Attack surface management

Attack surface management: you can’t protect what you can’t see By Marios Kyriacou  Wikipedia defines the attack surface of a software environment as “the sum of the different points where an unauthorised user can try to enter data, extract data, control a device or critical software in an environment.” It goes on to say. “Keeping the attack surface as small as possible is a basic security measure.” This is not easy. The attack surface in any corporate IT environment can be huge, and the rapid rise of remote working brought on by COVID-19 massively increased the attack surface of many organisations. Any CISO trying to rein in the ever-expanding attack surface of their IT environment is likely to be facing a losing battle. They will devote significant resources to making penetration as difficult as possible, stress testing their systems and identifying potential threats. Those activities are essential, of course, but a comprehensive understanding of that attack surface would enable other security initiatives to be deployed more efficiently and make them more effective. A decade ago, I ran a specialist penetration testing business called The Security Bureau. What soon became clear was that our customers could not tell us what should be tested: they were unsure which of their assets were exposed to the Internet. Since then the challenge of identifying the Internet-facing attack surface, let alone the entire attack surface—which is much larger—has increased enormously for almost every organisation. It’s an adage that you cannot protect what you cannot see. Being able to identify every external facing asset is an essential first step in protecting them. There was a need back then, and therefore a business opportunity. So, in 2018 I launched Informer and the Informer External Attack Surface Management (ASM) Service, which combined asset discovery with penetration testing of those external facing assets. The service continually scanned and mapped an organisation’s digital footprint—including web domains, subdomains, IPs, and cloud services—and tracked changes over time, providing valuable intelligence for enhanced human-driven offensive testing (eg, penetration and crowdsourced testing). And we’ve been evolving Informer ASM ever since. Earlier this year the company was acquired by Bugcrowd, the leading provider of crowdsourced security. There are strong synergies between the two companies, and we are exploiting these to help organisations meet the ever-growing challenges of ASM. When I launched Informer, ASM was in its infancy. Back in 2021, according to Straits Research, the ASM market was worth about $0.5bn. At that time less than 10% of organisations had formal ASM programmes in place. It’s estimated that 60% will have them by 2026. And the ASM market has grown to $1.4bn in 2024. Straits Research forecasts a 27.7% CAGR to 2032, taking the value of the market to $9.1bn. It is not difficult to see why the ASM market is experiencing such growth. It reflects the growth, not only in size but in complexity, of attack surfaces in corporate IT. I mentioned that COVID-19 induced remote working. Another factor increasing the number of entry points even faster than Covid-era remote workers is IoT. According to one report, there will be 18.8bn connected devices by the end of 2024 and 41bn by 2030. The disconnect between operational technology and information technology in many organisations has long made securing these a challenge. The growth of remote work and connected devices has massively increased the number of entry points. Other developments present much more sophisticated challenges for ASM. The use of AI by both corporate IT and cybercriminals is possibly the most significant and challenging development. It creates new attack surfaces whose vulnerabilities can be difficult to assess and that can be difficult to protect. And of course, AI is being exploited by cybercriminals to accelerate their efforts and craft more complex attacks. Every year for the past several years Bugcrowd has surveyed the ethical hacker community to gather its views on a variety of IT security issues and challenges. Bugcrowd publishes its findings in its annual Inside the Mind of a Hackerreport. Not surprisingly AI features prominently in the 2024 edition, as both a security tool and a security threat. Seventy-seven per cent of those surveyed are already leveraging AI in their hacking activities, and 82% believe the AI threat landscape is evolving too fast to adequately secure. While security vendors are racing to provide security solutions that secure the AI attack surface, ethical hackers responding to Bugcrowd’s survey were split almost 50/50 on whether existing security solutions meet the needs and risks of AI. Meanwhile, 50% say AI has already had a positive impact on their hacking activities and 77% are already leveraging AI in their work. Almost half of the hackers surveyed believe AI will never beat them in value or effectiveness, because AI is still only as good as the human creativity that drives it. Humans are truly creative, and good hackers bring a level of creativity that AI lacks. They think outside of the box, which gives them an advantage over machine learning models and predictive AI. However, AI can be an enormous help. A task that could have taken hours can take just a few minutes. As one respondent said: “AI is great for helping to understand error conditions in binary protocols that I’m not as familiar with.” AI could also help organisations to get a clearer picture of the ever-expanding attack surface and potential weaknesses in their defences. Expect significant developments as ASM tools leverage AI to address the new challenges that AI will create. We intend to leverage AI to shrink the effective attack surface faster than the bad guys can exploit AI to open it up. Get in touch For event sponsorship enquiries, please get in touch at olliver.toke@31media.co.uk or calum.budge@31media.co.ukFor media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk  

