{"id":240115,"date":"2026-07-03T06:43:00","date_gmt":"2026-07-03T10:43:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/07\/03\/the-cybersecurity-perimeter-has-disappeared-enterprises-must-shift-their-focus-to-identity-data-and-compute\/"},"modified":"2026-07-03T18:45:55","modified_gmt":"2026-07-03T22:45:55","slug":"the-cybersecurity-perimeter-has-disappeared-enterprises-must-shift-their-focus-to-identity-data-and-compute","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/07\/03\/the-cybersecurity-perimeter-has-disappeared-enterprises-must-shift-their-focus-to-identity-data-and-compute\/","title":{"rendered":"The Cybersecurity Perimeter Has Disappeared. Enterprises Must Shift Their Focus to Identity, Data and Compute"},"content":{"rendered":"

The Cybersecurity Perimeter Has Disappeared. Enterprises Must Shift Their Focus to Identity, Data and Compute<\/a><\/p>\n

https:\/\/www.cybersecurity-insiders.com\/the-cybersecurity-perimeter-has-disappeared-enterprises-must-shift-their-focus-to-identity-data-and-compute\/<\/a><\/p>\n

Publish Date: 2026-07-03 06:43:00<\/a><\/p>\n

Source Domain: www.cybersecurity-insiders.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Traditionally, enterprise cybersecurity programs were designed around a clearly defined perimeter. Companies protected their internal networks, issued managed devices and restricted access to applications operating within controlled environments. The logic was simple: Secure the boundary, and the organization would remain secure.
\nThat model no longer reflects how businesses actually operate. Employees now work across cloud services, mobile devices, home networks, third-party platforms and AI-enabled applications. Contractors and partners regularly access corporate resources from outside the traditional network. Sensitive information is processed across an increasingly distributed technology environment that no single security team completely owns.
\nArtificial intelligence is accelerating this shift. AI assistants, embedded models and autonomous agents create new ways for business information to be analyzed, summarized, transferred or retained. Because these capabilities are often built into familiar workplace tools, they may enter enterprise workflows before security teams have fully assessed the risks.
\nOrganizations should stop trying to restore a perimeter that no longer exists. Instead, they should concentrate on the controls that remain within reach: identity, data and compute.
\nAI Is Expanding the Governance Challenge
\nTraditional applications usually pass through a recognizable review process. Security and IT teams assess the software, approve or reject it, configure permissions and establish rules for how it may handle company information. AI does not typically follow that path.
\nNew AI features are being added to productivity platforms, collaboration tools, browsers, search services and mobile applications that businesses already use. A product approved months ago may now contain generative AI capabilities that process data in ways the original security assessment never considered.
\nThe controls to disable those features exist on the major platforms, but they are inconsistent, easy to overlook and often arrive months after the feature does.
\nPublic concern often centers on employees intentionally entering confidential information into consumer AI tools. That risk is real, but it is only part of the problem. A broader concern is the gradual introduction of AI into everyday business processes before governance policies, technical controls and employee guidance are ready.
\nEnterprises need to know which systems can access sensitive information, where that information is processed, how long it is retained and whether it may be used to train or improve an external service. Enterprise agreements often prohibit that last use; consumer and free tools frequently permit it, and that gap is where the real exposure sits. When those questions cannot be answered, traditional network defenses offer limited protection.
\nIdentity Becomes the Primary Security Boundary
\nIn a highly distributed environment, identity is one of the few consistent control points. CIOs and CISOs need to understand who is accessing enterprise resources, what device they are using, the context of the request and the level of risk involved. Access should not be considered trustworthy simply because a user completed a login or multifactor authentication challenge.
\nSecurity decisions increasingly need to be continuous. User behavior, device condition, location, role, application sensitivity and the value of the requested information should all influence whether access is granted, maintained, restricted or terminated.
\nThis is what zero trust actually requires. The term is on every vendor slide; the discipline behind it is rarer. Rather than treating the corporate network as trusted, organizations should assume that any device, credential or connection could be compromised. Verification should continue throughout the session instead of ending at login.
\nEnterprises must also extend identity governance beyond employees. AI agents, automated services, APIs and machine-to-machine connections may access sensitive systems without direct human involvement. These nonhuman identities require the same attention to least privilege, monitoring and lifecycle management as traditional user accounts.
\nProcessing Should Remain in Governed Environments
