Daily Tech Digest by Kannan Subbiah: grc

Showing posts with label grc. Show all posts

Daily Tech Digest - June 15, 2026

Quote for the day:

“Moral authority comes from following universal and timeless principles like honesty, integrity, and treating people with respect.” -- Stephen R. Covey

🎧 Listen to this digest on YouTube Music

▶ Play Audio Digest

Duration: 17 mins • Perfect for listening on the go.

Open source moves from ‘a nerdy audience’ to the geopolitical stage

Open-source software has evolved from a niche interest for technical developers into a critical element of global business strategy and European digital sovereignty. In an interview, Nextcloud CEO Frank Karlitschek explains that geopolitical tensions and data privacy concerns have made European organizations increasingly cautious about relying on major United States technology suppliers. Worries over the US CLOUD Act, industry espionage, and vendor lock-in are driving a strong push for digital independence. As a result, companies are exploring open-source alternatives to proprietary platforms like Microsoft and Google to maintain control over their data. Nextcloud is addressing this shift by offering secure collaboration tools, including the recently launched Euro-Office application suite, and by integrating artificial intelligence into its platforms. Karlitschek views the demand for digital sovereignty as a permanent structural change rather than a temporary trend. While he welcomes the European Commission's Tech Sovereignty Package, he emphasizes the need to translate these proposals into binding legislation. Furthermore, he remains skeptical of attempts by US firms to market localized cloud services as sovereign solutions, noting that true independence requires freedom from foreign software updates and potential security vulnerabilities. Moving forward, Nextcloud intends to maintain its focus on secure, self-hosted collaboration software while expanding its artificial intelligence capabilities and supporting independent software vendors.

The Pilot Trap: Why Enterprise AI Keeps Failing the Walk from Demo to Production

Enterprise artificial intelligence projects frequently stall when transitioning from controlled testing to practical application. The core issue is rarely the AI model itself, which typically performs well in isolated trials using clean, organized information. Instead, failures occur because the surrounding business infrastructure is not equipped to handle the transition. In a live production environment, AI systems must navigate messy, inconsistent data, strict security rules, and complex daily operations. When basic terms vary across different departments or data structures change without warning, the entire system begins to degrade. To build lasting solutions, organizations must stop treating AI as a standalone tool and start treating it as an ongoing engineering challenge. A dependable system requires a strong foundation where data standards and security policies are automatically enforced whenever the system is operating. Furthermore, companies should avoid the common temptation to use the largest, most complex model for every single task. Selecting the most efficient, capable model for a specific job lowers costs and improves overall reliability. Ultimately, achieving lasting success with enterprise technology comes down to focusing on the unglamorous groundwork. By establishing clear guidelines, enforcing strict security, and engineering a resilient foundation, organizations can ensure their tools remain dependable for daily work rather than just serving as fragile demonstrations.

Sovereign cloud won’t fix your AI risk. Identity governance will

In this article, Sabine Frömling explains that relying solely on sovereign cloud infrastructure cannot fully eliminate the security and regulatory risks associated with artificial intelligence workloads. While sovereign clouds ensure data residency and help satisfy European regulations like NIS2 and the EU AI Act, they do not guarantee true operational control. Real authority over data resides at the identity governance layer instead. European companies have already discovered that keeping data within local borders fails to protect enterprise systems if user and system access permissions are poorly managed. This issue is particularly pressing for artificial intelligence because autonomous AI agents introduce non-human identities that frequently operate outside standard security monitoring. If an unauthorized person or a compromised software agent gains high-level access, data residency laws will not prevent a major data breach. Therefore, security leaders must shift their primary focus from physical data center boundaries to maturing their identity and access management systems. Rather than moving every single workload to expensive sovereign clouds, organizations should categorize their data by actual regulatory risk and prioritize governing digital credentials, especially short-lived ones for automated tools. Ultimately, sovereign cloud platforms only buy legal protection within a specific jurisdiction, whereas a solid identity governance strategy provides the actual security control needed to manage modern AI technologies.

The Global State of Technology Risk in 2026

In 2026, technology risk is evolving rapidly as organizations worldwide integrate advanced artificial intelligence into their daily operations. According to recent industry reports, the shift toward increasingly autonomous systems requires leaders to rethink their approach to trust, safety, and workforce management. For government entities, a key focus is building strong internal expertise so they can effectively evaluate solutions, direct suppliers, and maintain strategic control over their digital services. In the private sector, surveys indicate that while companies are deploying these tools on a much larger scale, many still lack mature safety strategies and appropriate internal controls. The primary challenges are no longer just entirely new types of threats, but rather traditional security and operational risks that are developing much faster and with far less transparency. To manage these highly complex systems properly, organizations need flexible methods for managing risk and clear lines of accountability, ensuring that essential human oversight remains intact at all times. Furthermore, international perspectives, such as newly released standards from China, highlight growing global concerns around model safety, open-source misuse, and broader societal impacts. Ultimately, navigating this complex landscape requires leaders to look beyond standard local practices. They must adopt a global perspective and establish practical guidelines to safely balance technological advancement with necessary security.

Architecture-as-code is the next frontier for enterprise governance

Enterprise architecture governance traditionally relies on manual review boards, slide decks, and point-in-time assessments to ensure compliance and manage risk. However, as organizations increasingly adopt continuous software delivery, these episodic reviews struggle to keep pace with rapid system changes. "Architecture-as-code" offers a more effective approach by turning architectural standards and design expectations into machine-readable formats. Instead of waiting for a final meeting to discover compliance issues, this method embeds automated governance checks directly into the software delivery lifecycle. By treating architectural intent as executable code, teams can continuously compare their declared designs against actual implementation evidence, such as configuration files and application interfaces. This continuous assurance model spots discrepancies early, highlighting problems before they become major delivery risks. While artificial intelligence can support this process by interpreting automated test results and preparing clear narratives, it does not replace human oversight. AI assists with evaluation, but human architects remain fully accountable for final judgments, risk acceptance, and strategic choices. Ultimately, architecture-as-code transforms governance from a static, cumbersome bottleneck into a measurable, ongoing practice. It provides organizations with the necessary structure to build complex systems quickly while maintaining clear standards and reliable oversight.

Cybersecurity, identity, and observability at machine speed

Artificial intelligence in cybersecurity is rapidly shifting from a supportive role to active execution. Instead of just analyzing data and suggesting fixes, systems are now directly managing tasks such as assessing alerts, blocking threats, and altering access rights. This change is necessary because manual human responses can no longer keep up with the sheer speed of modern cyber attacks. However, handing over direct control to automated systems introduces new risks. If a program makes a mistake, the operational consequences for a business can be severe. Because of this, industry leaders emphasize that raw speed is useless without strict oversight. For automation to be safely integrated into live operations, organizations must establish clear rules, maintain human oversight for complex decisions, and ensure every automated action is traceable and reversible. A critical part of this safety net involves strict identity controls and deep system monitoring. By integrating automation closely with access management, organizations can ensure the system only interacts with what it is explicitly allowed to touch. Meanwhile, continuous monitoring guarantees that the network behavior remains predictable and accurate over time. Ultimately, modern security relies on automated responses, but these tools are only effective if they remain firmly under direct human governance.