4 key AI Predictions for 2025

  As the insurance industry navigates a rapidly evolving landscape, Fadata looks ahead to 2025 and highlights the key developments and trends in insurance and digital transformation. Entries are now open for the 2025 AI Awards. Check out all the award categories here. Based on the close collaborations between Fadata and its clients, the major trends that Fadata predicts will shape the future of insurance are Internalization, Prevention, Cloud Migration, Embedded Insurance, Ecosystem Development and Talent Transformation. These six trends are driving transformative changes across the sector, with insurers adopting innovative approaches to address customer needs, operational efficiency, security, risk, and market demands: Bring it in: Internalisation of processes In 2025, insurers are increasingly expected to internalise key operations. Insurers are looking to streamline operations, reduce costs, and boost data security, all of which can be achieved by the enhanced control of processes that internalisation affords. Insurers can also achieve greater agility in responding to regulatory changes, market shifts, and customer demands by taking control. Shifting to SaaS models, insurers are also able to work directly with out-of-the-box software providers that can support them through implementation and beyond. Already, Fadata is supporting this shift, working with customers to build efficient internal Centres of Excellence for critical business processes, providing training and assisting with setup to enable them to insource their business’s critical knowledge and become self-sufficient. This trend reflects a growing emphasis on efficiency and customization to support customer-centric insurance.   Prevention First: Prevention-Driven Insurance Models Proactive risk prevention is becoming a cornerstone of the insurance industry. By aligning incentives focusing on customer safety and financial well-being, prevention-driven insurance models can reduce claim frequency and create opportunities for insurers to engage with policyholders in more meaningful ways. By emphasizing prevention in 2025, insurers will not only lower costs, but will improve customer satisfaction, fostering loyalty by supporting them in maintaining their health, safety, and assets. The frequent environmental catastrophes are an example where the insurer can proactively play a role to avoid being impacted severely. Fadata expects more insurers to adopt technology that enables them to leverage the data required to deliver prevention-driven insurance. Accessing data is of course key; from IoT devices in health, life and building insurance, aerial imaging in building and disaster insurance, and telematic tracking devices for auto insurance, to AI, ML and blockchain for fraud detection, risk assessment and predictive tools. Insurers can access a wealth of data that will help customers avoid claims through early alerts and preventive support, which also enables lower premiums for customers. Time for migration: To the Cloud Cloud-based solutions are making digital transformation more cost-effective and serve as the most effective host to make the best use of digital tools, supporting more seamless integration of third-party technologies. Flexibility & scalability: Increasingly, the flexibility and scalability in the Cloud are appealing to agile insurance companies that recognise the need to adapt quickly to market changes and the value in responsiveness for modern insurance, which is set to continue in 2025. As insurers consider the cost of digital transformation, Cloud solutions become increasingly attractive as they reduce infrastructure costs. They can also reduce hardware investment through more efficient scaling up and down, for example in the event of natural disasters when scaling up quickly to handle large amounts of claims is essential. Security: Cloud solutions also offer a level of security that can otherwise be costly to achieve and maintain for insurers. They offer robust, heavily invested security measures, already in place, and regular security updates applied with ease and speed as threats change. In 2025, with the rising threat of cyber-criminal activity, more insurers will be looking to foster a culture of security awareness, and the Cloud will be a top consideration.   Distribution shift: Embedded Insurance Embedded insurance is increasing in relevance. Customers are seeking more value during their purchasing journeys, businesses are looking to satisfy these customers and generate new revenue streams, and insurers want to reach untapped customer segments – this leads to a need for embedded insurance. Making insurance more integrated, accessible, and customer-centric, this significant shift in insurance distribution is becoming a major catalyst for transforming the insurance landscape. Thanks to APIs and core platforms, the integration of insurance into digital platforms is made easy. While more readily available real-time data with advanced processing is enabling businesses to offer their hyper-personalised insurance offers. Already typical with travel, product and e-commerce, broader adoption of embedded insurance is expected in 2025. With sectors such as real estate and healthcare, expected to. offer contextually relevant insurance coverage seamlessly integrated into the transactions or usage experience of their goods and services. The rise of digital platforms: Ecosystems The main drivers for leveraging digital ecosystem models in 2025 are improving customer engagement and broadening market reach. Customer experience has become critical to insurance business success and the ecosystem model enables the means to add value, deliver a slicker user experience, and create more personalised products and communications. Through strategic partnerships, platform ecosystems are fostering innovation, bridging the gap between technology experts and InsurTechs to make adoption easier to apply and manage, with integrations made seamlessly and terms often pre-approved for simplicity. This collaborative approach allows insurers to diversify and stay relevant in an increasingly competitive market. How insurers and developers embrace the ecosystem movement, the benefits for insurers, their customers and the industry, and what to consider when selecting an ecosystem, are the most prominent considerations. Fishing the talent pool: Developer transformation As the industry embraces Artificial Intelligence, data analytics, and automation, there is a rising need for talent skilled in data science, cyber risk, and technology integration. Notoriously glamourless, insurance to date has been a tech-driven industry with less appeal for developers than other industries. However, the demands of digital transformation, including AI, data analytics, and automation, are attracting fresh developer talent. Gen-z in particular wants to work with cutting-edge tools, platforms and technologies; legacy systems and outdated programming languages do not factor in their career path. Now,

