is... Read More

Topics: Collaboration, Cybersecurity, Security Posture, Generative AI, IT & Technologies, Agentic AI, Data Backup and Recover, EDR

Accelerating ZTNA Goals with PAM

Posted by Jeff Orr on 31 July 2025
The shift toward a Zero Trust Network Access (ZTNA) framework is a strategic move for enterprises aiming for an enhanced security posture. ZTNA operates on the principle of "never trust, always verify," ensuring that every user and device is authenticated and authorized before accessing resources. In this context, Privileged Access Management (PAM) emerges as a critical enabler for an effective... Read More

Topics: Cybersecurity, IT & Technologies, Identity and Access Management, PAM, IAM, ZTNA, Privileged Access, Zero Trust

Why Cybersecurity Maturity is Critical After RSAC 2025 Conference

Posted by Jeff Orr on 23 July 2025
The annual RSAC Conference took place in late April in San Francisco, where over 40,000 professionals from the cybersecurity industry converged at the Moscone Center to discuss the latest trends, products and services aimed at threat identification and organizational security. I last attended the RSAC Conference in 2020, just weeks before the world was instructed to stay home in response to the... Read More

Topics: Cybersecurity, GenAI, IT & Technologies, Agentic AI, EDR, XDR, PAM, SIEM, IAM, Quantum, Threat Intelligence, SOAR, Data Recovery, Data Resilience, ZTNA

Preparing for Q-Day: Safeguarding Enterprises Against Quantum Threats

Posted by Jeff Orr on 15 May 2025
As quantum computing advances at an unprecedented pace, the concept of Q-Day—a day when quantum computers can fundamentally undermine our current encryption methods—has entered discussions among cybersecurity professionals and business leaders alike. While there is no definitive date set for Q-Day, we are approaching a critical juncture where traditional cryptographic techniques may no longer... Read More

Topics: Digital Technology, Cybersecurity, Digital Security

Addressing Overwhelm in Enterprise Security Leadership

Posted by Jeff Orr on 29 April 2025
In an era defined by the relentless advance of cyber threats, enterprise security leaders grapple with an overwhelming landscape. Enterprises face complex challenges as sophisticated attacks and increasing responsibilities stretch security teams thin. Many describe daily experiences as perpetual "firefighting," trapped in cycles of reacting to incidents rather than developing proactive strategies... Read More

Topics: Digital Technology, Cybersecurity

AI Cybersecurity Lessons: Insights from the DeepSeek Incident

Posted by Jeff Orr on 22 April 2025
In a defining moment for the artificial intelligence (AI) sector, the recent breach involving Chinese company Liang Wenfeng (makers of DeepSeek AI) has shed light on the emerging cyber threats that challenge the industry. The reported incident revealed that DeepSeek AI had left its ClickHouse database accessible to the public, exposing over one million lines of log entry data. This data included... Read More

Topics: Digital Technology, Cybersecurity, Generative AI, DeepSeek, OpenAI

Restructuring Cybersecurity: Lessons from Microsoft's Recent Changes

Posted by Jeff Orr on 06 November 2024
The structures that govern enterprise security teams are under scrutiny. A recent report from a government watchdog group has taken issue with Microsoft’s cybersecurity strategies in the wake of its Exchange Server attacks, prompting the enterprise software giant to re-evaluate its reporting structures. The implications of this shift extend beyond Microsoft itself, with cybersecurity becoming a... Read More

Topics: Digital Technology, Cybersecurity, CISO

Ransomware Disaster for UKG & Customers: Business Continuity Required

Posted by Mark Smith on 27 January 2022
The necessity of business continuity came to a reality with the pandemic in early 2020, with the requirement to avoid the risk of interruption to the fundamentals of an organization. I outlined this challenge in my perspective, “The Business Continuity Imperative: The Workforce Experience and Human Capital Management in 2020 and Beyond.” Ensuring that software in cloud computing environments is... Read More

Topics: Cybersecurity, Ransomware, UKG

Browse by Analyst

Robert Kugel

Robert Kugel

 David Menninger

David Menninger

 Jeff Orr

Jeff Orr

 Keith Dawson

Keith Dawson

 Matt Aslett

Matt Aslett

 Barika Pace

Barika Pace

Posts by Topic

see all

Posts by Month

see all