Individual AIs Turn Personal Expertise Into Scalable Enterprise Assets

The article explores the emergence of individual artificial intelligence, a concept where professionals create and own models trained exclusively on their personal expertise, experiences, and decision-making styles. Spearheaded by startup founder Rob LoCascio, this approach contrasts with relying on broad, general-purpose models controlled by large technology companies. The company, backed by recent venture funding, aims to help creators transform their specialized knowledge into scalable, owned digital resources. Instead of trading time for money through traditional consulting or coaching, experts can use these personalized systems to offer guidance to many people simultaneously. Because the system deeply reflects a person's authentic voice and specific instincts, it holds distinct practical value over generic consumer tools. The individual retains full ownership of their data, which remains private and entirely separate from public internet models. This shift offers new paths to generate income, such as licensing a top sales trainer's specific methods directly to a corporate team or offering ongoing coaching through subscription access. Ultimately, this movement seeks to return control and economic value to the people who actually possess the knowledge, allowing them to expand their influence efficiently while fully protecting their core intellectual property.

Onspring CISO on where automated GRC systems fall short

In a recent interview, Nichole Windholz, the Chief Information Security Officer at Onspring, discusses the practical limitations of automated risk management systems. She points out that while automated dashboards offer a helpful starting point, their simple indicators often strip away important context. Because these tools treat different types of risks similarly, they can mislead leaders into making poorly informed decisions. Windholz emphasizes that automated tools are only as reliable as the data they receive. If the underlying information is flawed or misconfigured, the polished output easily creates a false sense of security. Organizations must carefully track where their data originates and periodically validate it with human oversight. Furthermore, she highlights that certain complex risks, such as insider threats, geopolitical changes, and vendor reliance, cannot be fully measured by automated tracking. These areas always require human judgment and qualitative review. Looking ahead, Windholz observes that the industry spends too much time building attractive presentation screens and not enough time fixing broken processes or establishing trust in the underlying data. Ultimately, automated systems should not replace human choices or technical security measures. Instead, they should serve as supportive tools to help leaders connect technical issues with real business impacts.

Digital sovereignty in the AI era: Why control is becoming the new currency of innovation

In the artificial intelligence era, digital sovereignty has shifted from a basic regulatory requirement to a core business strategy, particularly for organizations in the Asia Pacific region. Sovereignty now means having complete control over how data is governed and secured to support modern tools, rather than simply dictating where information is stored. As governments introduce stricter compliance mandates and data localization rules, organizations face a critical choice. Those operating with fragmented systems risk regulatory penalties and security threats, while those adopting unified structures are better prepared for market changes. A key solution is adopting frameworks that build compliance and control directly into system designs. This approach allows enterprises to run intelligent systems across various computing environments while maintaining strict policy enforcement and geographic boundaries. Instead of limiting technological progress, these frameworks act as a practical foundation for growth. They allow businesses in highly regulated sectors, such as finance and government, to utilize sensitive data safely. As the need for secure computing continues to expand, maintaining data control is becoming a clear economic necessity. Ultimately, leaders who treat digital sovereignty as a standard part of their operations will transform compliance into a distinct competitive advantage, building trust while safely driving long-term progress.

Beyond the Stack: The New Skills of Effective Technology Leaders

The rapid advancement of artificial intelligence demands a fundamental shift in the capabilities of technology leaders. While traditional technical expertise remains a necessary foundation, it is no longer sufficient on its own. Unlike previous technological developments that could be safely assigned to specialized departments, artificial intelligence impacts virtually every function within an organization. Consequently, leaders must now cultivate a practical knowledge of these digital tools rather than relying solely on briefings or vendor presentations. This involves developing a hands-on understanding of new software to accurately assess both genuine opportunities and inherent risks. Effective leadership today requires moving beyond abstract awareness and engaging directly with the technology. Leaders must personally experiment with new programs to understand how automated systems can best operate alongside human workers. Furthermore, organizations that successfully adapt to these changes are those that foster a culture of shared learning. Leaders play a crucial role here by visibly using new tools, establishing small test projects that allow teams to experiment safely, and bringing technology discussions into general management meetings. By actively rewarding learning and making technological familiarity a basic workplace expectation, leaders can build teams fully prepared to navigate a changing landscape with competence and stability.

Daily Tech Digest - April 11, 2026

Quote for the day:

"To accomplish great things, we must not only act, but also dream, not only plan, but also believe." -- Anatole France

🎧 Listen to this digest on YouTube Music

▶ Play Audio Digest

Duration: 18 mins • Perfect for listening on the go.

AI agents aren’t failing. The coordination layer is failing

The article "AI agents aren't failing—the coordination layer is failing" asserts that the primary bottleneck in scaling AI is not the performance of individual agents, but rather the absence of a sophisticated "coordination layer." As organizations transition to multi-agent environments, relying on direct agent-to-agent communication creates quadratic complexity that leads to race conditions, outdated context, and cascading failures. To solve these issues, the author introduces the "Event Spine" pattern, a centralized architectural foundation using ordered event streams. This approach enables agents to maintain a shared state without direct queries, significantly reducing latency and redundant processing. Implementing this infrastructure reportedly slashed end-to-end latency from 2.4 seconds to 180 milliseconds and reduced CPU utilization by 36 percent. The article concludes that multi-agent AI is effectively a distributed system requiring the same explicit coordination frameworks that the industry found essential for microservices. Enterprises must invest in this "spine" now to prevent agent proliferation from turning into unmanageable chaos. By focusing on the infrastructure connecting these agents, developers can ensure that their AI systems work as a cohesive unit rather than a collection of competing, inefficient silos that are prone to failure at scale.

Agents don’t know what good looks like. And that’s exactly the problem.

In this O’Reilly Radar article, reflects on a discussion between Neal Ford and Sam Newman regarding the inherent limitations of agentic AI in software architecture. The central thesis is that while AI agents are exceptionally skilled at generating code and executing local tasks, they lack a fundamental understanding of what "good" looks like in a global architectural context. Agents typically optimize for immediate task completion, often neglecting long-term maintainability, systemic scalability, and the subtle trade-offs essential to sound design. This creates a significant risk where automated efficiency leads to architectural erosion and technical debt if left unchecked. Mezzalira argues that the solution lies not in making agents "smarter" in isolation, but in establishing robust human-led governance and automated guardrails that define and enforce quality standards. As agents handle more routine coding duties, the role of the human developer must evolve from a "T-shaped" specialist into a "Comb-shaped" professional who possesses both deep technical expertise and the broad systemic vision required to orchestrate these tools effectively. Ultimately, the article emphasizes that the true value of human engineers in the AI era is their unique ability to maintain architectural integrity and provide the contextual judgment that machines currently cannot replicate.