How 5G and AI are revolutionising industries for the next billion users

As the insurance industry navigates a rapidly evolving landscape, Fadata looks ahead to 2025 and highlights the key developments and trends in insurance and digital transformation. Entries are now open for the 2025 AI Awards. Check out all the award categories here. Welcome to the Future: How 5G and AI Are Revolutionising Industries for the Next Billion Users Written by: Prianca Ravichander, CMO and Head of Global B2B2X Monetisation at Tecnotree Imagine a world where your devices predict your needs before realising them. Your morning coffee order is placed automatically as you approach your favourite café, and the car that picks you up seamlessly reroutes around traffic, saving you precious time. A world where factories run autonomously, cities respond dynamically to your movements, and businesses connect with you in ways so personal it feels like magic. This isn’t the distant future. It’s happening now, powered by the game-changing duo of 5G and AI. These technologies are reshaping industries, breaking barriers, and unlocking new realms of possibility. For Chief AI Officers, CTOs, and CEOs, this moment isn’t just about keeping up—it’s about leading in a world where speed meets intelligence. The Era of Instant, Intelligent Action Thanks to 5G’s ultra-low latency, massive bandwidth, and always-on connectivity, AI is no longer limited by lag or infrastructure constraints. Instead, we’re witnessing the dawn of real-time intelligence: Autonomous vehicles react to split-second changes in their environment with near-zero delays. Retail platforms deliver personalised offers while customers browse, adjusting dynamically based on their interests. Smart factories predict machine failures before they occur, reducing downtime and maximising efficiency. Every action is informed, instantaneous, and intelligent. This is the new normal, moving at the speed of thought. Welcome to the Age of Predictive Experiences  At the heart of this transformation lies experience management, powered by embedded AI and enabled by 5G. Businesses now have the tools to create not just responses but proactive engagements. For example: A telecom provider that knows when you’re likely to run out of data and offers you the perfect plan upgrade right when needed. An entertainment platform that adjusts your recommendations based on your time of day, mood, or recent preferences. A healthcare system that predicts and prevents illnesses before symptoms even appear, using AI insights from real-time biometric data. This isn’t about serving customers—it’s about knowing them, anticipating them, and delighting them. The Next Billion: A Tidal Wave of Opportunity  With 5G rolling out globally, the next billion users are coming online—many for the first time. These users bring diverse needs and untapped potential, offering businesses unparalleled opportunities. Here’s how 5G and AI are making it possible: Hyper-Localised Experiences: AI learns regional languages, cultural nuances, and even hyperlocal buying habits, ensuring every interaction feels personal. Scalable Inclusion: From micro-financing for rural entrepreneurs to e-learning platforms tailored to underserved communities, businesses can expand inclusively, driven by AI insights. Efficient Infrastructure: 5G optimises connectivity in remote areas, making previously unreachable markets accessible for the first time. For leaders, the question is simple: Are you ready to meet the next billion where they are—and take them where they want to go? Breaking Barriers, Creating Ecosystems The pairing of 5G and AI doesn’t just enable better processes—it fosters entirely new ecosystems. Consider these groundbreaking applications: Smart Cities: AI and 5G optimise traffic flow, reduce energy consumption, and ensure public safety by connecting every sensor, signal, and system. Media & Entertainment: Real-time streaming with adaptive storytelling that evolves as viewers interact, creating truly immersive experiences. Manufacturing: Fully autonomous production lines that learn, adapt, and improve without human intervention. These ecosystems don’t just respond to demand; they anticipate and create it, unlocking exponential growth and innovation. Redefining Competitive Advantage In this world, thriving businesses embed AI and 5G into their core DNA. This isn’t about bolting on new technologies; it’s about building systems that learn, adapt, and act autonomously. Next Best Offer (NBO) and Next Best Action (NBA) as a Service orchestrated through APIs are no longer just tools but the foundation of future-ready enterprises. With access to these APIs from Tecnotree Moments for AI-driven experience management, organisations can: Create seamless, end-to-end customer journeys. Deliver hyper-personalised interactions in seconds. Redefine engagement by predicting—not reacting to—needs. What will set industry leaders apart is their ability to pivot in real-time and offer value before it’s asked for. Leading Ethically and Sustainably While the possibilities are thrilling, leaders must navigate this new frontier responsibly: Transparency: Build AI systems that are explainable and fair, ensuring trust in every interaction. Sustainability: Leverage efficient algorithms and green infrastructure to reduce the energy footprint of 5G and AI. Human-Centric AI: Empower human oversight, ensuring thoughtful and empathetic decision-making. Innovation without responsibility risks eroding trust—an outcome no leader can afford. The Time to Act Is Now 5G and AI are not distant opportunities—they are today’s reality. The leaders who stand out in this era will embrace proactive intelligence, radical personalisation, and inclusive ecosystems. Imagine a future where every customer touchpoint becomes a moment of delight, every operational process becomes seamless, and every market becomes accessible. That future isn’t just possible—it’s here. Will you shape it, or will you be shaped by it? Get in touch For event sponsorship enquiries, please get in touch at olliver.toke@31media.co.uk or calum.budge@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk

The partnership that will prevent vape sales to minors

The partnership that will prevent vape sales to minors

Johnston Retail Services has partnered with Privately SA to bring the AgeAI app to Ireland, helping to prevent vape sales to minors and avoid the risk of costly fines 20 November 2024 – Stores across Ireland can now benefit from a pioneering AI solution that can estimate someone’s age with almost 100% accuracy, thanks to a new partnership between Dublin’s Johnston Retail Services and SafetyTech company Privately SA. Privately’s AgeAI app provides automated and highly accurate facial age estimation, removing the guesswork from age checks and mitigating the risk of fines for selling vapes to children. It is 100% anonymous, with no images transmitted or stored, GDPR certified, and helps protect staff by reducing the need for unnecessary ID checks for adults who are a source of major conflict. A 2023 study revealed that more than one-third of young people aged 13 to 16 in Ireland currently vape, and almost one-quarter of 10 to 12-year-olds said they had tried vaping. “Underage vaping is a problem in Ireland, and there’s a pressing requirement to prevent sales to minors,” said Deepak Tewari, CEO, of Privately SA. “But store owners and managers need help, and our partnership with Johnston Retail Services delivers that, with an automated, accurate and speedy solution that allows staff to avoid the confrontation that comes from requests for ID and turning people away.” Johnston Retail Services works with most nationwide Irish retailers, including Applegreen, Centra, SuperValu, An Post, and Dunnes Stores. It helps retailers transform by providing innovative solutions that grow revenue, enhance customer experiences, and fortify the foundations of retail success. The deal with Privately SA will see Johnston Retail Services bring AgeAI to stores in Ireland. It requires minimal setup, and it’s no burden to customers. People look at a screen that instantly notifies whether they appear above a certain age. If there’s a positive indication, checkout continues. If it is not, an ID request can be made. AgeAI is already in use with hundreds of independent vape stores in the UK due to Privately SA’s partnership with the retail trade association Our Vape Advocacy. Bringing AgeAI to Ireland is a breakthrough in helping to combat underage vape sales, and an essential use of innovative technology, according to Brian Hurley, Commercial Director at Johnston Retail Services: “Ensuring your operation has a technology focus is now more important than ever. Those who adopt and embrace the technological solutions available tend to reap more success with much less effort than one may think.” “Enforcement of age-restricted selling is no doubt going to become more and more prevalent. AgeAI is extremely simple, affordable and an indispensable tool that we are excited to be able to offer our customers to help with this legal selling requirement.” Privately is a SafetyTech startup whose child safety apps have protected more than 100,000 children in the UK and worldwide. During the past year, Privately has carried out almost one million age check transactions in retail environments. Get in touch For event sponsorship enquiries, please get in touch at olliver.toke@31media.co.uk or calum.budge@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk  

Winners Announced for the North American Software Testing Awards 2024

Toronto, Canada – The winners of the North American Software Testing Awards 2024 have been officially announced, marking an inspiring evening dedicated to recognising excellence in the software testing and quality engineering industry. Organised by 31 Media, the awards ceremony took place on November 27, 2024, in Toronto, Canada, and gathered industry leaders and professionals to celebrate the outstanding achievements of companies, teams, and individuals across North America. The program, encompassing 16 categories, provided a platform for businesses of all sizes and sectors to showcase their innovation, technical skills, and commitment to quality. Participants embarked on a journey that culminated in an unforgettable awards evening, where achievements were recognised, and connections within the software testing community were strengthened.   We extend our sincere gratitude to our 2024 sponsors – QA Mentor, IBM, Infoya, and Perforce – whose support was integral to the success of this event. Their contributions and shared commitment to advancing quality in software testing made this celebration of excellence possible. Additionally, we would like to thank our dedicated panel of judges for their commitment, expertise, and integrity in evaluating entries, ensuring a fair and robust selection process. Their role was pivotal in celebrating this year’s exceptional talent. Access the full list of 2024 winners here: NASTA 2024 winners Participate in the Asia Pacific Software Testing Awards 2025 With the European awards concluded, we now look forward to the upcoming Asia Pacific Software Testing Awards. This independent program celebrates remarkable achievements across the Asia Pacific region and the UAE, featuring 15 categories to recognise the best in digital technology and software testing. Judged with impartiality and transparency, the Asia Pacific Awards provide an equitable platform that celebrates true excellence. Finalists and winners alike gain increased visibility and access to invaluable networking opportunities within the global testing community. Showcase your expertise and enhance your brand’s visibility, we encourage you to participate in the Asia Pacific Software Testing Awards. Entries are open now – submit yours to join a legacy of excellence and success! Enter here About 31 Media 31 Media is a prominent tech industry event organiser.  We strive to continuously push the boundaries and explore innovative ways to improve our offerings including our renowned award ceremonies, conferences, and workshops.  These market-leading platforms serve the software testing, DevOps, and digital transformation communities and provide professionals with unparalleled opportunities to enhance their skills, exchange insights, and stay at the forefront of industry advancements. Get in touch For event sponsorship enquiries, please get in touch with oliver.toke@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk

Adapting Security Strategies for the Gen AI Era

Security strategy in Gen AI

Generative AI is Evolving—Is Your Security Strategy Keeping Pace? Generative AI has quickly become a pivotal element in digital transformation across industries, driving automation, enhancing customer interactions, and accelerating software development. But with these advancements come new and complex security challenges. Companies are rushing to adopt generative AI to stay competitive, yet many haven’t adapted their cybersecurity practices to handle the emerging threats. When companies designed their cybersecurity policies and controls, few, if any, had generative AI on their bingo card. As a result, we’re seeing organisations unprepared for the unique vulnerabilities this technology introduces. The intersection of generative AI and cybersecurity There’s a critical intersection between AI and cybersecurity that we can’t ignore. On the positive side, generative AI offers significant opportunities to strengthen defences. For instance, it can automate threat detection, streamline code scanning, and quickly pinpoint vulnerabilities. AI tools are helping blue teams—the defensive security teams—by recognising patterns and detecting anomalies far faster than we could with traditional methods. This ultimately helps organisations respond more quickly to incidents and limit damage from potential breaches. However, there’s a flip side. Just as we are using AI to enhance security, threat actors are leveraging it to improve their attacks. For example, we’ve seen how traditional cyberattacks like phishing are becoming more sophisticated, thanks to generative AI. Attackers can now automate the creation of highly convincing fake emails and messages, which makes it easier to trick users into revealing sensitive information.  Or more sophisticated attacks such as malware that used to require a detailed understanding of low-level software layers and years of study can now be generated from a prompt. What’s even more concerning is the potential for AI to create entirely new types of attacks, like prompt injection, which we have little experience handling. We’re essentially chasing a moving target that’s evolving at an almost unprecedented rate in the industry. Our cybersecurity strategies need to keep pace, but we’re lagging behind. Emerging threats in AI cybersecurity Some of the most dangerous AI-driven threats we’re seeing today are prompt injection and data poisoning. Prompt injection is particularly tricky because generative AI models process such a wide variety of inputs—anything from human language to code—which makes it harder to spot harmful instructions. A simple prompt can be manipulated to extract sensitive data, bypass security measures, or execute malicious commands without the user even realising it. Data poisoning is another serious issue. Attackers can feed corrupt data into AI models, altering their outputs in subtle but harmful ways. I’ve referenced the example from Microsoft’s AI, where bad actors introduced toxic inputs that caused the model to exhibit harmful behaviours. This clearly illustrates how easy it is for attackers to “poison the well” and manipulate AI systems to produce unintended, damaging outcomes. Data poisoning can also be difficult to detect, as images and videos can be subtly altered in ways that the human eye can’t detect. Red teams—offensive security teams—are already using generative AI to create more advanced attack simulations, while blue teams are struggling to keep up. This growing disparity between offensive and defensive AI applications is a big concern for me. If we don’t act fast, the gap will only widen, leaving many organisations vulnerable to AI-driven cyberattacks. Confidentiality and privacy concerns also persist. Even if there is no malicious intent to poison models, sensitive data—such as trade secrets, internal communications, or personally identifiable information (PII)—can still find its way into models. For example, companies may use AI to search and summarise documents from their internal SharePoint, not realising that offer letters with salary information are included. This data can unexpectedly appear in responses from an LLM. How can companies securely implement and manage generative AI while mitigating the unique cybersecurity risks it introduces? Strengthen your data governance. Data is the backbone of any AI model, so you need to know exactly where it’s coming from and ensure it’s clean, reliable, and secure before using it. If you’re unsure about your data’s integrity, provenance, or how it’s been handled, you’re opening the door to major risks. Start by auditing your data sources and setting up a governance framework to track data lineage. Build in regular data quality checks, and make sure you’re reviewing permissions—who has access to it and why? As I often say, “If you don’t understand your data’s integrity and origins, you’ll run into problems.” Begin by mapping your data flow: identify the sources, review how it’s collected, and validate its accuracy before feeding it into any AI models. Note that this doesn’t imply a long, slow manual effort. Quite the contrary. As mentioned above, many data issues are unrecognisable to the human eye. Large volumes of documents can’t be scanned manually, and even if they could, it’s hard for humans to detect subtle biases or data anomalies. Automation and machine learning are key to modern data governance. Train your team to recognise AI-specific threats. Cyberattacks are evolving, and AI is making phishing and social engineering attacks more convincing. It’s no longer enough to give employees a general cybersecurity overview—they need targeted training that includes AI-generated threats. Make sure your staff knows what AI-powered phishing attempts look like and how to respond. Offer hands-on training with real-world examples of AI-driven cyber-attacks and update these regularly as new threats emerge. It’s about getting your team to think critically and recognise patterns that might go unnoticed. Develop specific training sessions on AI-related cybersecurity threats, such as AI-generated phishing and prompt injection attacks. Incorporate simulated attacks as part of your phishing tests. Set clear guardrails for AI use. Without proper boundaries, generative AI can expose sensitive company data or even introduce security risks. You need to establish clear rules for how your teams are allowed to use AI. Draft an AI usage policy that defines where generative AI can be applied in your company. Be specific about data it can access, who can use it, and implement approval processes for higher-risk areas. At Credera, we’ve put strict policies in place to

