The NIS2 transposition deadline of October 2024 has passed. Member state enforcement postures vary, compliance gaps are widespread, and the organisations that treated NIS2 as a checkbox exercise are now in a different position than those that treated it as a security programme. This is an honest assessment of where things stand.
Organisations that buy a cloud cost visibility tool and call it FinOps consistently underperform the savings potential. FinOps is an operating model change that requires cultural and behavioural change from engineers, finance teams, and business leadership simultaneously.
Many organisations have renamed their DevOps teams 'platform teams' without changing what those teams do or how they are positioned. This is not a naming error — it is a strategic error that affects the return on the platform investment.
Uptime was the right metric when applications were simple. In distributed, cloud-native environments, a system can be fully 'up' while delivering a degraded experience that costs the business revenue. Application health is the metric that captures what uptime misses.
VMware Explore 2024 was not primarily a product conference. It was the moment when enterprise technology leaders publicly confronted what Broadcom's acquisition of VMware means for their infrastructure strategy over the next three to five years.
Enterprise technology portfolios accumulate vendor relationships through a hundred individual decisions, each rational at the time. The portfolio they produce is almost never rational in aggregate. Vendor consolidation at scale is the cost lever that most IT organisations have available but underuse.
Enterprise AI programmes that fail at scale almost never fail because the technology did not work. They fail because the organisation was not ready to use it. This is the change management framework that addresses the actual adoption challenge.
Most organisations are treating AI Act compliance as a technology governance programme. The ones that will be strategically better off in three years are treating it as a product, process, and market positioning decision that happens to have a compliance component.
Monitoring tells you when something has gone wrong. Observability tells you why. The difference between these two capabilities is not academic — it has direct, quantifiable impact on the cost and speed of incident resolution in complex distributed systems.
Security investment cases fail in the CFO review for a consistent reason: they quantify threat but not financial impact. This is the framework that connects security to business strategy in terms that finance can evaluate.