Understanding tokenization and consumption in LLMs

The article "Understanding and Consumption in LLMs" explains the fundamental role of tokenization in how large language models (LLMs) interpret user input and calculate costs. Tokenization involves breaking text into smaller subunits, such as word fragments or punctuation, allowing models to process diverse languages and complex syntax efficiently. This granular approach is critical because LLMs generate responses iteratively, token by token, and billing is typically based on the total sum of tokens in both the prompt and the resulting output. The author compares leading platforms like ChatGPT, Claude Cowork, and GitHub Copilot, noting that while they share core principles, their specific tokenization algorithms and pricing structures vary. For instance, ChatGPT uses for general efficiency, whereas GitHub Copilot is optimized for programming syntax. To manage costs and improve performance, the article suggests best practices for prompt engineering, such as using concise language, avoiding redundancy, and breaking complex tasks into smaller segments. Ultimately, a deep understanding of token consumption enables professionals to optimize their AI workflows, predict expenses accurately, and select the most appropriate platform for their specific organizational needs, whether for general content generation or specialized software development.

Data Centres Without the Compute

The article "Data Centres Without the Compute" explores a paradigm shift in data center architecture, moving away from traditional server-centric designs where compute, memory, and storage are tightly coupled. Stuart Dee argues that modern workloads, especially AI and real-time analytics, have exposed memory as a dominant constraint rather than compute. This shift is facilitated by advancements in photonics and the Innovative Optical and Wireless Network (IOWN), which dissolves physical boundaries through end-to-end optical paths. By replacing traditional electronic switching with all-optical networking, latency and energy consumption are significantly reduced, enabling memory disaggregation at scale. Consequently, data centers can evolve into specialized, software-defined environments where memory resides in dense, energy-efficient arrays that are accessed remotely by compute-heavy facilities. This "data-centric infrastructure" allows for dynamic resource composition across metropolitan distances, transforming the network into a memory backplane. Ultimately, the article suggests that the future of digital infrastructure lies in decoupling resources, allowing memory to be located where power and cooling are optimal while compute remains closer to users. This transition marks the end of the locality assumption, paving the way for a federated model where data centers serve as modular components within a broader optical system.

What Every Business Leader Needs to Understand About Sovereign AI

Sovereign AI is emerging as a critical strategic imperative for business leaders, transcending its role as a mere technical requirement to become a fundamental pillar of long-term resilience and competitive advantage. According to insights from Dataversity, sovereignty should be viewed as an offensive strategy rather than a defensive posture, enabling organizations to build robust compliance frameworks and mitigate significant risks such as reputational damage and legal fines. While many companies currently focus sovereignty efforts on data and infrastructure, a key shift involves extending this control to the intelligence layer—the AI models themselves—where crucial decision-making occurs. A hybrid sovereignty approach is recommended, balancing internal control over sensitive assets with external partnerships to foster innovation while avoiding vendor lock-in. By 2030, the global market for sovereign AI is projected to reach $600 billion, highlighting its potential to unlock new market opportunities and scale. For leaders, treating sovereignty as a structural necessity rather than discretionary spend is essential for ensuring AI accuracy and reliability. This proactive "sovereignty-by-design" methodology ultimately transforms regulatory compliance into business superiority, allowing enterprises to navigate a complex, fragmented global landscape while maintaining absolute ownership of their most valuable digital intelligence and future innovation.

Turning Military Experience Into Cyber Advantage

The blog post "Turning Military Experience Into Cyber Advantage" by Chetan Anand explores how the discipline and operational expertise of veterans translate into a strategic asset for the cybersecurity industry. Anand argues that cybersecurity should be viewed not merely as a technical IT function, but as enterprise risk management conducted within a digital battlespace—a concept inherently familiar to military personnel. Key attributes such as risk assessment, situational awareness, and structured decision-making under pressure map directly onto roles in security operations, threat modeling, and incident response. Furthermore, the article highlights the growing demand for military leadership in Governance, Risk, and Compliance (GRC) roles, where integrity and accountability are paramount. Veterans are encouraged to overcome common misconceptions, such as the necessity of coding skills, and focus on articulating their experience in business terms rather than military jargon. By prioritizing a problem-solving mindset and leveraging mentorship programs like ISACA’s, transitioning service members can bridge the gap between their tactical background and civilian career requirements. Ultimately, the piece positions military service as a foundational training ground for the rigorous demands of modern cyber defense, provided veterans effectively translate their unique skills into organizational value and business outcomes.

The Hidden ROI of Visibility: Better Decisions, Better Behavior, Better Security

In his article for SecurityWeek, Joshua Goldfarb explores the "hidden ROI" of cybersecurity visibility, arguing that its fundamental value extends far beyond traditional compliance and auditing functions. Using a personal anecdote about how home security cameras deterred a hostile neighbor, Goldfarb illustrates that visibility serves as a powerful psychological deterrent. When users and technical teams know their actions are being recorded, they are significantly more likely to adhere to security policies and avoid risky behaviors like visiting restricted sites or installing unvetted software. Beyond behavioral changes, comprehensive visibility across network, endpoint, and application layers—including APIs and AI capabilities—fosters more collaborative, data-driven relationships between security departments and application owners. This objective approach effectively shifts internal discussions from subjective friction to actionable risk management. Furthermore, high-quality data enables more informed decision-making and precise risk assessments, both of which are critical in complex, modern hybrid-cloud environments. Although achieving total transparency is often resource-intensive, Goldfarb emphasizes that the resulting honesty, improved organizational culture, and strategic clarity provide a distinct competitive advantage. Ultimately, visibility transforms security from a reactive technical function into a proactive organizational catalyst that encourages integrity and operational excellence across the entire enterprise ecosystem.

Out of the Shadows: How CIOs Are Racing to Govern AI Tools

The rise of ""—the unauthorized deployment of artificial intelligence tools by employees—presents a critical challenge for contemporary CIOs. Unlike traditional shadow IT, these autonomous systems frequently process sensitive data and make consequential decisions without oversight from legal or security departments. Research indicates that while over 90% of employees admit to entering corporate information into AI tools without approval, more than half of organizations still lack a formal governance framework. This gap leads to significant financial liabilities, with shadow AI breaches costing enterprises an average of $4.63 million. To combat this, CIOs are moving beyond restrictive measures to establish proactive governance playbooks. These strategies include forming cross-functional AI committees, implementing real-time discovery tools, and classifying applications into sanctioned, restricted, and forbidden categories. Furthermore, experts suggest that organizations must leverage AI to monitor AI, using automated assessment pipelines to keep pace with rapid innovation. Ultimately, the goal is to create a "frictionless" official path for AI adoption that renders the shadow path obsolete. By balancing the velocity of innovation with robust security controls, leadership can protect intellectual property while empowering the workforce to utilize these transformative technologies safely and effectively within a transparent, structured environment.

Smartphones as Micro Data Centers: A Creative Edge Solution?

