Articles - Page 28

Bland Brands Beware: Optimizely’s New Identity Brings Human Creativity to its Agentic AI and AEO Ambitions

matt-garrepy

<hr /> <a target="_blank" href="https://cmscritic.com/critics/johnwest">John West</a> is the Principal Solution Architect at <a target="_blank" href="https://cmscritic.com/products/consciaai">Conscia</a> and a CMS Critic contributor. FOR CONTEXT, I’ve been on the Internet since 1990 and writing code for the web since 1995. In 1996, I started my professional career in Electronic Data Interchange (EDI), which was a sort of precursor to XML and e-commerce. Since 2000, I have been involved in <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">web content management</a> (CMS) and digital experience platforms (DXP). I served as CTO and Chief Architect for CMS, DXP, commerce, etc. vendor <a target="_blank" href="https://cmscritic.com/products/sitecore">Sitecore</a> from 2004 to 2016, taking the company from a startup literally working out of a hallway in one of the founders’ homes to a valuation of over a billion dollars. After that, I worked for a global advertising agency as Senior Vice President for Experience Platforms and then as a consultant for <a target="_blank" href="https://cmscritic.com/products/contentstack">Contentstack</a>, a headless CMS vendor.I recently took an opportunity with <a target="_blank" href="https://cmscritic.com/products/consciaai">Conscia</a> as Principal Solution Architect. Conscia provides a SaaS platform designed to streamline the management of digital experiences through its Digital Experience Orchestration tool. Honestly, I joined Conscia because I’m genuinely excited about its technology, specifically the SaaS Digital Experience Engine, but also its SaaS DX Graph database.<h3 id="riding-the-composable-wave">Riding the composable wave</h3>I’m always interested in paradigm shifts in the computing industry, and composable architecture represents such a transition. Once you commit to API-first composable solutions, there is no going back to the monolithic platforms and proprietary interfaces of the past. The future is an intermix of the most fit-for-need systems from multiple vendors, and Conscia provides infrastructure and features that enable composable solutions. In addition to its Digital Experience Engine, Conscia also offers DX Graph, an API-first SaaS graph database for integrating and caching any kind of data from any system, including legacy systems.Modern architectures involve every front-end client accessing numerous back-end systems directly, requiring re-implementing the same process flows repeatedly, resulting in redundancy and complexity in the architecture. Conscia provides facilities to meet common patterns in composable solutions, abstracting the technical details of intermingling interdependent Webservice API calls, webhooks, scheduled tasks, and interactive processes. Organizations encapsulate reusable business processes using composable solutions as encapsulated orchestration flows that provide consistent functionality across all channels.When I began investigating headless content management, I started identifying gaps: challenges that organizations would need to overcome, which would likely lead to technical debt and brittle solutions that could be difficult to maintain. In March of 2021, before I had ever even heard of Conscia, <a target="_blank" href="https://deliverystack.net/2021/03/30/headless-cms-with-webhook-and-api-brokers/">I wrote a blog post</a> about some suggestions that I thought would benefit composable solution architecture: <figure class="image image-style-align-center image_resized" style="width:64.96%"><img src="https://cmscritic.com/ms-content/uploads/2024/03/conscia-orchestration-diagram.jpg" alt="" /></figure><a target="_blank" href="https://deliverystack.net/2021/03/30/headless-cms-with-webhook-and-api-brokers/">SOURCE: https://deliverystack.net/2021/03/30/headless-cms-with-webhook-and-api-brokers/</a> This diagram from that blog post indicates Webhook and API Brokerage as composable infrastructure separate from Orchestration. Conscia brings those functions together in the DX Engine, providing not just a Webservice API and Webhook abstraction layer, but a UI for orchestrating and intermingling these third-party APIs (brokerage/orchestration UI not shown in the diagram). Including an orchestration flow scheduling facility, the DX engine provides a foundation for robust composable solutions.<h3 id="what-it-means-to-be-a-dxo">What it means to be a DXO</h3>Conscia markets itself as a Digital Experience Orchestration (DXO) solution. From my perspective, managing digital experiences is a subset of Conscia’s capabilities; its real value is in orchestrating complex business processes that can involve numerous Webservice APIs from multiple vendors. In Conscia, organizations define orchestration flows – sequences of components that perform unit tasks such as calling a Webservice API – that you can invoke via the Conscia DX Engine UI, Webservice APIs, webhooks from any client that connects to the Internet, or from the scheduler built into the Conscia DX Engine itself.While optimally, every organization could implement their own API brokerage and abstraction layer, few organizations have the technical and financial resources to take this approach, let alone the awareness before they’re deep into a glue code nightmare, and/or re-inventing the monolith. Solutions need a layer between clients and back-end systems to centralize access to normalized and integrated data stitched together from concurrent and sequential Webservice API calls. These reusable process flows insulate clients from the implementation details of the various back-end vendors (Content Management, Commerce, Customer Data Platform, Search, and otherwise), making it easier to add, replace, update, and remove major elements of the architecture.I’m not saying that there’s never a case for clients to call vendor APIs directly. Headless search type-ahead is an example of where orchestration is neither necessary nor practical, and performance is so fundamental that I would not suggest adding an extra layer as a best practice. That said, in every other business case that I have considered, there is sufficient justification for adding Conscia between the client and the various back-end systems.<h3 id="getting-to-the-heart-of-the-matter">Getting to the heart of the matter</h3>As with any significant infrastructure component, Conscia presents a learning curve that developers working within time constraints may prefer to avoid. With Conscia, that investment is absolutely worthwhile to increase productivity and improve long-term maintainability. In fact, once you work with Conscia, you are likely to wonder how or why you would implement composable solutions without it. Using good software architecture feels like playing with a well-designed toy, working with a well-engineered tool, or driving a sports car.While there are SaaS products that provide various relevant capabilities, from my perspective, Conscia has no direct competitors. This makes Conscia a market leader with first mover advantage in a space that is virtually guaranteed to expand indefinitely as organizations continue to integrate existing and emerging solutions into their composable stacks. Our CEO, <a target="_blank" href="https://cmscritic.com/critics/sana-remekie">Sana Remekie</a>, likes to say that Conscia represents the brains of the composable stack. I can also see Conscia as the heart of the composable stack, where the brains will always be the smart people that it takes to configure and implement complex web solutions. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

