Thinker, strategist, enterprise architect, keynote speaker, analyst, book author, futurist on IT, CIO, cloud, AI. @SDABocconi Heads research at @Frontier_Now

Washington, D.C.
Joined July 2006
New Research: The CIO in 2030: Running the Enterprise Intelligence Economy thisisfrontier.ai/research/c… Fourteen operating imperatives for a strategic world where people, agents, software, compute, data, and trust are dynamically allocated to outcomes. #CIOChat
3
1
10
1,473
It what is probably a surprising turn of events for cybersecurity professionals, it turns out that zero-trust architectures with strict micro-segmentation are probably cheaper and easier than relentlessly hunting down and patching all possible security exploits…
There are two approaches to cybersecurity now that we’re in the vulnpolcalypse: 1. “patch the planet” by burning mountains of tokens, red teaming, and patching until you think there are no more exploitable bugs in the software 2. Shrink software components into their most minimal essence, tailor them to a particular system, and then formally verify it Both approches are now enabled by LLMs. But only the second one can be done on a budget and without having access to frontier cyber models like mythos. This is why I’m excited to see more legacy software get boiled down, hardened, and verified
3
4
452
This really blew up, and that’s good. It’s a vital conversation about AI that we must have now. “Risk is our business.” This is true if you’re using AI. And true if you’re not is the issue. How do we compartmentalize the extremely powerful tech advances happening now? Probably we can’t is the answer. But we must discuss it. A global debate.
My thoughts of late have returned to this amazing scene by @WilliamShatner, made decades ago. As a young person, I found it tremendously inspiring. A code to live by. But it didn’t play out quite like we expected. The “fantastically advanced” life that we actually ended up encountering is right here, on Earth. All around us now. The key issue of our time is becoming this: Not everyone signed up for this mission, or the risk. And what we do about that, ultimately, is where the debate about AI will end up.
2
6
33
2,484
Dion Hinchcliffe retweeted
Absolutely. The risk of doing nothing, especially in exponential times, is often (much) higher than many people think. And now, the issue is that we aren’t able to compartmentalize that risk very well either. Everyone is pulled along into the risk pool.
1
1
1
327
A call to action by Anthropic’s deputy CISO: Things in cybersecurity will get worse before they get better. Plan for this for the long haul. CIOs must now go to their boards for long term resource increases, as difficult as that is right now. Get out ahead as far as you can.
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
2
2
11
474
Yes, focusing on the cost of tokens only is a fool’s errand. But no, managing the cost of tokens with clear goals in mind is very much not and must be part of modern cloud FinOps.
AI ‘Tokenomics’ is a trap. CIOs should avoid it at all costs. spr.ly/6019BH5KIR
1
5
599
AI will soon dramatically impact the workforce. The majority of workers will go through meaningful to high levels of reinvention of what they do on a day-to-day + role basis. Figuring out the best paths forward with AI must a top priority of org leaders. Source: @McKinsey_MGI
3
5
16
986
Dion Hinchcliffe retweeted
Replying to @sarbjeetjohal
Yes, I believe that ironically, AI will help us with this problem, as with so many others. The real enemy, however, is complexity. The protocols of the Internet (IP) and Web (HTTP) are simple and designed to work even in very constrained environments. The likelihood of trust tech working and being adopted is inversely proportion to its complexity. I worry that unless the knife cuts very narrow, any improvements to address the current situation may do as much harm as good. The fix is to adopt the mantra of a good doctor: First, do no harm!
2
1
1
237
Depreciation and amortization costs for the five big hyperscalers are projected to reach $590 billion in 2029. The big question: Will their profits exceed the cost? My take: They are certainly betting they are and I’m sure they have climb-down plans if not. The big money is on the token demand being there.
4
8
7
679
My thoughts of late have returned to this amazing scene by @WilliamShatner, made decades ago. As a young person, I found it tremendously inspiring. A code to live by. But it didn’t play out quite like we expected. The “fantastically advanced” life that we actually ended up encountering is right here, on Earth. All around us now. The key issue of our time is becoming this: Not everyone signed up for this mission, or the risk. And what we do about that, ultimately, is where the debate about AI will end up.
