CXOInsights by CXOCIETY

CXOCIETY | FutureCIO FutureCFO FutureIoT

CXOCIETY (read "society") is the platform for senior business, technology, finance and operations executives to discuss, share and discover the latest in technology, process and people innovation."CXOInsights" by CXOCIETY is the repository of shared insights and experiences by the best, brightest and most experienced professionals globally. Subscribe to "CXOInsights" by CXOCIETY to keep abreast in the latest in all things innovation.

  1. PodChats for FutureCISO: The weak link CISOs can’t ignore in 2026

    3D AGO

    PodChats for FutureCISO: The weak link CISOs can’t ignore in 2026

    In Asia-Pacific, CISOs are navigating a pivotal shift as organisations operationalise AI across complex hybrid and sovereign environments in 2026-2027.  AI has evolved from an innovative layer into a source of profound operational and security complexity, where failures in autonomous systems now trigger systemic business risks rather than contained outages, amplified by geopolitical tensions, supply-chain interdependencies, and regulatory volatility. Ultimately, building digital resilience at scale demands robust governance, continuous monitoring, and sovereign-compliant architectures that safeguard trust, uptime, and compliance—enabling sustainable AI-driven growth without exposing enterprises to unacceptable risk.  In this PodChats for FutureCISO, John Morgam, SVP & GM of Splunk Security, reveals how machine data and agentic AI help CISOs operationalise real-time observability, bridge talent gaps, and embed sovereign-compliant resilience. From Singapore to Sydney, discover strategies for secure, scalable AI growth through 2027. John, welcome to PodChats for FutureCISO. Here are 10 key questions for CISOs in Asia in 2026, sequenced to align with the narrative flow: 1.       Why has AI transitioned from a supplementary technology to a core driver of operational and security complexity across Asian enterprises?  2.       How are AI-related failures increasingly manifesting as systemic business risks rather than isolated technical incidents?  3.       What machine data strategies have organisations in Asia implemented to create a definitive, auditable record of system, user, and autonomous agent behaviour across hybrid environments?  4.       Telemetry. How are organisations in Asia embedding real-time observability into security architectures to detect anomalies before AI-driven failures cascade across interconnected systems?  a.       SIEMs and SOARs have been with us even before AI. What’s different today? 5.       Given the regional investment in security talent consolidation, what expertise gaps remain in organisations’ ability to govern where AI and operational decisions converge?  6.       How does the convergence of automation, human judgement, and unified data enable agentic AI to transform security operations capabilities?  7.       In what specific ways can agentic AI accelerate detection, deepen investigations, and support controlled, proportionate responses to incidents?  8.       What practical strategies allow organisations to operationalise AI at enterprise scale across hybrid infrastructures while sustaining resilience?  9.       How are regional CISOs adapting to sovereignty requirements across Asia—from Singapore’s MAS guidelines to Australia’s data locality rules—while maintaining unified security visibility?  10.   How can trust, uptime, and regulatory compliance be maintained as AI adoption accelerates in sovereign, multi-cloud Asia-Pacific contexts? 11.   What should CIOs and CISOs bear in mind as Agentic AI makes its way in the SOC?