John West: Why I Joined Conscia 

johnwest

<hr /> Technical debt is a challenge that increases as digital business gets more complex. This debt accumulates when companies opt for quick-fix solutions or continue to rely on outdated systems, sacrificing long-term efficiency for short-term gains. As the digital world accelerates, technical debt compounds, leading to increased costs and reduced agility.A recent study revealed<a target="_blank" href="https://www.protiviti.com/uk-en/global-technology-executive-survey-tech-debt-major-burden#:~:text=As%20organizations%20strive%20to%20increase%20their%20focus%2C%20and,level%20of%20impact%20on%20their%20ability%20to%20innovate."> more than 70% of businesses</a> report that technical debt is significantly impeding their ability to innovate. With technological advances rapidly outpacing the ability of companies to adapt, the issue of technical debt has never been more pertinent.When migrating to a new <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">Content Management System (CMS)</a>, reducing, and mitigating technical debt should be front of mind. Proactively managing debt as part of your migration strategy will lead to a smoother transition and lower the <a target="_blank" href="https://hygraph.com/blog/content-management-system-cost">total cost of ownership (TCO)</a> of the new solution. What’s more, development teams can focus on innovation rather than simply keeping the lights on.<h3 id="the-cost-of-neglect:-when-technical-debt-spirals">The Cost of Neglect: When Technical Debt Spirals</h3>Several factors contribute to technical debt during CMS migrations. For instance, insufficient communication between teams leads to rushed fixes and missed opportunities. Effective communication channels should be established to facilitate seamless collaboration. By doing so, insights and concerns on a project can be shared easily and addressed in a timely manner rather than six months down the line.Organizations should also ensure they aren’t just “lifting and shifting” problems from one platform to the next. Too many teams waste time and resources moving outdated assets, duplicate data, and unused features. This coupled with time pressures and skills gaps means some organisations end up moving to new platforms without fully capitalising on what they have to offer.Lastly, if training and employee adoption are treated as an afterthought, transitioning to a new CMS will be a painful process. In the worst-case scenario, all the migration work is done just for people to default back to old working methods. Having an effective change management program is essential.<h3 id="ensuring-your-migration-is-a-success">Ensuring Your Migration is a Success</h3>To make any CMS migration a success, businesses should follow five steps to reduce technical debt:  <h4 id="1.-set-up-an-internal-migrations-team">1. Set Up an Internal Migrations Team</h4>This team should comprise representatives from various departments, ensuring a comprehensive understanding of how content is used across the organization. Their role includes planning the migration, identifying challenges, allocating resources, and ensuring smooth knowledge transfer. For example, the team can establish global standards for content governance and documentation, and train colleagues in new operational methods. This ensures that all perspectives are considered, leading to a migration that aligns with the needs of the entire organization.<h4 id="2.-conduct-a-content-audit">2. Conduct a Content Audit</h4>A thorough content audit is essential to identify redundant, obsolete, or trivial data that need not be migrated. This process involves mapping out where data lives, who owns it, the content types used, and interrelationships between datasets. Particularly when moving from a monolithic to a headless CMS; understanding the support structure of different processes is critical, as legacy data models may not directly translate to a headless approach and may require adjustments during migration.<h4 id="3.-consolidate-and-simplify-workflows">3. Consolidate and Simplify Workflows</h4>This step involves identifying overlapping capabilities, pinpointing outdated tools causing frustrations, and determining how processes can be streamlined with the new CMS. For example, German food and beverage maker, Dr. Oetker, is using a headless CMS to manage digital experiences across 40 countries from a single platform, allowing for consistent branding, streamlined processes, and rapid global updates.<h4 id="4.-design-a-composable-content-strategy">4. Design a Composable Content Strategy</h4>Adopting a composable content strategy is key for maximizing the benefits of a headless CMS. This strategy involves defining reusable content models, such as “blog post models” or “call to action models,” that can be displayed across various channels. This modular approach enables quick solution development for current use cases, with the flexibility to adjust models for future needs. It also empowers business users to create unique experiences without developer assistance, exemplifying the shift from a page-based to an omnichannel business mindset.<h4 id="5.-federate-your-content-sources">5. Federate Your Content Sources</h4>As digital experiences expand, content often relies on data from multiple applications and external sources. Federating content sources is about integrating these sources in a way that minimizes maintenance-heavy integrations and resource-intensive processes.The demand for connected digital services shows no sign of slowing down, so organizations’ content strategies are increasingly under the microscope. For those looking to migrate their CMS, now is the opportunity to proactively take measures to reduce technical debt, meaning they can focus on future innovation rather than have one eye on their rear-view mirror. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Overcoming CMS Migration Technical Debt