94
270
31
1,503
82,692
Dion Hinchcliffe retweeted
Replying to @davewiner
I could not agree more, Dave. And when we fix it, we have to be very careful not to break it what makes it special. Here are my carefully considered thoughts on how we might do that: dionhinchcliffe.com/2026/10/…
2
1
471
Dion Hinchcliffe retweeted
Great read from @dhinchcliffe! My POV (in addition to what I said in comments to Dion’s post), is that these are not new problems, these are existing problems which AI helped us discover. Solution to technology vulnerability is not no or less technology, it’s more and better technology. I liked what @JensenHuang said wrt to information security last month (to this effect)! cc @furrier @jpatel41 @nikesharora
3
3
13
833
A key insight from @sama at @Stanford this week about the current global cyber situation: “I no longer think we can just patch all the bugs. I think we’re going to have to completely switch the defense model.”
1
4
10
457
Black October Broke the Internet's Social Contract. Now We Must Decide What Replaces It buff.ly/clip1qP @dhinchcliffe
1
3
1
5
324
New Post - A Trusted Network: The Internet I Want My Children to Inherit dionhinchcliffe.com/2026/10/… The safety of our open, global network is at risk like never before. My broad take on what we must to do preserve it. Building on my earlier analysis for enterprises.
2
5
414
What may end up becoming the biggest Black October issue: Unfixable bugs in chips that are exploitable by AI models. They can’t easily be patched. If a serious enough one is found, those systems are permanently vulnerable without physical remediation.
2
4
899
Yes, but as David has also just pointed out (and I did as well last week), their capacity is sold out of years for those needing lots of capacity. AWS has become a victim of both its own success and an AI bubble that has outrun its supply chain. Prediction: Inventive solutions to increase capacity are coming! Not the least are new AI models (super quantized and other techniques) that don’t require such compute.
I finally answered the cloud question I usually hate answering: who has the best cloud? My answer: AWS — narrowly, conditionally, and with a lot of caveats. I built a generic scoring model across 20 criteria and applied it to AWS, Microsoft Azure, and Google Cloud. The criteria are an abstraction of what I see every day when I walk clients through cloud provider selection: security, compliance, cost, reliability, compute, storage, databases, networking, AI readiness, hybrid cloud, migration, support, observability, governance, vendor viability, innovation, and the operational realities that show up after the purchase order is signed. The result was close. AWS came out on top at 84.7, Azure followed at 82.7, and Google Cloud landed at 78.9. AWS wins overall because it performs well where the weighting matters most: security, compute, storage, reliability, ecosystem depth, and maturity. Azure is the best answer for many Microsoft-centric enterprises, especially those dealing with compliance, hybrid cloud, identity, and existing enterprise agreements. Google Cloud is the strongest fit for AI-native, data-heavy, and cost-sensitive workloads, and it continues to show real momentum. But the real answer is still the one architects and consultants give whether people like it or not: it depends. In the real world, the answer is almost never one public cloud. It is usually a heterogeneous mix of public cloud providers, private clouds, owned infrastructure, edge computing, SaaS platforms, legacy systems, and whatever else the business has accumulated over the last 20 years. The job is not to crown a vendor and move on. The job is to design the right configuration for the business, the workloads, the compliance model, the skills available, the cost structure, and the future direction of the company. That is why I usually avoid the “best cloud” debate. It oversimplifies a decision that is rarely simple. Still, it was fun to finally put a stake in the ground. If forced to answer the question using broad enterprise criteria, AWS is the best overall public cloud today. Azure may be the better answer for Microsoft-heavy enterprises. Google Cloud may be the better answer for AI, analytics, and data-driven platforms. Same market. Different strengths. One narrow winner. That is my answer, and I am sticking to it.
1
1
1
633
I think this is an accurate analysis, especially this: “The base becomes humans working with agents, but accountability stays human.” So, the pyramid likely becomes very squat indeed. The more successful orgs will have effective ways of fielding high numbers of agents per worker. Although that “success” is in the eye of the beholder. I would not rule out AI labor regulation even in the short term as both an employment shock absorber and as systemic risk avoidance.
2
3
6
918
Mixed-Nvidia AI Clusters By @HPE Shifts CIO Focus to Scheduling thisisfrontier.ai/news/hpe-a… My take: If HPE Private Cloud AI can demonstrate discipline in a customer's environment, its mixed-cluster support becomes an architectural advantage.
3
4
436