The article "Smartphones as Micro Data Centers: A Creative Edge Solution?" by Christopher Tozzi explores the revolutionary potential of pooling the resources of billions of mobile devices to create decentralized, miniature data centers. By clustering the CPU, memory, and storage of smartphones, organizations can deploy flexible, low-cost infrastructure capable of hosting diverse workloads. This innovative approach is particularly well-suited for edge computing and AI inference, as it places processing power closer to end-users to minimize latency and enhance real-time analysis. Furthermore, repurposing discarded handsets offers significant sustainability benefits by reducing e-waste and avoiding the capital-intensive construction of traditional facilities. However, several technical hurdles remain, including software compatibility issues arising from the ARM-based architecture of mobile chips versus conventional x86 servers. Additionally, the lack of dedicated, high-capacity GPUs and the absence of mature clustering software currently limits the ability to handle heavy AI acceleration or large-scale enterprise tasks. Despite these limitations, smartphone-based micro-data centers represent a creative and efficient shift in digital infrastructure. As the demand for localized computing continues to surge, this crowdsourced model provides a viable, sustainable pathway for scaling the internet's edge while maximizing the utility of existing global hardware resources.

Why India’s AI future needs both sovereign control and heritage depth

, CEO of Articul8, outlines a strategic vision for India’s AI future that balances sovereign security with cultural heritage. He argues that India must develop sovereign models to safeguard critical infrastructure and national security while simultaneously building heritage models that utilize the nation’s vast linguistic and historical knowledge. This dual approach ensures both protection and global influence, serving billions across diverse markets. For enterprises, the focus must shift from generic foundation models, which often fail in high-stakes industrial contexts, to domain-specific AI trained on deep institutional knowledge. These specialized models provide the accuracy and security required for regulated sectors like energy, manufacturing, and banking. Subramaniyan identifies data fragmentation and the rapid pace of technological change as primary bottlenecks, suggesting that platform partners can help organizations absorb this complexity. Ultimately, India’s unique position—characterized by rapid infrastructure expansion and a wealth of untapped cultural data—offers a once-in-a-generation opportunity to lead in the global AI landscape. By encoding local regulatory and business contexts into AI frameworks, India can move beyond simple pilot projects to large-scale, production-ready deployments that drive real economic value while preserving its unique intellectual legacy and ensuring digital sovereignty.

Daily Tech Digest - March 28, 2026

Quote for the day:

"We are moving from a world where we have to understand computers to a world where they will understand us." -- Jensen Huang

🎧 Listen to this digest on YouTube Music

▶ Play Audio Digest

Duration: 16 mins • Perfect for listening on the go.

When clean UI becomes cold UI

The article "When Clean UI Becomes Cold UI" explores the pitfalls of over-minimalism in modern digital interface design, arguing that a "clean" aesthetic can easily shift from elegant to emotionally distant. This "cold UI" occurs when essential guidance—such as text labels, instructions, and reassuring feedback—is stripped away in favor of a sleek, portfolio-worthy appearance. While such designs may impress other designers, they often fail real-world users by forcing them to rely on assumptions, which increases cognitive friction and erodes the human connection. The central premise is that designers must shift their focus from "clean" design to "clear" design. Every element removed for the sake of aesthetics involves a trade-off that often sacrifices functional clarity for visual simplicity. To avoid creating a "ghost town" interface, the author encourages prioritizing meaning over layout, ensuring icons are paired with labels and that the design supports users during moments of uncertainty. Ultimately, a truly successful interface is not one that is simply empty, but one that knows when to provide direction and when to step back, balancing aesthetic minimalism with the transparency required for a user to feel genuinely supported and understood.

5 Practical Techniques to Detect and Mitigate LLM Hallucinations Beyond Prompt Engineering

The article "5 Practical Techniques to Detect and Mitigate LLM Hallucinations Beyond Prompt Engineering" from Machine Learning Mastery explores advanced system-level strategies to ensure AI reliability. While basic prompting can improve performance, it often fails in production settings where strict accuracy is critical. The first technique, Retrieval-Augmented Generation (RAG), anchors model responses in real-time, external verified data, moving away from reliance on static, often outdated training memory. Second, the article advocates for Output Verification Layers, where a secondary model or automated cross-referencing system validates initial drafts before they reach the user. Third, Constrained Generation utilizes structured formats like JSON or XML to limit speculative or tangential output, ensuring machine-readable consistency. Fourth, Confidence Scoring and Uncertainty Handling encourage models to quantify their own reliability or admit ignorance through "I don’t know" responses rather than guessing. Finally, Human-in-the-Loop Systems integrate human oversight to refine results, provide feedback, and build essential user trust. Collectively, these methods transition LLM applications from experimental prototypes to robust, factual tools. By implementing these architectural patterns, developers can move beyond trial-and-error prompting to create production-ready systems capable of handling high-stakes tasks where the cost of a hallucination is significantly high.

Agentic GRC: Teams Get the Tech. The Mindset Shift Is What's Missing

In "Agentic GRC: Teams Get the Tech, the Mindset Shift Is What's Missing," Yair Kuznitsov explores the transformative impact of AI agents on Governance, Risk, and Compliance. Traditionally, GRC professionals derived value from operational competence, specifically manual evidence collection and audit management. However, agentic AI now automates these workflows, creating an identity crisis for those whose roles were defined by execution. The author argues that while technology is ready, many teams remain reluctant because they struggle to redefine their professional purpose beyond operational tasks. Crucially, GRC was intended as a strategic risk management function, but it became consumed by scaling inefficiencies. Agentic GRC offers a return to these roots, transitioning practitioners toward "GRC Engineering" where controls are managed as code via Git and . This essential shift requires moving from a "checkbox" mentality to strategic risk leadership. Humans must provide critical judgment, define risk appetite, and translate business context into compliance logic—capabilities AI cannot replicate. Ultimately, successful organizations will empower their GRC teams to stop merely managing operational machines and start leading proactive, risk-based initiatives. This evolution represents an opportunity for professionals to finally perform the high-level work they were originally trained to do.

The Missing Layer in Agentic AI

The article "The Missing Layer in Agentic AI" argues that while current AI development focuses heavily on large language models and reasoning capabilities, a critical "middleware" layer is currently absent. This missing component, referred to as an agentic orchestration layer, is essential for transforming static models into truly autonomous systems capable of executing complex, multi-step tasks in dynamic environments. The author explains that for AI agents to be effective, they require more than just raw intelligence; they need robust frameworks for memory management, tool integration, and state persistence. This layer acts as the glue that connects high-level planning with low-level execution, ensuring that agents can maintain context and recover from errors during long-running processes. Furthermore, the piece highlights that without this specialized infrastructure, developers are forced to build bespoke, brittle solutions that do not scale. By establishing a standardized orchestration layer, the industry can move toward more reliable, observable, and interoperable agentic workflows. Ultimately, the article suggests that the next frontier of AI progress lies not just in better models, but in the sophisticated software engineering required to manage how those models interact with the world and each other.