michael-lukaszczyk

<hr /> <a target="_blank" href="https://preston.so/">Preston So</a> is an institution in the CMS world. A vanguard of the hallowed halls of content.It's not hyperbole. He's been at it for a long time and made incredible contributions to the industry. Not only is So a gifted leader and communicator who's helped drive the product roadmap at places like <a target="_blank" href="https://www.oracle.com/">Oracle</a>, <a target="_blank" href="https://cmscritic.com/products/gatsby">Gatsby</a>, and <a target="_blank" href="https://cmscritic.com/products/acquia">Acquia</a>, but he's also an adept writer who's penned multiple books on an array of CMS-related topics (it's worth noting that he's also an accomplished <a target="_blank" href="https://www.merriam-webster.com/dictionary/polyglot">polyglot</a>). Now, after a recent break, he's continuing his journey with a platform that's also somewhat of an institution: <a target="_blank" href="https://www.dotcms.com/">dotCMS</a>, a leading hybrid-headless content management system first released in 2009.“Having worked in the<a target="_blank" href="https://www.linkedin.com/feed/hashtag/?keywords=cms&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7168650435443019776"> CMS</a> world for 17 years, I've seen my fair share of market players come and go,” he remarked in a recent <a target="_blank" href="https://www.linkedin.com/posts/prestonso_headless-cms-decoupleddays-activity-7170423703070035968-YQ80?utm_source=share&amp;utm_medium=member_desktop">LinkedIn post</a>. “But dotCMS has always struck me from the beginning as a formidable source of inspiration and innovation in the space.”Today, the company announced that So has joined the company as Vice President of Product. In this role, he will be responsible for scaling the dotCMS product team and driving its product management, strategy, and design efforts. According to the company's press release, So will also be tasked with building a developer relations team as the company continues to grow its customer base and product portfolio. “We are delighted to welcome Preston to dotCMS," said <a target="_blank" href="https://www.linkedin.com/in/zainishaq/">Zain Ishaq</a>, CEO at dotCMS. "Preston is a visionary leader in the CMS space who we have admired for a long time,”  “We are deeply focused on innovation as we solve complex content management challenges for our customers. Preston’s experience will help us bring cutting-edge products to our customers."<h3 id="a-visionary-voice-in-the-cms-realm">A visionary voice in the CMS realm</h3>Preston So is a senior product leader with two decades of experience in software and 9 years of leading product, design, engineering, and developer relations at leading technology and media organizations. As mentioned, he is also the author of multiple books, including <a target="_blank" href="https://preston.so/books/immersive-content">Immersive Content and Usability</a> (A Book Apart, 2023), <a target="_blank" href="https://preston.so/books/voice-content">Voice Content and Usability</a> (A Book Apart, 2021), <a target="_blank" href="https://preston.so/books/gatsby">Gatsby: The Definitive Guide</a> (O'Reilly, 2021), and <a target="_blank" href="https://preston.so/books/decoupled-drupal">Decoupled Drupal in Practice</a> (Apress, 2018).A globally recognized authority on the intersections of content, design, and code, he is an editor at <a target="_blank" href="https://alistapart.com/author/preston-so/">A List Apart</a> and has <a target="_blank" href="https://preston.so/speaking">delivered keynotes</a> around the world in three languages. So is also the founder of <a target="_blank" href="https://www.decoupleddays.com/">Decoupled Days</a>, the first and only non-profit headless CMS conference, held in New York and Albuquerque since 2017. “I’m truly excited to join the dotCMS team and to contribute to an organization that has long been at the vanguard of the CMS industry,” said So. “dotCMS has always been a formidable innovator in the space, and I’m humbled by the opportunity to support and learn from our customers’ success with best-of-breed headless APIs like <a target="_blank" href="https://graphql.org/">GraphQL</a> and established core capabilities like no-code page building and structured content modeling.” <h3 id="building-on-a-legacy-of-success">Building on a legacy of success</h3>dotCMS has established a clear position in the market as a hybrid solution, providing headless CMS capabilities alongside marketer-focused tools like a page builder. That platform was designed to be flexible and developer-friendly, so users can architect around their requirements with an API-first model, allowing for easy integration with an existing tech stack. It's also a multi-site solution, providing simplified management for a broad ecosystem of experiences. As a content management system, dotCMS is focused on helping global enterprises with sophisticated content requirements. It's best suited for organizations across industries that manage multiple brands, websites, workflows, and content types across multiple languages. The blending of secure and scalable tools for a development team with intuitive editing tools for content and marketing teams makes it a comprehensive offering. dotCMS counts notable brands such as Dairy Queen, Newell, Greensky, Chewy, and Comcast have chosen dotCMS as customers. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Preston So Joins dotCMS as Vice President of Product

