Latest news
By 2026, AI regulation has moved from principle-based discussions to enforceable timelines, state-level laws, and contractual requirements. The EU AI Act is taking effect in phases, while US states and industry regulators are issuing specific rules. CIOs need to treat compliance as a design constraint and establish unified enterprise AI control systems to address lifecycle management challenges in a multi-regulatory environment.
According to the Workforce Password Security Status Report released by Zoho on Tuesday, enterprises have high confidence in AI's ability to improve cybersecurity, but actual deployment readiness is severely lacking. The report indicates that 90% of respondents believe AI can strengthen network defenses, yet only 8% say they are currently prepared to deploy AI-driven security tools. Meanwhile, a large number of enterprises still show significant shortcomings in foundational security practices such as identity management and zero-trust networks.
The AI Standards and Innovation Center (CAISI) under the US National Institute of Standards and Technology (NIST) announced agreements with Google DeepMind, Microsoft, and xAI to conduct safety assessments on their frontier AI models before public release and to provide continuous monitoring after deployment. This move expands on previous collaborations with OpenAI and Anthropic, aiming to address national security risks posed by AI. Analysts note that this marks a consideration of "sovereign alignment" factors when enterprises procure AI.
Data security does not end with device retirement; rather, risks escalate at the end of the lifecycle. Under strict scrutiny from frameworks such as NIST 800-88 and HIPAA, multiple handoffs in third-party destruction models are becoming a liability. This article analyzes why CIOs are bringing data destruction in-house and how this shift turns compliance pressure into a governance advantage.
With the rapid adoption of agentic AI, 74% of organizations plan to deploy it within two years (Deloitte), and 84% of knowledge workers expect its adoption (EY). Agentic browsers transform from passive tools into active agents, but security research has already identified multiple vulnerabilities. Risks include prompt injection hijacking, data leakage, accountability gaps, business risks, and shadow AI. Enterprises should achieve security governance through enterprise browsers with built-in DLP, identity, and runtime security (such as Prisma Browser), rather than simply banning them.
Governments of six countries, including Australia and the United States, jointly released guidelines for the safe deployment of agentic AI, emphasizing prudent adoption, risk management, and human oversight.
New-generation MSP leaders such as Paco Lebron and Antwine Jackson believe that the traditional ticket-centric operational model can no longer meet customer needs. They emphasize achieving scalable growth by empowering teams, integrating automation tools, and focusing on business outcomes. Industry data shows that the managed services market will grow from $430 billion in 2026 to $704 billion in 2031, with an average annual growth rate of 12%.
In its fiscal 2026 third-quarter earnings report, Microsoft disclosed that its AI business annualized revenue grew 123% year-over-year to over $37 billion, with Microsoft 365 Copilot paid seats exceeding 20 million. The company plans capital expenditures of over $40 billion next quarter and updated its partnership terms with OpenAI, while OpenAI announced it would bring its models to AWS. Analysts advise CIOs to choose cloud vendors flexibly based on specific use cases.
PwC launched AI-driven unified detection and response managed security services on Wednesday, powered by the Google Security Operations platform. The service is based on the $400 million cooperative investment announced by both parties in January, aiming to serve small and medium-sized enterprises that typically do not seek cybersecurity services from large consulting firms. At the same time, PwC also announced the establishment of a Gemini Enterprise Center of Excellence to deepen collaboration with Google Cloud.
Cognizant announced on Wednesday the acquisition of Astreya, aiming to deepen its AI-first managed services capabilities. Astreya has 25 years of data center management experience, a proprietary AI operations platform, and partnerships with six major cloud giants. The deal is expected to close in Q2, with the amount not publicly disclosed.