When CIOmove arrives in Brussels and Paris, the discussions will not revolve around technology in isolation. The questions brought forward by the CIO community point to a more fundamental shift: technology leadership is becoming business design, risk management, organizational transformation, and geopolitical navigation all at once.
The more than 60 topics submitted for this year’s discussions show a clear pattern. CIOs are no longer asking whether AI matters. They are asking who controls it, who benefits from it, how it scales, and what happens when it starts acting on behalf of the organization. At the same time, familiar themes such as digital sovereignty, cybersecurity, IT governance, legacy modernization, and business value are being reframed by a new reality: AI is accelerating both opportunity and risk.
AI agents move from tool to operating model
One of the strongest themes this year is the rise of AI agents. The discussion has moved far beyond copilots and isolated productivity tools. CIOs are preparing for a world in which agents plan, execute, access systems, trigger workflows, and collaborate with humans and other machines.
This raises a strategic question for every enterprise: Are AI agents just another technology layer, or do they become part of the company’s operating model?
Several discussion topics challenge the idea that companies can simply add agents to existing processes. If AI is used only to accelerate old workflows, the value may remain limited. The deeper opportunity lies in redesigning work around outcomes: which tasks stay with humans, which decisions can be delegated, where agents need oversight, and how value streams change when machines start acting on behalf of teams.
For CIOs, this creates both opportunity and pressure. They can become the architects of a new enterprise model. But they also risk being reduced to infrastructure providers if business units adopt AI directly and IT reacts too late. The question in Brussels and Paris will not be whether CIOs should engage with AI agents. It will be whether they can define the architecture, governance, accountability, and business logic before fragmented adoption becomes the new shadow IT.
Cybersecurity enters machine-speed territory
The second major theme is cyber resilience in an AI-driven threat landscape. Traditional patch cycles, perimeter thinking, and manual escalation processes are increasingly being questioned. The concern is simple: if attackers can use AI to identify, combine, and exploit vulnerabilities at machine speed, human-led defense models will struggle to keep pace.
Several discussion proposals focus on the shift from reactive security to preventive architecture. The classic race to patch vulnerabilities is being challenged by a more radical premise: enterprises must reduce attack surfaces before they become exploitable. The idea that “reachable is breachable” captures a growing concern among CIOs: exposed systems, legacy architectures, and unmanaged access paths create continuous operational drag, not just security risk.
AI agents add another layer to this challenge. As autonomous systems gain access rights, execute tasks, and operate across workflows, they create a new class of non-human identities. Who owns these identities? What are they allowed to do? How are permissions granted, monitored, revoked, and audited?
The CIOmove discussions will likely treat AI agent security less as a narrow model-risk problem and more as an identity, governance, and architecture problem. Kill switches, offboarding, delegated authority, auditability, prompt injection, and excessive privileges are no longer abstract issues. They are becoming part of the enterprise security model.
Digital sovereignty becomes practical
Digital sovereignty is another recurring topic, but the tone has become more pragmatic. The debate is moving away from symbolic questions about where data is stored and toward operational control: Can companies switch providers? Can critical services continue under pressure? Can data access be traced, audited, and governed? Can enterprises reduce dependency without sacrificing innovation and efficiency?
Several topics challenge simplistic answers. Building everything internally is not realistic for most companies. At the same time, relying too heavily on global platforms creates strategic risk, especially for critical workloads and regulated industries. CIOs are therefore looking for a more nuanced model of sovereignty: control without isolation, resilience without unnecessary fragmentation, and optionality without losing speed.
Sovereignty will be discussed through contracts, exit strategies, portability, hyperscaler dependencies, local infrastructure, compliance, and business continuity. The central question is no longer whether sovereignty matters. It is where sovereignty creates real strategic value – and where it becomes an expensive illusion.
The CIO role is being renegotiated
Many submitted topics point to a broader identity question: What is the CIO in 2026?
The role is clearly moving beyond system stability and cost control. CIOs are expected to contribute to revenue, productivity, resilience, sustainability, customer experience, workforce readiness, and business transformation. They are asked to translate complex technology into board-level decisions while still maintaining operational excellence.
This creates tension. Some discussions ask whether IT can finally become a revenue engine. Others ask whether the CIO should become closer to a product leader, transformation leader, or organizational architect. Several topics question whether CIOs still sound too technical for the boardroom, and whether they can prove the value of transformation before budgets come under pressure.
The common thread is that CIOs need a stronger business language. It is no longer enough to explain platforms, systems, and architecture. CIOs must be able to show how technology decisions affect P&L, customer outcomes, risk, speed, resilience, and competitiveness.
Governance is back – but not as bureaucracy
Governance appears throughout the agenda, but not in the old sense of manuals, approval loops, and slow committees. CIOs are asking how governance can become embedded, automated, and practical enough to keep pace with AI.
The rise of shadow AI makes this urgent. Employees and business units are already testing new tools faster than traditional approval processes can respond. This is not always driven by negligence. Often, it reflects a real desire to learn, experiment, and improve productivity. If governance is too slow, companies do not gain control – they lose it.
The discussions therefore point toward a new governance model: faster, closer to the workflow, more experimental, and more connected to clear guardrails. Protected experimentation environments, clear ownership, transparent accountability, and rapid pathways from pilot to scalable decision will matter more than static policy documents.
Transformation remains harder than technology
Despite the focus on AI, many topics return to a familiar truth: transformation usually fails for organizational reasons, not technical ones. Large-scale programs still struggle with unrealistic budgets, weak business ownership, political goals, and limited organizational capacity. ERP modernization, legacy transformation, sustainability execution, and cross-border operating models all raise the same question: how can CIOs make change operational rather than aspirational?
AI does not remove this challenge. It intensifies it. If technology becomes more available, the bottleneck shifts to decision rights, incentives, skills, culture, and process ownership. Several topics frame AI productivity as an organizational challenge rather than a technology challenge. Copilots may improve individual output, but end-to-end gains require redesigned workflows, clear ownership, and measurable outcomes.
Data becomes a leadership question
Another theme running through the agenda is the changing role of data. Data is no longer discussed only as an asset to be governed or a foundation to be cleaned before innovation can begin. CIOs are increasingly debating how data supports decisions, customer understanding, sustainability execution, ROI measurement, security reporting, and business value communication.
Some topics challenge the “data-first” assumption directly. If clear business problems already exist, waiting for perfect data foundations can become a budget sinkhole. Others argue that IT organizations often sit closest to the full customer picture but are rarely part of customer strategy. This creates a paradox: the function with the deepest data access may not always have the mandate to influence customer decisions.
At CIOmove, data will therefore be discussed not only as infrastructure, but as intelligence: how organizations communicate, decide, prioritize, and prove value.
A more demanding CIO agenda
Taken together, the themes for Brussels and Paris show a CIO agenda that is becoming broader, more strategic, and more central to enterprise leadership. AI must move from pilots to production. Cyber defense must adapt to machine-speed threats. Digital sovereignty must become operational. Legacy systems must be modernized without breaking the business. Governance must accelerate rather than slow down innovation. IT must prove value while also shaping the future of work.
This is not a minor expansion of the CIO role. It is a fundamental renegotiation of technology leadership.