cms-critic-staff

<hr /> Shock and awe.Seems like a fitting phrase to describe the amount of passion and participation we saw in our 12th annual CMS Critic People’s Choice Awards. Yup. We’re a little shocked, and a whole lotta awe. And it’s all thanks to you. A lot has changed in the decade-plus that we’ve been conducting our annual shindig. In the beginning, there were no DXPs or headless CMSs – just a few APIs and a dream. We also had a smaller cohort of participants.Sure, some of the same players are still in the mix, and plenty of new ones, too. We’ve even seen a few mergers along the way. But brands aside, what’s really astounding is how content management continues to be relevant after all these years – and we’re still celebrating the innovation and community gravitas these platforms create. Speaking of community… if there’s one thing our People’s Choice Awards brings out, it’s the people who build with these amazing tools and technologies. Once again, you showed us how much love and loyalty exist in your own ecosystems, and how fierce that loyalty can be. You got the word out – to the tune of thousands of nominations and votes – and it’s inspiring. It's always bittersweet to see another Awards season come and go, but we have an exciting year ahead with lots of new innovation in the pipeline. So without further ado, here are the winners and the highlights from this year's amazing event.<h3 id="umbraco-sweeps-with-5-category-wins-">Umbraco sweeps with 5 category wins </h3>There's usually one big movie that sweeps at the Academy Awards, lurching victories in multiple categories. Things don't always play out that way with our own Awards program – but this year, there was one vendor that came out on top. It’s no surprise that many platforms fit into several of this season's 16 categories. Many DXPs offer products like a DAM that can be procured separately (and that’s just one example). To that end, we let you – our audience – nominate and vote for the tools you love in each solution space.This year, <a target="_blank" href="https://cmscritic.com/products/umbraco">Umbraco</a> brought the rain. They swept in five categories: Best Enterprise CMS, Best DXP, Best Headless CMS, Best Composable Solution, and Best AI Solution in a CMS or a DXP. With the launch of its Umbraco Heartcore headless CMS – as well as an array of AI plugins and integrations – it’s clear that Umbraco’s users are thrilled with its features and came out to support the platform in a big way. Congrats to the Umbraco team and its community for driving home these wins.<h3 id="joomla,-statamic,-and-shopify-score-gold-in-multiple-categories">Joomla, Statamic, and Shopify score gold in multiple categories</h3><a target="_blank" href="https://cmscritic.com/products/joomla">Joomla</a> also made a splash with two category wins for Best Free CMS and Best Open Source CMS. Every year, Joomla’s community gets activated around the CMS Critic Awards, tapping its vast global reach to muster support.<a target="_blank" href="https://cmscritic.com/products/statamic">Statamic</a> also scored in two categories: Best Flat File CMS and Best Static Site Generator. The platform has a tenacious following, and continues to be vocal in promoting the Awards across its user community.Despite a decent cohort of competitors, <a target="_blank" href="https://cmscritic.com/products/shopify">Shopify</a> won in the Best e-Commerce Solution and Best Headless Commerce Solution categories. Over the last two years, the platform has turned up the headless heat with its <a target="_blank" href="https://www.shopify.com/plus/solutions/headless-commerce">ShopifyPlus</a> back-office solution for powering storefronts, giving it a broader platform of offerings and embracing more composable strategies. <h3 id="optimizely-takes-the-dam-prize">Optimizely takes the DAM prize</h3>It was a heated battle in the DAM department, but <a target="_blank" href="https://cmscritic.com/products/optimizely">Optimizely</a> won out with its digital asset management suite – designed to work with leading CMSs, but also with the company’s own content management platform. This includes customizable workflows for maintaining brand compliance across large ecosystems. In the Best ECM category – the specialized Enterprise Content Management vertical – we had a relative newcomer shake things up. <a target="_blank" href="https://www.notion.so/product">Notion</a> was nominated in the early round and went on to upset previous winners by taking the gold. This includes a few stalwarts that have an almost unshakable dominance in the field. For Best Website Builder, you loved <a target="_blank" href="https://cmscritic.com/products/yootheme">YOOtheme</a>. A perennial favorite with CMS Critic Awards voters, YOOtheme provides page builder capabilities for both <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a> and Joomla, as