Edge clouds and local data centers reshape IT

For over a decade, enterprise cloud strategy prioritized centralization on hyperscale platforms to achieve economies of scale and reduce infrastructure sprawl. However, the rise of and local data centers is fundamentally reshaping this paradigm toward a selectively distributed architecture. Modern digital systems increasingly require real-time responsiveness, adherence to regional data sovereignty regulations, and efficient handling of massive data volumes from sensors and video feeds. To meet these demands, enterprises are adopting a dual architecture that combines the strengths of centralized cloud platforms—well-suited for model training and storage—with localized infrastructure positioned closer to the source of interaction. This shift is visible in sectors like retail and manufacturing, where proximity reduces latency and operational costs. Despite its benefits, the transition to edge computing introduces significant complexities, including fragmented life-cycle management, security hardening, and the need for robust observability across hundreds of distributed sites. Rather than replacing the cloud, the edge serves as a coordinated layer within an integrated hybrid model. By placing workloads where they are most operationally and economically effective, organizations can navigate bandwidth limitations and physical-world complexities, ensuring their digital infrastructure remains agile and resilient in a changing technological landscape.

AI frenzy feeds credential chaos, secrets leak through code, tools, and infrastructure

highlights an alarming surge in cybersecurity risks, revealing that 28.65 million new were detected in public GitHub commits during 2025. This multi-year upward trend demonstrates that credentials, including access keys, tokens, and passwords, are increasingly leaking through code, development tools, and infrastructure. Beyond public repositories, the report underscores a significant shift toward internal environments, which often carry a higher density of sensitive production credentials. The explosion of AI development has exacerbated the problem; AI-assisted coding and the proliferation of new model providers and agent frameworks have introduced vast numbers of fresh credentials that are frequently mismanaged. Furthermore, collaboration platforms like Slack and Jira, along with self-hosted Docker registries, serve as additional points of exposure. A particularly concerning finding is the longevity of these leaks, as many credentials remain active and usable for years due to the operational complexities of remediation across fragmented systems. Ultimately, the report illustrates a widening gap between the rapid pace of software innovation and the governance required to secure the expanding surface area of modern, interconnected development workflows, leaving critical infrastructure vulnerable to exploitation.

Architecting Autonomy at Scale: Raising Teams Without Creating Dependencies

In “Architecting Autonomy at Scale,” Shweta Aggarwal and Ron Klein argue that traditional, centralized architectural governance becomes a significant bottleneck as organizations grow, necessitating a fundamental shift toward decentralized decision-making. Utilizing a “parental metaphor,” the article describes the evolution of architecture from “infancy,” where strong central guidance is required to prevent chaos, to “adulthood,” where teams operate autonomously within established systems. The authors propose a structured framework built on clear decision boundaries, shared principles, and robust guardrails rather than restrictive approval gates. Key technical practices include documenting decisions via Architecture Decision Records (ADRs) to preserve context, utilizing “fitness functions” for automated governance within CI/CD pipelines, and leveraging AI for detecting architectural drift. By aligning architectural authority with the C4 model levels, organizations can clarify ownership and reduce delivery friction. Ultimately, the role of the architect evolves from a top-down gatekeeper to a coach and platform enabler, focusing on creating “paved roads” that allow teams to experiment safely. This transition is framed as a socio-technical transformation that requires cultural shifts, leadership support, and a trust-based governance model to successfully balance local agility with enterprise-wide coherence and long-term technical sustainability.

Regulators crack down on EU age assurance — self-declaration no longer enough

The European Commission is intensifying its enforcement of the Digital Services Act (DSA) by moving away from "self-declaration" as a valid method for online age assurance. Following a series of investigations, regulators have determined that simple "click-to-confirm" mechanisms on major adult content platforms, including Pornhub, Stripchat, XNXX, and XVideos, are insufficient to protect minors from harmful material. These platforms are now being urged to implement more robust, privacy-preserving age verification measures to ensure compliance with EU standards. Simultaneously, the Commission has opened a formal investigation into Snapchat over concerns that its reliance on self-declaration fails to prevent underage children from accessing the app or to provide age-appropriate experiences for teenagers. Beyond the European Commission's actions, the UK Information Commissioner's Office (ICO) is also pressuring social media giants to strengthen their age-gate systems. Potential solutions being discussed include the use of the , facial age estimation technology, and identity document scans. This coordinated regulatory crackdown signals a major shift in the digital landscape, where platforms must now prioritize societal risks to minors over business-centric concerns. Failure to adopt these more stringent verification methods could lead to significant financial penalties across the European Union.

5 reasons why the tech industry is failing women

The CIO.com article, “Women in Tech Statistics: The Hard Truths of an Uphill Battle,” highlights the persistent gender gap and systemic challenges women face in the technology sector. Despite representing 42% of the global workforce, women hold only 26-28% of tech roles and just 12% of C-suite positions. A significant “leaky pipeline” begins in academia, where women earn only 21% of computer science degrees, and continues into the workplace. Troublingly, 50% of women leave the industry by age 35—a rate 45% higher than men—driven by toxic cultures, microaggressions, and a lack of flexible work-life balance. Economic instability further compounds these issues, with women being 1.6 times more likely to face layoffs; during 2022’s mass tech layoffs, they accounted for 69% of job losses. Financial disparities remain stark, as women earn approximately $15,000 less annually than their male counterparts. Furthermore, the rise of artificial intelligence presents new risks, with women’s roles 34% more likely to be disrupted by automation compared to 25% for men. Collectively, these statistics underscore that achieving gender parity requires more than corporate pledges; it necessitates fundamental shifts in recruitment, retention, and structural support systems.

15+ Global Banks Exploring Quantum Technologies

The article titled "15+ global banks probing the wonderful world of quantum technologies," published by The Quantum Insider on March 27, 2026, highlights the accelerating integration of within the global financial sector. Central to this movement is the "," a benchmarking tool developed in collaboration with HorizonX Consulting, which identifies top performers like JPMorgan Chase, HSBC, and Goldman Sachs. These institutions are leading a group of over fifteen major banks that have transitioned from theoretical research to practical experimentation. The report details how these banks are leveraging quantum advantages for high-dimensional computational tasks, including portfolio optimization, complex risk modeling through Monte Carlo simulations, and real-time fraud detection. Furthermore, the article emphasizes a proactive shift toward "quantum readiness" to combat cryptographic threats, with banks like HSBC trialing quantum-secure trading for digital assets. With nearly 80% of the world’s fifty largest banks now exploring these frontier technologies, the narrative has shifted from whether quantum will disrupt finance to when its full-scale implementation will occur. This trend is bolstered by significant investments, such as JPMorgan’s backing of Quantinuum, underscoring a strategic imperative to maintain competitiveness and ensure systemic stability in a post-quantum world.

Daily Tech Digest - October 16, 2025

Quote for the day:

"Don't wait for the perfect moment take the moment and make it perfect." -- Aryn Kyle

Major network vendors team to advance Ethernet for scale-up AI networking

“AI workloads are re-shaping modern data center architectures, and networking solutions must evolve to meet the growing demands,” wrote Martin Lund, executive vice president of ’s common hardware group, in a blog post about the news. “ brings together AI infrastructure operators and vendors to align on open standards, incorporate best practices, and accelerate innovation in Ethernet solutions for scale-up networking.” ESUN will focus solely on open, standards-based Ethernet switching and framing for scale-up networking—excluding host-side stacks, non-Ethernet protocols, application-layer solutions, and proprietary technologies. The group will expand the development and interoperability of and for scale-up networks, the OCP stated in a blog: “The Initial focus will be on L2/L3 Ethernet framing and switching, enabling robust, lossless, and error-resilient single-hop and multi-hop topologies.” ... “Scale-Up” AI fabrics (SAIF) provide high-bandwidth, low-latency physical network interconnectivity and enhanced memory interaction between nearby AI processors,” Garter wrote. “Current implementations of SAIF are vendor-proprietary platforms, and there are proximity limitations (typically, SAIF is confined to only a rack or row). In most scenarios, Gartner recommends using Ethernet when connecting multiple SAIF systems together. We believe the scale, performance and supportability of Ethernet is optimal.”