Enhancing organisational sustainability with carbon management dashboards

With net zero and carbon reduction increasingly becoming a focal point for organisations, support through energy efficiency and sustainable transformation projects are crucial to the success of a carbon reduction plan. With net zero and carbon reduction increasingly becoming a focal point for organisations, support through energy efficiency and sustainable transformation projects are crucial to the success of a carbon reduction plan. However, driving down energy consumption and rolling out energy projects is the responsibility of more than one department in an organisation. Many people – from engineers to investors and from management to staff – need to be brought together to make success happen. One powerful energy and carbon management software tool that offers to unite an organisation in supporting its sustainability goals is the energy dashboard. By providing near real-time data and insights into energy consumption, monitoring and targeting (M&T), and carbon management, energy dashboards can significantly enhance organisational engagement in nine significant ways. Transparency and Accountability Energy dashboards offer a transparent view of an organisation’s energy usage. Giving employees at all levels visibility of the impact their actions have on energy consumption and carbon reduction fosters a culture of accountability. When everyone in the organisation has access to energy and carbon management data and M&T information, it encourages more responsible behaviour and a collective effort to reduce energy waste and contribute to carbon reduction efforts. Data-Driven Decision Making With detailed and near real-time data at their fingertips, decision-makers can make more informed choices about energy and carbon management. Energy dashboards provide insights into patterns and trends, helping organisations identify areas where energy is being wasted and where improvements can be made. This data-driven approach ensures that energy-saving initiatives are based on solid evidence rather than guesswork. Employee Engagement Energy management software dashboards can be a powerful tool for engaging employees in sustainability initiatives. When employees are actively involved and committed to energy-saving initiatives, they are more likely to adopt and promote sustainable practices. A collective effort not only helps an organisation achieve its sustainability goals but also improves operational efficiency and reduces costs, contributing to its long-term success Cost Savings One of the most tangible benefits of using energy dashboards is the potential for cost savings. By identifying inefficiencies and areas of high energy consumption, organisations can implement targeted measures to reduce their energy bills. These savings can then be reinvested into other areas of the business, further enhancing overall organisational performance. Regulatory Compliance Many organisations are subject to strict regulations regarding energy usage and environmental impact. Energy dashboards can help organisations stay compliant by providing the necessary M&T and carbon data to meet reporting requirements. This not only helps avoid potential fines and penalties but also demonstrates a commitment to sustainability to stakeholders and customers. Enhanced Communication Energy dashboards can serve as a central communication tool for sustainability efforts. By sharing energy usage data and progress towards energy-saving goals, organisations can keep employees informed and engaged. Regular updates and visualisations of energy data can be included in company newsletters, meetings, and intranet sites, ensuring that everyone is aware of the organisation’s sustainability initiatives. Benchmarking and Goal Setting Energy dashboards allow organisations to benchmark their energy performance against industry standards or internal targets. This benchmarking process helps set realistic and achievable energy-saving goals. By tracking progress towards these goals, organisations can celebrate successes and identify areas for further improvement. Customer and Stakeholder Engagement In an era where consumers and stakeholders are increasingly concerned about sustainability, energy and carbon management software dashboards can be valuable in demonstrating an organisation’s commitment to environmental responsibility. Sharing energy performance data with customers and stakeholders can enhance the organisation’s reputation and build trust. Supplier Management Energy dashboards also play a pivotal role in enhancing supplier management and bill accuracy. By providing detailed and near real-time data on energy consumption, these dashboards enable organisations to hold suppliers accountable for their energy use and ensure that billing is precise. Discrepancies in energy usage and billing can quickly be identified and addressed, reducing the risk of overcharges and improving financial accuracy. Energy dashboards are more than just a tool for monitoring energy consumption; they are a catalyst for organisational engagement and cultural change. By providing transparency, enabling data-driven decision-making, and fostering a sense of shared responsibility, energy dashboards can help organisations achieve their sustainability goals while also enhancing overall performance. Embracing this technology with an energy and carbon management software solution is a step towards a more sustainable and engaged future. Get in touch For event sponsorship enquiries, please get in touch with calum.budge@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk  