well as hosting a marketplace of themes and templates. The enduring loyalty for the Hamburg-based provider is heartening, especially as choice and competition increase in this field. In the Best DXC (Digital Experience Composition) lane, <a target="_blank" href="https://cmscritic.com/products/netlify">Netlify</a> outpaced the competition – which has certainly grown over the last year. DXC has been an evolution, and a category that has only just emerged (relative to our established pools). We’ll be watching this space and the growth of orchestration tools as we look ahead to the 2024 Awards. Finally, you picked <a target="_blank" href="https://cmscritic.com/contentstack-offers-microsoft-azure-becomes-only-multi-cloud-saas-cms-qa-with-cto-nishant-patel">Azure</a> as the Best Development/Hosting Platform. While <a target="_blank" href="https://cmscritic.com/products/microsoft-sharepoint">Microsoft</a> continues to expand its foray into search and AI, its cloud ecosystem is providing a solid foundation for building applications and scaling services to meet the growing demands of modern digital experiences. <h3 id="the-class-of-2023">The Class of 2023</h3>For a quick snapshot of the results, here’s the list of all the 2023 winners. You can also watch this video:<figure class="media"><div data-oembed-url="https://youtu.be/dap0L8bXGos"><div style="position:relative;padding-bottom:100%;height:0;padding-bottom:56.2493%"><iframe src="https://www.youtube.com/embed/dap0L8bXGos" style="position:absolute;width:100%;height:100%;top:0;left:0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe></div></div></figure> <img style="width:14.46%" src="https://cmscritic.com/ms-content/uploads/2023/02/umbraco-edited.png" alt="Umbraco Logo" />Best Enterprise CMS: UmbracoBest DXP: UmbracoBest Headless CMS: UmbracoBest AI Solution in a CMS or DXP: UmbracoBest Composable Solution: Umbraco <img style="width:30.71%" src="https://cmscritic.com/ms-content/uploads/2023/02/joomla-edited.png" alt="Joomla! Logo" />Best Free CMS: JoomlaBest Open Source CMS: Joomla <img style="width:30.09%" src="https://cmscritic.com/ms-content/uploads/2022/03/statamic-logo.jpg" alt="Statamic logo" />Best Flat File CMS: StatamicBest Static Site Generator: Statamic <img style="width:29.25%" src="https://cmscritic.com/ms-content/uploads/2022/03/shopify-logo-white-bg.webp" alt="Shopify logo" />Best e-Commerce Solution: ShopifyBest Headless Commerce Solution: Shopify <img style="width:30.31%" src="https://cmscritic.com/ms-content/uploads/2022/03/optimizely-logo-white-bg.webp" alt="Optimizely logo" />Best DAM (Digital Asset Management): Optimizely <img style="width:31.16%" src="https://cmscritic.com/ms-content/uploads/2023/02/yootheme-edited.png" alt="YOOtheme Logo" />Best Website Builder: YOOtheme <img style="width:28.96%" src="https://cmscritic.com/ms-content/uploads/2024/03/notion-logo.jpg" alt="" />Best ECM (Enterprise Content Management): Notion <img style="width:28.66%" src="https://cmscritic.com/ms-content/uploads/2024/03/netlify_logo.png" alt="" />Best DXC (Digital Experience Composition): Netlify <img style="width:28.75%" src="https://cmscritic.com/ms-content/uploads/2024/03/microsoft_azure_logo.png" alt="" />Best Development/Hosting Platform: Azure<h3 id="congratulations-to-all-our-2023-winners">Congratulations to all our 2023 Winners</h3>What more can we say? Once again, we’re thrilled to have such a passionate community of readers, and we’re already looking forward to next year’s Awards. At CMS Critic, a big part of our charter is to serve the CMS community. Like you, we’re an assemblage of developers and content professionals, and we want our industry to shine and endure. We also want to attract new talent to our collective ranks, and having your participation helps stoke interest and drive awareness. YOU make this possible, and YOU matter to the movement. If you didn't get nominated or take home a win, that's OK – there's always next year. Keep an eye out for announcements for our 2024 Awards, so you can start promoting early in the nomination round. It's really anyone's game if you can rally your customers and communities. We’ll also be featuring some additional events throughout the year, so stay tuned and make sure you’re signed up to receive our emails. It's easy: visit <a target="_blank" href="https://cmscritic.com/">www.cmscritic.com</a> and click “Sign Up” in the upper right corner. <h3 id="hey-winners…-ready-to-collect-your-prizes?">Hey winners… ready to collect your prizes?</h3>Calling all winning vendor marketing departments: looking to promote the good news and get the goods? Email us at <a href="mailto:info@cmscritic.com">info@cmscritic.com</a> to request your exclusive badges and claim your 30-day Product Directory upgrade. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Announcing the Winners of the 2023 CMS Critic People’s Choice Awards