    24 min
  2. PodChats for FutureCISO: Agent IAM is the next identity crisis

    3D AGO

    PodChats for FutureCISO: Agent IAM is the next identity crisis

    Meta’s recent acquisition of Moltbook, the first social network built exclusively for AI agents, marks a pivotal moment as autonomous agents begin talking to each other across platforms. While this unlocks powerful new capabilities, it also exposes critical identity security challenges.  From impersonation risks to exploding machine identities, organisations must now treat AI agents with the same rigorous verification, visibility, and governance as human users. The question is no longer if agents will interact — but how securely they will do so. These and more we will cover in this edition PodChats for FutureCISO with Marco Zhang, solutions engineering director, APJ at Saviynt. Marco, welcome to PodChats for FutureCISO. 1.       What new identity security expectations should enterprises set when their own AI agents begin participating in always-on directories or cross-platform agent socialization? 2.       Why will AI agents soon require the same robust identity verification frameworks as human users as they begin autonomously interacting across systems, platforms, and even external agent networks? 3.       What does the high-profile impersonation incident on Moltbook reveal about the immediate risks of unsecured machine identities in emerging agent-to-agent ecosystems, and how quickly could similar vulnerabilities scale in enterprise environments? 4.       Why do most organisations still lack basic visibility into the machine identities operating across their cloud, SaaS, and AI environments even as agent adoption accelerates — and what are the hidden costs of this blind spot? 5.       How could attackers exploit AI agents that possess valid credentials to manipulate automated systems, exfiltrate data, or move laterally through infrastructure without triggering traditional security alerts? 6.       As the ratio of machine identities to human identities continues to explode (already exceeding 1:80 in many enterprises), how should CISOs rethink their entire identity fabric to accommodate persistent, autonomous agent sessions? 7.       Why is identity governance rapidly becoming the central control layer that will determine how safely AI systems can interact with sensitive data, applications, and other agents? 8.       What lessons from Moltbook’s rapid rise and security shortcomings should inform how organisations design least-privilege and just-in-time access policies specifically for agent-to-agent communication? 9.       How can AI-powered identity security platforms (like Saviynt) turn the very technology driving agent proliferation — discovery, continuous posture monitoring, and automated governance — into a competitive advantage rather than a liability? 10.   Looking ahead to 2027, when projections suggest AI agents may outnumber human users in many organisations, what single identity security investment will separate the leaders from those facing uncontrolled “ghost agent” risk?

    25 min
  3. PodChats for FutureCFO: Balancing impact, agility & governance in the AI era

    APR 6

    PodChats for FutureCFO: Balancing impact, agility & governance in the AI era

    Over the last several years, successful CFOs have evolved from traditional financial stewards into strategic co-leaders who drive transformation with vision and discipline. In the era of artificial intelligence, they are taking the next step in corporate leadership integrating AI thoughtfully, championing agile practices, building data-driven cultures, and balancing innovation with robust governance to deliver measurable business impact. Divya Kumar exemplifies this new breed of finance leader. With over two decades of experience scaling businesses and leading large-scale digital transformations across diverse industries and geographies, she has earned multiple CFO and executive leadership awards. As a board member, keynote speaker, and author of the 2026 book CFO AI Compass, Divya empowers finance leaders to co-lead their organization’s AI agenda while transforming the finance function itself. As we celebrate International Women’s Day 2026, join us in this PodChats for FutureCFO as she reveals her approach to leadership as well as her secrets to leading finance in the era of AI. Part I 1.     In your career, what have been the key success factors that led you to senior leadership roles?  2.     What mindset shifts prepared you to lead digital and business transformations across Fortune 500s, startups, Capgemini, IKEA, and now Decathlon (no company name)? What challenges did you face and how did you overcome them? Part II 3.     In your book, "CFO AI Compass", you've described CFOs shifting from financial stewards to strategic AI co-leaders. What practical steps and lessons from your IKEA (Digital CFO + Chief Data Officer) and Decathlon roles helped you make this transition and which framework or chapter from your book have you applied the most? 4.     Your early ideas on agile budgeting and analytics-driven FP&A were forward-thinking. How have they evolved with today's AI? 5.     How do you balance rapid innovation adoption h governance, risk, and measurable value across multinationals which operate in numerous countries, like the ones you have worked for? What guardrails or metrics work best in your experience? 6.     With your board experience at IKEA and Decathlon, how has your strategy-finance-analytics experience given you an advantage? (connecting the dots) What's your top advice for finance leaders to gain a seat at the AI table? Part III 7.     You stress balancing humility with inspiration to foster curiosity and courage. What helps leaders and teams embrace (not fear) innovation? 8.     In your journey as a leader and mentoring women/students, what one key learning do you want emerging women leaders to internalize? 9. IWD thoughts (115 years)?