Moving Beyond Awareness: How Threat Hunting Builds Readiness

The best defense begins before the first alert. Proactive threat hunting identifies the conditions that allow an attack to form and addresses them early. It moves security from passive observation to a clear understanding of where exposure originates. This move from observation to proactive understanding forms the core of a modern security program: Continuous Threat Exposure Management (CTEM). Instead of a one-time project, a CTEM program provides a structured, repeatable framework to continuously model threats, validate controls, and secure the business. For organizations ready to build this capability, A Practical Guide to Getting Started With CTEM offers a clear roadmap. ... reminds us that awareness is an essential step. Yet real progress begins when awareness leads to action. Awareness is only as powerful as the systems that measure and validate it. Proactive threat hunting turns awareness into readiness by keeping attention fixed on what matters most - the weak points that form the basis for tomorrow's attacks. Awareness teaches people to see risk. Threat hunting proves whether the risk still exists. Together they form a continuous cycle that keeps security viable long after awareness campaigns end. This October, the question for every organization is not how many employees completed the training, but how confident you are that your defenses would hold today if someone tested them. Awareness builds understanding. Readiness delivers protection.

Beyond the checklist: Building adaptive GRC frameworks for agentic AI

We must move GRC governance from a periodic, human-driven activity to an adaptive, continuous and context-aware operational capability embedded directly within the agentic AI platform. The first critical step involves implementing real-time governance and telemetry. This means we stop relying solely on endpoint logs that only tell us what the agent did and instead focus on integrating monitoring into the agent’s operating environment to capture why and how. ... The RCV is a structured, cryptographic record of the factors that drove the agent’s choice. It includes not just the data inputs, but also the specific model parameters, the weighted objectives used at that moment, the counterfactuals considered and, crucially, the specific GRC constraints the agent accessed and applied during its deliberation. ... Finally, we must address the “big red button” problem inherent in human-in-the-loop override. For agentic AI, this button cannot be a simple off switch, which would halt critical operations and cause massive disruption. The override must be non-obstructive and highly contextual, as detailed in OECD Principles on AI: Accountability and human oversight. ... We are entering an era where our systems will act on our behalf with little or no human intervention. My priority — and yours — must be to ensure that the autonomy of the AI does not translate into an absence of accountability.

Beyond Productivity: AI’s Role in Creating Hyper-Personalized and Inclusive Employee Experiences

enhances employee experiences by analyzing unstructured information, understanding natural language and interpreting intent. takes this further by acting as a centralized, intelligent interface – integrating data sources, maintaining contextual awareness, adapting to individual goals and autonomously executing tasks – minimizing the need for employees to navigate multiple systems or support channels. From onboarding to learning, wellness, feedback, and career progression, it provides a seamless connected experience. Furthermore, AI systems can continuously learn from an employee’s behavior, preferences, and goals to provide real-time, tailored experiences. ... As powerful as AI is, it’s success in employee experience hinges on how well it aligns with human-centric values. Personalization must never feel intrusive, and inclusivity efforts must be grounded in empathy, transparency, and consent. Enterprises must adopt a responsible AI approach – ensuring fairness, explainability, and ethical data use. Employees should have clarity on how AI systems work, how data is used, and how decisions are made. Moreover, they should always have the option to challenge or override AI-driven outcomes. Leadership, HR, and IT teams must work together to create governance frameworks that reinforce trust – because even the most advanced AI fails if employees don’t feel seen, respected, and safe.

5 ideas to help bridge the genAI skills gap

Instead of focusing narrowly on technical skills, has shifted its training toward cultivating adaptable mindsets. “We want to develop curiosity, critical thinking, and creativity — skills that aren’t easily replaced by AI,” said Prasad, stressing that traditional classroom-style learning is insufficient when the competitive environment demands experimentation and rapid application. Employees are given access to a range of AI tools such as , Google Gemini, and , and encouraged to experiment safely in R&D environments. ... Rather than pulling people out of their daily job for separate training sessions, the company embeds training directly into daily workflows at the points where people are likely to be confronted with the need for learning material. Digital adoption platforms like provide in-system nudges and tips directly in the tools recruiters use, guiding them in real time. Recruiting system training is integrated within the application. Users don’t know they’re interacting with a digital coach that’s training them to use the system and its AI features, such as candidate sourcing, resume analysis, and client outreach, effectively. According to Busch, the payoff is measurable: “How-to” support questions have been reduced 95% since implementing workflow learning.

Digital transformation works best when co-owned — but only if you do it right

All too often, the has gone in alone to the , , or board to argue the benefits of a digital project in order to obtain funding. A sounder approach is to confirm the need for a digital solution to a particular business problem with the CxO in charge of that business area, and to then go in together to the budget meeting so that both the technology and the business values can be effectively presented. Secondly, there is no reason the IT budget must bear the full costs of a co-owned project. ... A first step for CxOs and CIOs toward a new, unified value creation paradigm is to root out the historical roadblocks that stand in the way of executive cooperation. CxOs must fully engage in digital projects from start to finish, and CIOs must be willing to accept co-star (instead of star) billing in projects. Most CIOs are making this shift in thinking, but CxOs still lag in project participation. Second, CIOs must gain CxO hard-dollar budget commitments for digital projects. When both co-fund and advocate for digital projects in front of the board, CEO, and CFO, both have skin in the game. Third, co-assign executive leadership responsibilities for key project milestones. The CxO might be responsible for defining the business use case and what a specific digital solution must deliver, while the CIO might be responsible for developing the solution.

Australian legislators spar with platforms, each other over age assurance laws

If there’s one thing every platform can agree on when it comes to age assurance, it’s that biometric age verification measures are a good idea – but probably just not for them. The latest to suggest that maybe they aren’t subject to the law are and . The companies have reportedly made the case to that there are potential legal workarounds to Australia’s incoming social media regulations, which will prohibit users under 16 from having accounts. ... “We’re doing these things, ultimately, for the good of young people in Australia. It will span television, radio, digital. There will be some on billboards near schools around the country. They’ll see it on TV. They’ll see it online. They’ll see it, ironically, on social media, because until the 10th of December, it is legal for kids to be on social media. And if that’s where they are, that’s where we need to talk to them about what this means and why we’re doing it.” ... There is, in questioning from Senator David Shoebridge of the , an apparent desire to assign blame to age verification providers. He argues that Australia’s privacy laws aren’t yet ready to accommodate such data collection, in that doesn’t include requirements for the deletion of data. He asks about workarounds, like masks and VPNs.