New Directus Marketplace Completes a Three-Legged Stool for the Composable Future

8 CMS Trends to Watch in 2023: From MACH to Metaverse

Best Video Experience

Give your audience the best video experience

#000000

The DXP Kerfuffle: Finding the Big Chords in the 2024 Gartner Magic Quadrant

<hr /> <a target="_blank" href="https://cmscritic.com/critics/jonstewart">Jon Stewart</a> is president and co-founder of <a target="_blank" href="https://cmscritic.com/products/zensource">ZenSource</a>, and CMS Critic contributor.  Both <a target="_blank" href="https://cmscritic.com/what-is-a-content-management-system-cms">Content Management Systems</a> (CMS) and Digital Experience Platforms (DXP) play pivotal roles in the education industry. They share many of the same features, however they serve different purposes in managing and delivering digital content. The complexity arises from the overlap of functionalities, compounded by the fact that many CMS vendors have evolved into DXPs, and DXP-first platforms now include a CMS. This makes it increasingly confusing for marketers and IT professionals to decode which to use and the benefits of each. Despite this, both CMS and DXP have an important and powerful place in MarTech and higher education. But there's no need to invest in costly and complex DXP-first platforms to achieve scale. By utilizing open-source <a target="_blank" href="https://cmscritic.com/products/drupal">Drupal</a> with a composable approach to MarTech architecture, these two systems can be combined to deliver a comprehensive omnichannel marketing platform. This article aims to clarify the key differences and advantages of both tools, offering tips on building a fully open DXP.  <h3 id="the-difference-between-a-cms-and-a-dxp---">The difference between a CMS and a DXP   </h3>In short, while a CMS is primarily focused on content creation and management, a DXP extends its functionality to provide a holistic digital experience by incorporating various tools and capabilities to engage users across multiple touch points.  <h4 id="content-management-system-(cms)">Content Management System (CMS)</h4><ul><li>Focus: Primarily focuses on content creation, management, and publication. </li><li>Purpose: Designed for organizing and handling digital content such as text, images, videos, and documents. </li><li>Features: Provides tools for content creation, editing, version control, and workflow management. Typically used for websites and blogs. </li><li>User Experience: Centers around content editors and publishers who create and update content. </li></ul><h4 id="digital-experience-platform-(dxp)">Digital Experience Platform (DXP)</h4><ul><li>Focus: Encompasses a broader scope, going beyond content management to deliver a comprehensive digital experience. </li><li>Purpose: Aims to create seamless, personalized, and engaging digital experiences across various channels. </li><li>Features: Combines CMS capabilities with additional tools like customer data management, analytics, personalization, e-commerce, and more. </li><li>User Experience: Targets a wider audience, including marketers, developers, and IT professionals, to enhance overall digital experiences.    </li></ul>There doesn’t have to be a choice between a CMS and a DXP platform. Depending on the specific needs and goals of your organization and with proper planning and architectural design of your platform, a Drupal CMS can act as the base. Over time, additional features can be incorporated to create a full suite of DXP components. Shifting away from a monolithic approach to a single code base and process, IT professionals can opt for a decoupled system. This approach facilitates the gradual integration of features, ensuring smoother scalability, upgrades, and time-to-market advantages.            <h3 id="strategy-#1:-start-with-drupal-at-the-core">Strategy #1: Start with Drupal at the core</h3>Starting with Drupal at the core of the platform of your DXP offers significant benefits. Drupal is a powerful and flexible open-source CMS, particularly when used in higher education. It has gained exponential popularity for its versatility and extensibility. Drupal provides a highly flexible framework that allows developers to customize and tailor the platform to meet specific project requirements. Its modular architecture enables the creation of custom features and functionalities, making it suitable for a wide range of web applications that can be integrated over time such as behavioral analytics with personalization and marketing automation. It offers a user-friendly interface for content creators, allowing them to easily publish, edit, and organize content and the content modeling and structuring features make it efficient for managing diverse types of content.           Drupal is well-suited for projects of varying scale which is why it can be so powerful for scale across a multi-channel DXP content delivery model. Whether you are building a small website or a complex enterprise-level application, Drupal's scalability ensures that the platform can grow with your project's needs and publish content from one database to all your channels. It also offers strong support for APIs, facilitating integration with third-party services and applications which is crucial for creating interconnected systems that a DXP will rely on.The Drupal ecosystem includes a vast library of modules and extensions that extend the platform's functionality. This rich repository allows developers to leverage pre-built solutions, saving time and effort in development. Lastly, Drupal is committed to continuous innovation, regularly releasing updates and new features. This ensures that projects built on Drupal can take advantage of the latest technologies and trends in web development. Therefore, as the Drupal community actively expands its product roadmap, there are increasingly more modular components that help with creating core DXP features.           <h3 id="strategy-#2:-optimize-drupal-for-decentralized-authoring">Strategy #2: Optimize Drupal for decentralized authoring</h3>Optimizing Drupal for decentralized authoring while maintaining centralized brand consistency involves strategic planning, configuration, and the implementation of specific features. This will act as the authoring foundation for your enterprise-scale higher ed DXP, accommodating users with varying levels of access and roles as the platform extends. The key is to allow for users to grow within the system, striking the right balance between control, scalability of content and marketing activities, and the preservation of brand consistency. Starting this process involves establishing a well-defined content structure and modeling strategy, including a clear definition of content types, fields, and relationships to ensure consistency across various content creators and website sections. The design should be separated from the data structure, so that authors do not have to worry about breaking UI whether they’re creating content or setting up rules for marketing automation.        Leverage Drupal's role-based permissions capabilities to assign specific roles and permissions to different content authors. Ensure that decentralized authors have appropriate access levels based on their responsibilities while maintaining control over critical brand elements. Implement a content moderation workflow to control the content lifecycle. Define stages such as draft, review, and publish to enable centralized oversight and approval before content goes live. This ensures brand consistency and quality control.     