    24 min
  4. PodChats for FutureCIO: Agentic Flash: The autonomous innovations powering Asia’s AI scale-out

    MAR 31

    PodChats for FutureCIO: Agentic Flash: The autonomous innovations powering Asia’s AI scale-out

    In 2026, APAC CIOs are under intense pressure. GenAI and agentic AI workloads are surging, talent is scarce, and strict data-sovereignty rules are non-negotiable. Yet according to the latest IBM Institute for Business Value research, only 8% of organizations say their current infrastructure fully meets AI needs, just 42–46% believe they can handle advanced models or real-time inferencing at scale, and privacy, security, and compliance remain among the top reasons AI investments fall short. That’s where the conversation turns to storage. Today we explore how flash storage is evolving from a simple high-performance tier into something far more intelligent: Agentic Flash — systems with embedded autonomous AI that self-provisions, tunes, migrates workloads, detects threats, and optimizes costs in real time. We’ll examine how this autonomous intelligence is changing enterprise storage demands, how flash can integrate with content-aware capabilities to make RAG pipelines dramatically more efficient, what new governance guardrails are required between humans and autonomous AI, and how organizations can define SLAs and FinOps practices that keep pace with production agentic AI. Joining us to unpack all of this is Craig McKenna, Vice President - Storage Sales, IBM Technology, Asia Pacific.  1. What is the current state of AI adoption in APAC in 2026, and how has the shift to autonomous agentic AI changed the demands placed on enterprise storage infrastructure? 2. Beyond GPUs and accelerators, how is the rapid adoption of agentic AI workloads transforming enterprise storage requirements, and how have flash technologies evolved to support these workloads at scale? 3. How can flash storage integrate with content-aware storage capabilities to improve RAG pipeline efficiency as AI adoption drives explosive growth in unstructured data? 4. According to the IBM Institute for Business Value, 83% of executives view effective governance as essential yet only 8% have embedded risk frameworks. What governance guardrails and trust boundaries should exist between human oversight and autonomous agentic AI in intelligent flash storage systems? 5. How can embedded agentic AI in flash arrays help deliver measurable ROI as organizations scale AI workloads? 6. As organizations move agentic AI into production, what changes in SLAs will be needed to guarantee the performance, resilience, and compliance required by these workloads? 7. What FinOps policies and real-time dashboards are needed when autonomous AI in flash storage dynamically moves data between tiers and object storage during unpredictable AI workload spikes in hybrid environments? 8. In Asia’s regulatory environment, how can flash storage systems ensure that autonomous workload placement and data-mobility decisions remain fully auditable and compliant with privacy, security, and data-localisation requirements?

    29 min
  5. PodChats for FutureCIO: Sovereign AI by design: Not just where your data lives

    MAR 13

    PodChats for FutureCIO: Sovereign AI by design: Not just where your data lives

    In 2026, Sovereign AI is shifting from a compliance burden to a strategic weapon for CIOs in Southeast Asia and Hong Kong. As regional AI regulations mature and data residency rules tighten, CIOs are under pressure to prove not only where AI runs, but who controls it, how it is governed and how decisions can be audited end‑to‑end.  Sovereign AI is no longer about ticking data residency boxes—it's about architecting control into every layer of the AI stack. For CIOs and CTOs, 2026 demands "sovereign-by-design" systems where data, models and decisions stay jurisdictionally compliant without sacrificing performance or innovation speed.  In this PodChats for FutureCIO, Chris Wolf, global head of AI for VMware reveals how policy-as-code, runtime guardrails and hybrid control planes turn regulatory constraints into competitive moats—enabling faster approvals, auditable pipelines and resilient architectures that regulators trust and boards back. Join us to discover the technical playbook to make sovereignty your enterprise AI advantage. (source) Chris, welcome to PodChats for FutureCIO. 1.       How do we define AI sovereignty for our organisation in Southeast Asia and Hong Kong, given diverging national laws, sector regulations and cross‑border data flows? 2.       What governance model will give the board, regulators and customers confidence that AI decisions are transparent, explainable and auditable across their full lifecycle? 3.       How can we design “sovereign‑by‑design” architectures that guarantee jurisdictional control over data, models and logs, rather than relying only on static data residency? 4.       Where should we draw the line between sovereign, private and public AI workloads so we can balance regulatory risk, cost, performance and innovation speed? 5.       What metrics and evidence will we use to prove to regulators and partners that our AI systems meet local AI laws, sectoral guidelines and emerging regional best practices by 2026? 6.       How do we enforce policy‑as‑code for AI sovereignty (by country, customer segment and use case) across Kubernetes clusters, virtual machines and edge nodes without creating operational drag? 7.       How do we implement runtime guardrails—such as policy‑aware APIs, output filters and human‑in‑the‑loop checkpoints—that adapt to different jurisdictional rules without having to rebuild apps per market? 8.       How do we technically separate and evidence “control‑plane in‑country, data‑plane hybrid” architectures, so that regulators accept our claim of operational control even when we consume external AI services? 9.       What strategies can we use to localise foundation models (e.g. domain‑specific adapters, parameter‑efficient fine‑tuning, prompt governance) so that sovereign variants comply with each regulator but still share a common core? 10.   What mechanisms do we need to rapidly decommission, roll back or re‑route AI workloads when a jurisdiction updates its AI laws, without causing downtime for critical services such as payments, trading or clinical systems? 11.   Final advice for CIOs on the topic of Sovereign AI by design.

