Don’t forget all the things that a core team performs to a tee, but that you never see

The third ‘fragmentation wave’ of the IT-revolution is upon us, it seems. Fragmentation is a repeated pattern in the IT-revolution, that has given us object oriented programming and agile/DevOps as solutions to managing complexity. Now, it is the organ…

EA Teams Struggle To Communicate Architecture’s Value

The maturity of enterprise architecture (EA) varies greatly across companies, industries, and geographies. In France, 84% agree that their teams are effective in communicating EA’s value, while just 54% of UK respondents agree. Learn more in this previ…

How Generative AI Is Changing Business – an Interview

Bernard Marr is an internationally best-selling business author, keynote speaker and strategic advisor to companies and governments. He advises and coaches many of the world’s best-known organizations such as Amazon, Google, Microsoft, IBM, Toyota, The…

Improving Return on Security Investment: Estimating the Impact of Mitigations

By Simone Curzi, Principal Consultant, Microsoft; John Linford, Security Portfolio Forum Director, The Open Group; Dan Riley, Vice President & Distinguished Engineer Data Science, Kyndryl; Ken St. Cyr, Sr. Cybersecurity Architect, Microsoft

Understanding the risks present in the system you are developing is important, but it is even more important to determine mitigation actions. Activities like threat modeling can help with identifying your options, but they are usually too numerous and too expensive. What should you really do? And would the residual risk be acceptable afterwards?