Store brand assets (logos, images, style guides) in a centralized location within Drupal. Provide decentralized authors with easy access to these assets through a media library or asset repository to maintain brand consistency in visual elements. Develop custom content templates to guide content authors in creating consistent content. Templates can enforce standardized layouts, styles, and branding elements, ensuring a cohesive user experience across the site. Maintain consistency in categorization and tagging by using shared taxonomies and vocabularies. Centralize the management of categories to avoid content fragmentation and ensure that similar content is categorized uniformly. Using permissions, you can define which assets can be shared among users within the central Drupal instance. Lastly, provide training and ongoing support for content authors to ensure they understand and adhere to brand guidelines. Foster a collaborative environment where decentralized authors feel empowered to contribute while respecting brand consistency.                <h3 id="strategy-#3:-extend-drupal-over-apis-using-microservices-">Strategy #3: Extend Drupal over APIs using microservices </h3>Extending Drupal over APIs can transform the CMS into an open Digital Experience Platform (DXP) tailored for higher ed, providing flexibility, and delivering a seamless and personalized user experience across various channels. A major advantage of a microservices approach is the ability to scale individual services independently. By extending Drupal with microservices, you can ensure that specific components, such as authentication or search functionality, can scale horizontally based on demand, optimizing performance and resource utilization. This allows Drupal to offer personalized content recommendations, dynamic layouts, and targeted experiences based on individual user preferences and interactions. First, break down Drupal's monolithic structure into smaller, independently deployable services. Each microservice should represent a specific business capability, such as content management, user authentication, or personalization. This decomposition allows for agility and scalability, as each microservice can evolve independently. With APIs at the core, seamlessly integrate third-party services and applications into the DXP, enabling Drupal to act as a central hub orchestrating interactions and ensuring a cohesive user experience.Adopt an API-first design approach to expose microservice functionalities through well-defined APIs. Drupal, serving as the central content management microservice, provides APIs for content creation, retrieval, and modification, promoting smooth communication and data exchange with other microservices. Integrate user authentication services, recommendation engines, or analytics platforms as separate microservices, fostering a modular and extensible higher ed DXP.Implement DevOps practices for continuous integration and deployment (CI/CD), enabling independent development and faster release cycles, while also reducing the risk of system-wide failures during updates. Monitor and analyze the microservices architecture using centralized tools to gain insights into performance, reliability, and user interactions for quick issue identification and continuous improvement.Engage with the Drupal and broader higher education community, collaborating for knowledge sharing and adopting best practices. This approach ensures that the higher ed DXP remains open, extensible, and aligned with industry standards. Extending Drupal over APIs using a microservices approach enables the creation of a flexible, scalable, and personalized higher ed DXP, preserving Drupal's renowned content management capabilities.<h3 id="strategy-#4:-build-with-security-as-your-foundation">Strategy #4: Build with security as your foundation</h3>Securing your higher ed DXP is crucial in the evolving digital landscape, where cyber threats persist and grow more sophisticated. As your DXP scales, it becomes an attractive target for cyber attackers. Adopting a security-first approach ensures resilience, safeguards sensitive data, and mitigates risks.Drupal prioritizes security with a robust security model and dedicated team, following best practices and regular updates. Enhance DXP security with thorough threat modeling, incorporating secure design principles, and adopting a defense-in-depth strategy. Identify possible threats, vulnerabilities, and attack vectors specific to your solution. Understanding the potential risks allows you to proactively design security measures. Incorporate secure design principles from the outset. Embrace the principle of least privilege, implement proper data encryption, and follow the principle of defense in depth. Design your solution with security controls at multiple layers, making it more challenging for attackers to exploit vulnerabilities. Train developers in secure coding practices, conduct regular code reviews, and adhere to data protection regulations, industry standards, and legal requirements. Make sure your team stays informed about changes in compliance standards and update your security measures accordingly. Implement robust authentication and authorization mechanisms. Use strong and adaptive authentication methods, such as multi-factor authentication (MFA), to verify user identities. Define and enforce granular access controls to ensure that users and systems have the minimum necessary privileges. Perform regular security audits and penetration testing to assess the effectiveness of your security controls. Identify vulnerabilities and weaknesses through simulated attacks, allowing you to remediate issues before they can be exploited in real-world scenarios.  Develop and regularly test disaster recovery and business continuity plans. In the event of a security incident or a system failure, having a well-defined plan ensures a swift response, minimizing downtime and data loss.            Encrypt sensitive data both in transit and at rest. Use industry-standard encryption algorithms to protect data from unauthorized access. Implement secure key management practices to safeguard encryption keys. Implement robust security monitoring tools to detect and respond to security incidents in real time. Set up alerts for suspicious activities and establish an incident response plan to quickly contain and mitigate security breaches. Since Drupal requires regular module updates for security patches, deploy a dedicated team to keep up with this process. Keep all software components, frameworks, and libraries up to date.For developers, marketers, and authors of your DXP, educate them on security best practices and raise awareness about social engineering tactics. Human error is a common cause of security breaches, and a well-informed workforce is a crucial line of defense.Engage with the broader security community, participate in information-sharing forums, and stay informed about emerging threats and vulnerabilities. Collaborating with the community enhances your organization's ability to stay ahead of evolving security challenges. By integrating security into the core of your solution, you create a robust and resilient fortress against potential threats. This proactive approach not only safeguards your higher ed organization but also establishes a foundation of trust in your solution's security posture.      <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Empowering Higher Ed: 4 Strategies to Transform your Drupal CMS into an Open Source DXP at Scale 

