Technology

Most cybersecurity risk programs overlook finance departments: Qualys study reveals business alignment gap
Cybersecurity company Qualys released the "2025 State of Cyber Risk" research report, indicating that most organizations still treat cybersecurity as a purely IT issue, with low finance department involvement (22%) and insufficient alignment of risk programs with business objectives (30%). The research emphasizes that only 14% of organizations link integrated risk scenarios to financial metrics, making it difficult for security investments to effectively reduce risk.

How Edge AI Is Reshaping the Future of the Financial Industry
Edge AI, by pushing intelligent processing down to the data source, is bringing new possibilities for real-time fraud detection, personalized interactions, and operational optimization to the financial industry. Gartner predicts that by 2025, 75% of enterprise data will be generated and processed outside core data centers or the cloud. This article analyzes how edge AI empowers financial institutions to enhance customer experience, strengthen data security, and optimize internal processes, and introduces infrastructure solutions such as the Dell AI Factory that support this transformation.

Instant Pay Raises Ethical Dilemma: Yooz CFO's Trade-offs and Choices
John Gronen, CFO of Yooz, an accounts payable software company headquartered in Dallas, Texas, is facing an ethical dilemma: whether to offer earned wage access (EWA) services as requested by employees. While he acknowledges that EWA can help employees avoid credit card debt, he fears that instant spending could leave them unable to pay rent at the end of the month. A recent company survey of about 1,000 employees found that only 32% prefer instant payment, while 58% still favor a fixed payday. Gronen currently leans against launching the service but is working with HR to assess implementation costs and employees' real needs. In a previous role, he opposed offering BNPL services to sports betting companies, arguing that gambling should be paid in cash. If ultimately implemented, he advocates that the company bear the cost rather than charging employees, to boost satisfaction and reduce turnover.

Only 8% of Enterprises Are in the 'Transformation' Stage of AI Deployment; Protiviti Research Reveals Link Between Maturity and Returns
Research released by Protiviti on Tuesday shows that only 8% of enterprises are in the 'transformation' stage of AI-driven business transformation, while 32% remain in the experimentation phase. Data availability, regulatory conflicts, and strategic focus deviations are the main obstacles. The research also found a clear correlation between AI maturity and investment returns, with mature enterprises more likely to achieve significant value.

Zuora Report: CFOs Should Lead the End-to-End Order-to-Cash Process
A Zuora survey found that 68% of finance leaders cannot optimize the order-to-cash process due to technology gaps. Company CFO Todd McElhatton points out that CFOs need to be deeply involved in technology decisions and lead this process, with 89% of finance leaders expected to take on strategic advisory roles, but 70% believe their current technology stack hinders this goal.

EU Releases Final Version of General-Purpose AI Code of Practice to Help Companies Comply with AI Act
The European Commission published the final version of the General-Purpose AI Code of Practice on Thursday, providing compliance guidance for companies under the AI Act framework. The code was developed with the participation of 13 independent experts and over a thousand stakeholders, addressing core issues such as transparency, copyright, and safety. As the application date for general-purpose AI rules on August 2, 2025, approaches, companies can voluntarily sign the code to reduce administrative burdens, though some industry groups still call for clearer guidance.

Mobile phishing scams surge, yet enterprises overconfident
A report released Thursday by mobile security company Lookout indicates that mobile phishing scams are increasingly severe, yet enterprises are not paying enough attention to this threat. The survey shows that nearly 60% of enterprises have experienced incidents involving executive impersonation via SMS or voice, and 77% have encountered at least one such attack in the past six months, but only half of respondents expressed high concern.

Colorado AI Act Sets High Compliance Bar, Analysts Say It Carries a 'Heavy Burden'
The U.S. Congress recently failed to pass a proposal to freeze state-level AI laws, leaving businesses operating across states facing fragmented regulation. A comprehensive AI act in Colorado will take effect on February 1, 2026, requiring businesses to establish risk management systems covering impact assessments, oversight processes, and mitigation strategies. Analysts note that the act is unique nationwide, similar to the EU AI Act, but carries a heavy compliance burden, and businesses need to plan early.

Beyond Traditional ROI: A Smarter Way to Measure AI Value
Traditional ROI struggles to accurately measure the complex value of AI investments. This article recommends adopting intelligent adaptive tools such as digital twins, downstream impact analysis, and rights analysis to convert intangible benefits into quantifiable, predictable financial metrics, helping CFOs make more informed decisions.

Six Key Takeaways from the Senate Hearing on Cryptocurrency Market Structure
The U.S. Senate Banking Committee recently held a hearing to discuss how to build a regulatory framework for the market structure of crypto assets. Blockchain Association CEO Summer Mersinger, former CFTC Chairman Timothy Massad, and others testified, engaging in debates over regulatory lag, asset classification, illegal activities, and conflicts of interest between politics and business. This article distills six key points.