\nAs AI adoption grows, enterprises must make deliberate decisions about where sensitive data is processed. Customer information, intellectual property, financial records and regulated data should not be copied into consumer AI services, unmanaged applications or third-party environments that fall outside established security controls.
\nWhenever possible, sensitive activity should remain inside environments the organization already governs.
\nKeeping data and compute resources within approved enterprise systems allows security teams to enforce policy more consistently, preserve audit trails and better understand how information is being used. It can also support data-residency and sovereignty requirements by keeping information within approved geographic or contractual boundaries.
\nThe same principle applies beyond AI. Employees may work from corporate laptops, personal smartphones, tablets or shared devices. The objective should be to provide access without unnecessarily placing sensitive data on the endpoint.
\nModernization should improve productivity without weakening oversight.
\nGovernance Depends on Visibility
\nA basic question can reveal a great deal about an organization\u2019s security posture: Can we see where our data goes? If sensitive information can be stored on unmanaged devices, copied into unsanctioned applications, forwarded outside approved systems or included in AI workflows without detection, the organization has both a visibility problem and a governance problem.
\nPolicies alone are not enough. Security teams must be able to observe, validate and enforce them.
\nEnterprises need insight into which data leaves managed environments, which applications receive it, which users or systems interact with it and whether it is being retained in unexpected places. Data-loss prevention, identity analytics, cloud security controls and application telemetry can help, but they must operate as part of a coordinated strategy.
\nMany security failures do not happen because a company lacked a policy. They happen because the company could not verify whether the policy was being followed.
\nThe Endpoint Should Not Be the Foundation of Trust
\nEndpoint protection remains important, but modern devices are difficult to treat as inherently trustworthy. Smartphones, personal laptops and unmanaged endpoints connect through a wide range of networks and run constantly changing collections of applications. They can be lost, stolen, shared, misconfigured or compromised. Mobile devices also expose communication methods and sensors that create risks beyond those associated with traditional desktops.
\nNo enterprise can guarantee that every endpoint will remain secure at all times. A more resilient approach is to reduce the amount of sensitive information that reaches the device. Limiting local storage and keeping enterprise data inside governed environments can reduce the damage caused by a lost or compromised endpoint.
\nThis does not replace endpoint security. It changes the endpoint\u2019s role. The device becomes a window into a controlled enterprise environment rather than the primary location where sensitive data resides.
\nThat distinction is especially important for bring-your-own-device programs. Employees want the convenience of using personal devices, but many are uncomfortable giving employers broad control over them. Separating business activity from the physical device can help protect corporate information while preserving employee privacy.
\nPolicy Enforcement Is the New Perimeter
\nSecurity leaders should not attempt to recreate yesterday\u2019s network boundaries. The workforce, technology landscape and threat environment have all changed. In the AI era, security will depend less on where a user is located and more on whether the organization can consistently enforce policies governing identity, access, data location and processing.
\nThe most resilient enterprises will keep sensitive information inside governed environments while still allowing employees to work securely from almost anywhere. They will evaluate trust continuously, reduce their dependence on managed endpoints and maintain visibility across both human and machine-driven activity.
\nThe perimeter may have disappeared, but security has not. It has moved to the areas that matter most: who has access, where data is processed and whether the enterprise remains in control throughout the information lifecycle.
\n\u00a0
\n\u00a0<\/p>\n

Join our LinkedIn group Information Security Community!<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

The Cybersecurity Perimeter Has Disappeared. Enterprises Must Shift Their Focus to Identity, Data and Compute…<\/p>\n","protected":false},"author":1,"featured_media":240116,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.cybersecurity-insiders.com\/wp-content\/uploads\/cybersecurity-17.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,20,24],"class_list":["post-240115","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-artificial-intelligence","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/240115"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=240115"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/240115\/revisions"}],"predecessor-version":[{"id":240117,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/240115\/revisions\/240117"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/240116"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=240115"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=240115"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=240115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}