5 Must-Follow Rules of Every Elite SOC: CISO’s Checklist

Even the best analysts can’t detect everything alone. When communication breaks down and teams work in silos, critical context slips away; alerts are missed, work gets repeated, and investigations slow to a crawl. That’s why collaboration has become a core part of modern SOC performance. Inside the , the lets analysts join the same live workspace, share results in real time, and coordinate across roles without switching tools. Team leads can assign tasks, monitor progress, and track productivity; all from a single interface that keeps the team aligned, no matter the time zone. ... Every SOC knows the feeling; too many alerts, too many clicks, not enough time. Analysts lose hours on repetitive actions: opening files, running scripts, clicking through pop-ups, or solving CAPTCHAs just to trigger hidden payloads. With inside the ANY.RUN sandbox, all those steps happen automatically. The system opens malicious links hidden behind , interacts with fake installers, solves CAPTCHAs, and performs other routine actions; no human input needed. The sandbox handles these interactions on its own, exposing every stage of the attack chain in a fraction of the time. ... Even the best detection tools miss things. False negatives happen all the time; a file marked “safe” can still hide malicious behavior deep in its code or trigger only under specific conditions.

Identifying risky candidates: Practical steps for security leaders

Today’s fraudsters and malicious insiders often leave digital breadcrumbs outside a traditional organization’s direct visibility. Hiring teams cannot connect those breadcrumbs on their own, and they should partner with the security team to surface hidden affiliations, past fraudulent activities, or concerning behavioral patterns as a part of the overall candidate assessment. ... Outside-the-firewall checks are especially important in a remote or hybrid work environment where face-to-face verification is limited. The practical takeaway is that companies need to broaden their visibility: the more you combine traditional HR processes with external digital risk signals and collaborate across internal teams, the harder it becomes for a fraudulent candidate to work within your company undetected. ... Employees under stress or facing job insecurity may become more prone to misconduct, either through negligence or malice. Those with declining performance reviews, who are facing disciplinary action, or that have presented resistance to security upgrades are worth closer scrutiny. Employees that give notice of resignation should be keenly watched for unauthorized activity. ... The definition of insider threat is shifting. Where once the focus was on accidental misconfigurations or negligence, today it increasingly includes malicious acts, fraud, and hybrid cases where dissatisfaction or personal pressures drive risky behavior.

CISO Conversations: Are Microsoft’s Deputy CISOs a Signpost to the Future?

Microsoft may be unique in its size and complexity. But the difficulties faced by its CISO, Igor Tsyganskiy, are the same as those faced by all CISOs – just writ much larger. The expansion of the CISO role from governance (security), to include compliance (legal), internal app and external product development (engineering), integration with business leaders (business knowledge and communication skills), artificial intelligence (data scientist) and more, implies the solution adopted Tsyganskiy should be considered by all CISOs. ... It is encouraging that both top Microsoft dCISOs believe that such career success can be achieved by anyone with the right attitude. “Personally, I like to understand technology to a deep level. But it isn’t absolutely essential,” explains Russinovich. “You can delegate things, just like Igor is delegating his need for deep understanding of everything to a pool of dCISOs. Some level of technical understanding will always be crucial, because otherwise you’re just completely disconnected. But I think you can be an effective CISO without being as technically deep as I personally like to be.” Johnson agrees that you can have a successful career in cyber without prior cyber qualifications. “You need to have the aptitude. You need to be willing to learn every day. You need to be willing to accept what you don’t know, and you need to network,” she says.

Daily Tech Digest - July 19, 2025

Quote for the day:

"A company is like a ship. Everyone ought to be prepared to take the helm." -- Morris Wilks

AI-Driven Threat Hunting: Catching Zero Day Exploits Before They Strike

Cybersecurity has come a long way from the days of simple virus scanners and static firewalls. Signature-based defenses were sufficient to detect known malware during the past era. Zero-day exploits operate as unpredictable threats that traditional security tools fail to detect. The technology sector saw Microsoft and Google rush to fix more than dozens of zero day vulnerabilities which attackers used in the wild during 2023. The consequences reach extreme levels because a single security breach results in major financial losses and immediate destruction of corporate reputation. AI functions as a protective measure that addresses weaknesses in human capabilities and outdated system limitations. The system analyzes enormous amounts of data from network traffic and timestamps and IP logs, and other inputs to detect security risks. ... So how does AI pull this off? It’s all about finding the weird stuff. Network traffic packets follow regular patterns, but zero-day exploits cause packet size fluctuations and timing irregularities. AI detects anomalies by comparing data against its knowledge base of typical behavior patterns. Autoencoders function as neural networks that learn to recreate data during operation. When an autoencoder fails to rebuild data, it automatically identifies the suspicious activity.

How AI is changing the GRC strategy

CISOs are in a tough spot because they have a dual mandate to increase productivity and leverage this powerful emerging technology, while still maintaining governance, risk and compliance obligations, according to Rich Marcus, CISO at AuditBoard. “They’re being asked to leverage AI or help accelerate the adoption of AI in organizations to achieve productivity gains. But don’t let it be something that kills the business if we do it wrong,” says Marcus. ... “The really important thing to be successful with managing AI risk is to approach the situation with a collaborative mindset and broadcast the message to folks that we’re all in it together and you’re not here to slow them down.” ... Ultimately, the task is for security leaders to apply a security lens to AI using governance and risk as part of the broader GRC framework in the organization. “A lot of organizations will have a chief risk officer or someone of that nature who owns the broader risk across the environment, but security should have a seat at the table,” Norton says. “These days, it’s no longer about CISOs saying ‘yes’ or ‘no’. It’s more about us providing visibility of the risks involved in doing certain things and then allowing the organization and the senior executives to make decisions around those risks.”

Three Invisible Hurdles to Innovation

Innovation changes internal power dynamics. The creation of a new line of business leads to a legacy line of business declining or, at an extreme, shutting down or being spun out. One part of the organization wins; another loses. Why would a department put forward or support a proposal that would put that department out of business or lead it to lose organizational influence? That means senior leaders might never see a proposal that’s good for the whole organization if it is bad for one part of the organization. ... While the natural language interface of OpenAI’s ChatGPT was easy the first time I used it, I wasn’t sure what to do with a large language model (LLM). First I tried to mimic a Google search, and then jumped in and tried to design a course from scratch. The lack of artfully constructed prompts on first-generation technology led to predictably disappointing results. For DALL-E, I tried to prove that AI couldn’t match the skills of my daughter, a skilled artist. Seeing mediocre results left me feeling smug, reaffirming my humanity. ... Social identity theory suggests that individuals often merge their personal identity with the offerings of the company at which they work. Ask them who they are, and they respond with what they do: “I’m a newspaper guy.” So imagine how Gilbert’s message landed with his employees who worked to produce a print newspaper every day.