Winners Announced for The European Software Testing Awards 2024

London, November 20, 2024 – The winners of the European Software Testing Awards 2024 have been officially announced, marking a remarkable evening of celebration for exceptional achievements in the software testing and quality engineering industry. Organised by 31 Media, a leader in industry events for over 17 years, this prestigious awards ceremony took place on November 19, 2024, in London, where companies, teams, and individuals came together to honour excellence and innovation. The awards program, featuring 16 diverse categories, provided opportunities for companies of every size and sector to showcase their accomplishments. Attendees enjoyed an evening of networking and recognition, celebrating both technical expertise and creative contributions to the field.   Our heartfelt thanks go out to our esteemed sponsors – QA Mentor, Qualitest, Sogeti by Capgemini, NTT Data, Perforce, and Capgemini – whose generous support made the event possible. Their commitment to advancing quality and excellence in software testing was instrumental to the event’s success. We also extend a sincere thank you to our panel of judges for their invaluable contributions in evaluating entries. Their dedication, expertise, and fair judgment helped ensure a robust and transparent selection process, making this year’s awards a true celebration of outstanding work within the industry. Access the full list of 2024 winners here: TESTA 2024 winners Participate in the Asia Pacific Software Testing Awards 2025 With the European awards concluded, we now look forward to the upcoming Asia Pacific Software Testing Awards. This independent program celebrates remarkable achievements across the Asia Pacific region and the UAE, featuring 15 categories to recognise the best in digital technology and software testing. Judged with impartiality and transparency, the Asia Pacific Awards provide an equitable platform that celebrates true excellence. Finalists and winners alike gain increased visibility and access to invaluable networking opportunities within the global testing community. Showcase your expertise and enhance your brand’s visibility, we encourage you to participate in the Asia Pacific Software Testing Awards. Entries are open now – submit yours to join a legacy of excellence and success! Enter here About 31 Media 31 Media is a prominent tech industry event organiser.  We strive to continuously push the boundaries and explore innovative ways to improve our offerings including our renowned award ceremonies, conferences, and workshops.  These market-leading platforms serve the software testing, DevOps, and digital transformation communities and provide professionals with unparalleled opportunities to enhance their skills, exchange insights, and stay at the forefront of industry advancements. Get in touch For sponsorship enquiries, please get in touch with oliver.toke@31media.co.uk

Bitcoin will reach $100k before Trump takes office

As Donald Trump heads back to the White House, a University of Sussex professor who has been successfully predicting bitcoin (BTC) prices since 2021, is forecasting unprecedented highs which may breach $100k per token. Prof Carol Alexander of the University of Sussex Business School says bitcoin’s rapid rise in the immediate wake of the US election is likely to continue before Trump’s inauguration on 20th January 2025. She also believes the lesser-known currencies ether (ETH) and dogecoin (DOGE) will keep moving in the same direction, especially with the latter’s links to key Trump ally Elon Musk. Prof Alexander, who does not hold bitcoin herself, told CNBC back in January that if Trump won, the price could reach $100k by the end of this year, but only if Blackrock and Fidelity ETF Market Makers managed to reduce volatility. Today, she has confirmed that bullish forecast, while issuing a stark warning as we enter a new age of deregulation. Prof Carol Alexander said: “This bull run will increase adoption by retail especially, but also institutions. Unfortunately, this growth will be on the back of failing regulations. Huge hidden risks will be swept under the carpet as the US Securities Exchange Commission ceases to take out civil actions against unregulated exchanges.” Back in 2022, Prof Alexander predicted that bitcoin would fall from $50k to $10k and while it didn’t get quite that low, there were major falls to $14k. For 2023 she said the price would rally to $50k and it reached $44,700 by December. In January this year, she predicted the rise to an all-time high of $70k over the summer, potentially followed by an end-of-year rally to $100k. More than $400bn has flowed into crypto since the election. This may be in anticipation of a low-regulation environment which will benefit high-frequency traders that drive prices up and down in a way that disadvantages everyday investors. Through her work as head of the University of Sussex’s Quantitative FinTech group Prof Alexander’s research focuses on bitcoin price formation, under the general theme of centralized and decentralized crypto market microstructure. She is also a vocal advocate of greater regulation in the industry to protect investors. She adds: “Trump plans to establish a national bitcoin reserve, to support fossil-fuelled domestic bitcoin mining, and to remove the SEC Chair Gary Gensler to stop the ‘regulation via litigation’ approach being led by US market authorities.’’ “Elon Musk’s posts on X can also induce unwitting investors to herd into crypto, only to see prices fall again almost immediately. For instance, his famous ‘Doge Barking at the Moon’ in April 2021 sent the DOGE token price from 5 cents to 60 cents in a few days; but it quickly fell back to about 20 cents, where it still is today.’’ Get in touch For event sponsorship enquiries, please get in touch with calum.budge@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk  