    19 min
  6. PodChats for FutureCFO: Funding AI and digital initiatives without breaking the bank

    MAR 12

    PodChats for FutureCFO: Funding AI and digital initiatives without breaking the bank

    For 2026, Gartner says CFOs must balance intense cost pressures with strategic growth and AI adoption, focusing on five key actions: improving cost discipline while funding growth, using AI to deliver enterprise-wide savings, identifying high-value AI use cases, developing finance talent with new digital skills, and driving transformation despite constrained budgets. Every CFO wants to back bold AI and automation plans. However, economic volatility brings the question of where to fund AI projects when IT budgets are already stretched? Rimini Street suggests that the AI budget is trapped inside ERP.  In PodChats for FutureCFO, Rimini Street CFO Michael Perica shares how finance leaders are rethinking maintenance and upgrading spending to unlock cash for AI and digital innovation.  If you’re under pressure to fund transformation without breaking the budget, this conversation is packed with practical ideas you can take straight to your next board meeting. 1.       What does Rimini Street mean by “trapped inside ERP”? 2.       How are CFOs identifying and measuring the “trapped” ERP cash within IT budgets, and what metrics best reveal opportunities to redirect spend toward AI and automation? 3.       Based on your experience, what portion of ERP and maintenance costs can realistically be freed within 12–24 months to fund GenAI or digital initiatives? 4.       How do finance leaders weigh the risk–return trade‑offs between extending legacy ERP systems and investing in new AI‑driven capabilities? 5.       What critical questions should CFOs be asking their CIOs and ERP vendors before approving major upgrade or migration proposals? 6.       How can finance teams build a structured ROI framework that links ERP lifecycle decisions directly to shareholder value and capital allocation discipline? 7.       What are some standout examples of APAC organisations that have successfully redirected ERP savings to accelerate AI and data‑driven transformation? 8.       As AI investment decisions converge with cybersecurity, compliance, and operational resilience, how must CFOs redefine their technology investment models beyond 2026? 9.       Any advise Funding AI and digital initiatives without breaking the bank 10.   how finance leaders are rethinking maintenance and upgrading spending to unlock cash for AI and digital innovation.

    19 min
  7. PodChats for FutureCFO: How CFOs can finance cyber resilience for data-driven growth

    MAR 12

    PodChats for FutureCFO: How CFOs can finance cyber resilience for data-driven growth