Beyond Code Generation: How Asimov is Transforming Engineering Team Collaboration

The conventional wisdom around AI coding assistance has been misguided. Research shows that engineers spend only about 10% of their time writing code, while the remaining 70% is devoted to understanding existing systems, debugging issues, and collaborating with teammates on intricate problems. This reality exposes a significant gap in current AI tooling, which predominantly focuses on code generation rather than comprehension. “Engineers don’t spend most of their time writing code. They spend most of their time understanding code and collaborating with other teammates on hard problems,” explains the Reflection team. This insight drives Asimov’s unique approach to engineering productivity. ... As engineering teams grapple with increasingly complex systems and distributed architectures, tools like Asimov offer a glimpse into a future where AI serves as a genuine collaborative partner rather than just a code completion engine. By focusing on understanding and context rather than mere generation, Asimov addresses the actual pain points that slow down engineering teams. The tool is currently in early access, with Reflection AI selecting teams for initial deployment.

Data Management Makes or Breaks AI Success for SLGs

“Many agencies start their AI journeys with a specific use case, something simple like a chatbot,” says John Whippen, regional vice president for U.S. public sector at Snowflake. “As they show the value of those individual use cases, they’ll attempt to make it more prevalent across an entire agency or department.” Especially in populous jurisdictions, readying data for large-scale AI initiatives can be challenging. Nevertheless, that initial data consolidation, governance and management are central to cross-agency AI deployments, according to Whippen and other industry experts. ... Most state agencies operate on a hybrid cloud model. Many of them work with multiple hyperscalers and likely will for the foreseeable future. This creates potential data fragmentation. However, where the data is stored is not necessarily as important as the ability to centralize how it is accessed, managed and manipulated. “Today, you can extract all of that data much more easily, from a user interface perspective, and manipulate it the way you want, then put it back into the system of record, and you don't need a data scientist for that,” says Mike Hurt, vice president of state and local government and education for ServiceNow. “It's not your grandmother's way of tagging anymore.”

The Role Of Empathy In Effective Leadership

To maintain good working relationships with others, you must be willing to understand their experiences and perspectives. As we all know, everyone sees the world through a different lens. Even if you don’t fully align with others’ worldviews, as a leader, you must create an environment where individuals feel heard and respected. ... Operate with perspective and cultivate inclusive practices. In a way, empathy is being able to see through the eyes of others. Many of the unspoken rules of the corporate world are based on the experience of white males in the workforce. Considering the countless other demographics in the modern workforce, most of these nuances or patterns are outdated, exclusionary, counterproductive, and even harmful to some people. Can you identify any unspoken rules you enforce or adhere to within your career? Sometimes, they are hard to spot right away. In my research as a DEI professional, I’ve encountered many unspoken cultural rules that don’t consider the perspective of diverse groups. ... Empathetic leaders create more harmonious workplaces and inspire their teams to perform better. Creating an atmosphere of acceptance and understanding sets the stage for healthier dynamics. In questioning the status quo, you root out any counterproductive trends in company culture that need addressing.

New Research on the Link Between Learning and Innovation

Cognitive neuroscience confirms what experienced leaders intuitively know: Our brains need structured breaks to turn experiences into actionable knowledge. Just as sleep helps consolidate daily experiences into long-term memory, structured reflection allows teams to integrate insights gained during exploration phases into strategies and plans. Without these deliberate rhythms, teams risk becoming overwhelmed by continual information intake—akin to endlessly inhaling without pausing to exhale—leading to confusion and burnout. By intentionally embedding reflective pauses within structured learning cycles, teams can harness their full innovative potential. ... You can think of a team’s learning activities as elements of a musical masterpiece. Just as great compositions—like Beethoven’s Fifth Symphony—skillfully balance moments of tension with moments of powerful resolution, effective team learning thrives on the structured interplay between building up and then releasing tension. Harmonious learning occurs when complementary activities, such as team reflection and external expert consultations, reinforce one another, creating moments of clarity and alignment. Conversely, dissonance arises when conflicting activities, like simultaneous experimentation and detailed planning, collide and cause confusion.

Optimizing Search Systems: Balancing Speed, Relevance, and Scalability

Efficiently managing geospatial search queries on Uber Eats is crucial, as users often seek outnearby restaurants or grocery stores. To achieve this, Uber Eats uses geo-sharding, a technique that ensures all relevant data for a specific location is stored within a single shard. This minimizes query overhead and eliminates inefficiencies caused by fetching and aggregating results from multiple shards. Additionally, geo sharding allows first-pass ranking to happen directly on data nodes, improving speed and accuracy. Uber Eats primarily employs two geo sharding techniques: latitude sharding and hex sharding. Latitude sharding divides the world into horizontal bands, with each band representing a distinct shard. Shard ranges are computed offline using Spark jobs, which first divide the map into thousands of narrow latitude stripes and then group adjacent stripes to create shards of roughly equal size. Documents falling on shard boundaries are indexed in both neighboring shards to prevent missing results. One key advantage of latitude sharding is its ability to distribute traffic efficiently across different time zones. Given that Uber Eats experiences peak activity following a "sun pattern" with high demand during the day and lower demand at night, this method helps prevent excessive load on specific shards.

How to beat the odds in tech transformation

Creating an enterprise-wide technology solution requires defining a scope that’s ambitious and quickly actionable and has an underlying objective to keep your customers and organization on board throughout the project. ... Technology may seem even more autonomous, but tech transformations are not. They depend on the full engagement and alignment of people across your organization, starting with leadership. First, senior leaders need to be educated so they clearly understand not just the features of the new technology but more so the business benefits. This will motivate them to champion engagement and adoption throughout the organization. ... Even the best-planned journeys to new frontiers will run into unexpected challenges. For instance, while we had extensively planned for customer migration during our tech transformation, the effort required to make it go as quickly and smoothly as possible was greater than expected. After all, we provide mission-critical solutions, so customers didn’t simply want to know we had validated a new product. They wanted reassurance we had validated their specific use cases. In response, we doubled down on resources to give them enhanced confidence. As mentioned, we introduced a protocol of parallel systems, running the old and new simultaneously.

Leadership vs. Management in Project Management: Walking the Tightrope Between Vision and Execution

At its core, management is about control. It’s the science of organising tasks, allocating resources, and ensuring deliverables meet specifications. Managers thrive on Gantt charts, risk matrices, and status reports. They’re the architects of order in a world prone to chaos.. It’s the science of organising tasks, allocating resources, and ensuring deliverables meet specifications. Managers thrive on Gantt charts, risk matrices, and status reports. They’re the architects of order in a world prone to chaos. Leadership, on the other hand, is about inspiration. It’s the art of painting a compelling vision, rallying teams around a shared purpose, and navigating uncertainty with grit. ... A project manager’s IQ might land them the job, but their EQ determines their success. Leadership in project management isn’t just about charisma—it’s about sensing unspoken tensions, motivating burnt-out teams, and navigating stakeholder egos. ... The debate between leadership and management is a false dichotomy. Like yin and yang, they’re interdependent forces. A project manager who only manages becomes a bureaucrat, obsessed with checkboxes but blind to the bigger picture. One who only leads becomes a dreamer, chasing visions without a roadmap. The future belongs to hybrids—those who can rally a team with a compelling vision and deliver a flawless product on deadline.