2025 Ireland Salary Guide reveals latest emerging employment trends

Generative AI adoption accelerates – nearly 70% of businesses encourage their staff to use AI for routine tasks and enhanced productivity. High demand for skilled professionals – 27% of businesses plan to expand permanent roles, with another 68% maintaining headcount across professional services in 2025. Rising salary expectations across generations – 68% of Gen Z professionals are becoming more insistent on higher pay, compared to just 22% of Gen X and 10% of Baby Boomers. Robert Half, the world’s first and largest specialised talent solutions and business consulting firm, has published its inaugural 2025 Ireland Salary Guide, offering essential insights into hiring and remuneration trends. The study analyses labour market dynamics, benefits and incentives, as well as starting salaries for a wide array of roles in diverse professional sectors throughout Ireland. According to the research, 95% of Irish businesses expect to be making permanent hires in 2025 and 85% are planning to do so on a contract basis. In terms of remuneration, skills shortages across professional services are prompting organisations to adopt competitive salaries and flexible benefits, on top of innovative recruitment tactics. And generational divides in salary expectations are also expected to be shaping the Irish hiring landscape in 2025, with Gen Z most demanding when it comes to pay increase expectations. Finance and Accounting Generative AI adoption is on the rise, with a majority of companies integrating this new technology into daily processes. As a result, demand for finance and accounting talent with specialist skills is anticipated to be strong in 2025, with active recruitment for permanent, contract, and project roles. Hiring outlook: 31% of companies plan to expand permanent roles, with 61% maintaining their current workforce and backfilling any vacancies. Salary motivations: 33% of companies raise pay to stay competitive, while 22% focus on merit-based increases for exceptional performance. AI and productivity: 64% of organisations promote AI usage for routine tasks, and 37% are implementing in-house AI training initiatives. IT and Technology Ireland’s internationally-focused IT sector looks set to continue growth, reflecting its status as the EU tech hub. Tech companies are focusing on competitive pay, frequent salary reviews, and extensive upskilling to attract and retain top Irish talent.   Hiring outlook: 28% of firms are expanding permanent roles, with 70% maintaining current levels. Pay and retention strategies: 25% of companies raise salaries for high performance, and 24% adjust pay to remain competitive. AI adoption and skills: 74% encourage AI integration to streamline tasks, with 46% offering internal AI training programmes to support upskilling. Administrative and Business Support The outlook for administrative and business support roles is positive, with all surveyed organisations planning to hire for these positions in 2025. Focus areas include AI-enabled productivity and continuous skill development. Hiring outlook: 21% of organisations plan to expand permanent roles, with 71% maintaining headcount. Salary adjustments: 36% of employers increase pay for exceptional performance, and 24% adjust salaries to remain competitive. AI and upskilling: 69% promote AI adoption for improved efficiency, with 40% investing in internal training programmes and 48% encouraging self-learning. As Luke Edmunds, Branch Director, Ireland, at Robert Half, explained, skills shortages remain a key concern across sectors, with businesses pulling out all the stops to attract and retain the best talent: “As Ireland’s economy evolves to the demands of the global headwinds in 2025, businesses are also striving to navigate increasing skills demands and shifting employee expectations. It is worth noting how organisations are preparing to respond with competitive pay, targeted training, and investment in digitisation and AI. In addition to compensation, we’re seeing a growing commitment to flexible, inclusive workplaces that address the priorities of younger generations. Companies are recognising the value placed on work-life balance and organisational culture by Gen Z, resulting in innovative engagement and retention strategies, such as building a robust and inclusive company culture through employee network groups and stronger employee value propositions. Only by fostering supportive, adaptable workplaces, can Irish businesses establish resilient teams prepared for long-term success in a competitive landscape. “Heading into 2025 AI will revolutionise the future of work in Ireland and the new skills in demand, with wage inflation and rising employee expectations further driving competitive offers across sectors.” Get in touch For event sponsorship enquiries, please get in touch with calum.budge@31media.co.uk For media enquiries, please get in touch with vaishnavi.nashte@31media.co.uk