    In 2026, APAC CFOs face a stark reality: AI and cloud expansions are fueling explosive data-driven growth, yet 76% of regional organisations suffered material cyberattacks in the past year. These incidents trigger 90% revenue hits, 89% ransom payments (40% exceeding US$1M), 73% earnings guidance adjustments for public firms, and 74% of private firms diverting growth budgets to recovery. Slow restores (97% >24 hours) and “data icebergs” expose hidden vulnerabilities. Cyber resilience is now a core financial imperative. By reallocating budgets toward AI-powered detection, validated recovery, and response capabilities—at least one-third of cyber spend per Cohesity predictions—CFOs protect revenue streams, ensure PDPA compliance, safeguard market confidence, and unlock safe innovation. Financing resilience isn’t a cost; it’s the enabler of sustainable 2026 ambitions. In this PodChats for FutureCFO, Eric Brown, CFO and COO at Cohesity shares his views on How CFOs can finance cyber resilience for data-driven growth. 1.       With APAC enterprises accelerating AI and cloud investments for 2026 growth, what emerging data vulnerabilities are CFOs most underestimating, and how are these “data icebergs” creating hidden financial risks? 2.       Cohesity’s recent APAC research shows 76% of organisations faced material cyberattacks with 90% reporting revenue impact—what specific financial consequences (downtime, ransom, churn, regulatory fines) are CFOs now modelling in their 2026 forecasts? 3.       What shifting Board expectations are forcing CFOs to treat cyber resilience as a balance-sheet issue rather than an IT line item? Any one recommendation for responding to this? 4.       From your observations, how are finance leaders beginning to co-own cyber strategies with CISOs, and what governance frameworks are proving most effective? Is this repeatable in APAC? 5.       With 78% of global organisations (per PwC) planning cyber budget increases in 2026 and Cohesity predicting at least one-third reallocation to response/recovery, how should APAC CFOs prioritise and phase these investments without derailing growth initiatives? 6.       What practical checklist can APAC CFOs use in Q1 2026 to audit data risks across hybrid/cloud environments, including ransomware readiness and PDPA compliance? 7.       How can CFOs quantify and measure the ROI of cyber resilience investments—particularly AI-driven backups and immutable recovery—so they can justify them to boards amid tight capital allocation? 8.       Given APAC’s position as the region with the highest volume of cyberattacks globally, what unique regional factors (data sovereignty, sovereign cloud trends, regulatory fragmentation) should Singapore-based CFOs factor into their 2026 resilience strategies? 9.       Looking at organisations that recovered fastest post-attack, what common decision-making traits distinguish “risk-ready” finance leaders from those still exposed? 10.   For APAC CFOs balancing aggressive 2026 revenue growth targets with escalating cyber threats, any advice on making cyber resilience a competitive advantage rather than a drag on innovation?

    26 min
  8. PodChats for FutureCISO: Use behavioural AI to shields against multi-cloud vulnerabilities

    FEB 16

    PodChats for FutureCISO: Use behavioural AI to shields against multi-cloud vulnerabilities

    For year now, Asia's cyber threat landscape has been marked by escalating nation-state attacks and rampant cloud breaches. In 2026, it stands to be transformed by integrating agentic AI for proactive threat detection.  This autonomous technology could pre-empt lateral movements, reduce alert fatigue, and enable real-time breach containment, bolstering defences for organisations amid high cloud saturation and sophisticated adversarial tactics. In this PodChats for FutureCISO, we are joined by Andrew Kay, Director of Systems Engineering APJ at Illumio, to share with us his views on how CISOs in Asia can use behavioural AI to shields against multi-cloud vulnerabilities. 1.       How are Asian organisations employing machine learning algorithms, such as graph neural networks, within AI frameworks to manage hybrid cloud complexities and mitigate nation-state-sponsored APTs? 2.       What specific vulnerabilities in multi-cloud environments, exacerbated by Asia's high cloud saturation, enable east-west lateral movement, and how can agentic AI utilise behavioural analytics to pre-empt such exploits? 3.       How do AI-driven security graphs, leveraging real-time entity resolution and anomaly detection via unsupervised learning, offer a dynamic topology of workloads, users, and communications to identify subtle deviations indicative of threats? 4.       Amid Asia's exposure to APTs, how can agentic AI leverage multi-agent systems for real-time threat correlation, accelerating decision trees and automating containment protocols like micro-segmentation? 5.       What capabilities might agentic AI provide in tailoring threat intelligence feeds and remediation workflows to specific roles, such as integrating with SOAR platforms for threat hunters or generating compliance-aligned reports for analysts? 6.       What technical risks arise from agentic AI deployment, including prompt injection vulnerabilities or model drift leading to erroneous autonomous decisions, and what mitigation strategies, such as human-in-the-loop safeguards, are suitable for Asian regulatory environments? 7.       Under which conditions could agentic AI interoperate with existing EDR (Endpoint Detection and Response) and XDR (Extended Detection and Response) tools to orchestrate automated responses, such as dynamic access controls, in expansive cloud infrastructures?

    18 min

About

CXOCIETY (read "society") is the platform for senior business, technology, finance and operations executives to discuss, share and discover the latest in technology, process and people innovation."CXOInsights" by CXOCIETY is the repository of shared insights and experiences by the best, brightest and most experienced professionals globally. Subscribe to "CXOInsights" by CXOCIETY to keep abreast in the latest in all things innovation.