jonstewart

<hr /> As content goes global, the need for reliable and accurate translation is exploding. While a multitude of tools exist to automate the translation function – everything from <a target="_blank" href="https://translate.google.com/">Google Translate</a> to <a target="_blank" href="https://cmscritic.com/products/weglot">Weglot</a> – they sometimes lack the foundation of an experienced services arm that reinforces the quality and nuance.This is where <a target="_blank" href="https://www.argotrans.com/">Argo Translation</a>, a Chicago-based language services company, is breaking the language barrier. The company recently announced the launch of its new <a target="_blank" href="https://www.argotrans.com/technology/cmsconnect">CMSConnect solution</a> for digital platforms, which marks another milestone in its strategy to build innovative technology solutions that enhance the translation experience.Argo Translation provides tailored professional translation services in more than 80 languages to a range of industries including legal, healthcare, manufacturing, and financial. It also provides guaranteed certified translation quality.CMSConnect is the firm's cross-platform multilingual suite. It seamlessly pipes in source content from numerous PIM, CMS, CRM, and DAM platforms and translates it into nearly any language. This enables companies to accelerate the delivery of digital content with less friction, providing a more streamlined approach to reaching international markets or a diverse workforce that speaks multiple languages. “We are very excited about the release of CMSConnect,” said <a target="_blank" href="https://www.linkedin.com/in/argondizzo/">Peter Argondizzo</a>, Co-Founder of Argo Translation. "It allows us to deliver peace of mind through a care-free implementation that becomes part of our customer's process – not an additional process that takes time to train and requires additional resources for implementation."<h3 id="making-translation-easier-across-multiple-dx-platforms">Making translation easier across multiple DX platforms</h3>As its name indicates, CMSConnect delivers its translation capabilities to content management systems. But it's more than a CMS solution – and powers several PIM, DAM, and CRM systems.This currently includes a bench of industry-leading platforms, including <a target="_blank" href="https://cmscritic.com/products/akeneo">Akeneo</a>, <a target="_blank" href="https://cmscritic.com/products/inriver">InRiver</a>, <a target="_blank" href="https://cmscritic.com/products/microsoft-sharepoint">SharePoint</a>, <a target="_blank" href="https://cmscritic.com/products/sitecore">Sitecore</a>, <a target="_blank" href="https://cmscritic.com/products/kentico">Kentico</a>, <a target="_blank" href="https://cmscritic.com/products/umbraco">Umbraco</a>, <a target="_blank" href="https://cmscritic.com/products/adobe-experience-manager">Adobe Experience Manager</a>, <a target="_blank" href="https://cmscritic.com/products/hubspot">HubSpot</a>, SFDC, and <a target="_blank" href="https://cmscritic.com/products/wordpress">WordPress</a>. In each case, CMSConnect makes the process easy by translating content into nearly any language using a platform's native features. One of the key benefits is reduced overhead. With CMSConnect's plug-and-play implementation, there's no reliance on developer resources to get up to speed quickly. The submission process is simple, requiring only a few clicks. CMSConnect also reduces the cost of translation by lowering the setup and maintenance costs.<h3 id="ideal-for-e-commerce,-product-management,-and-more">Ideal for e-Commerce, product management, and more</h3>Argo Translation's solution has a strong focus on e-commerce and product management professionals who have domain over an extensive product catalog. It's also a good fit for HR professionals who need to publish timely communications to non-native English-speaking employees via their employee website, or marketing professionals who need to connect with international audiences at the speed of their market.The CMSConnect option for Akeneo – a product information management (PIM) system – crystallizes the value of the platform, helping users manage accurate and complete information for their product catalogs and dealing with the complexities this can create when translating content into different languages.The Akeneo connector makes the whole process easier by translating numerous catalogs into different languages with ease. It eliminates the need for manual file transfer, management, and tracking of changes, in addition to removing any cutting and pasting of translations. CMSConnect also provides built-in security, integration, and features that fit within your existing processes.Learn more about CMSConnect at <a href="argotrans.com/technology/cmsconnect">argotrans.com/technology/cmsconnect </a>

Argo Translation's New CMSConnect Streamlines Digital Platform Translations

<hr /> <a target="_blank" href="https://cmscritic.com/critics/ryan-breen">Ryan Breen</a> is CTO at Fastr, a digital experience composition platform built for e-commerce, and a CMS Critic Contributor. To differentiate, e-commerce businesses need to deliver the right content to the right audiences. But the “right content” and the “right audience” change every single day.That means you have to make data-optimized content changes at the same pace. That’s your minimum viable content velocity. But you’re stuck: meaningful content changes require developer intervention. AI, 2024's proposed solution to all velocity problems, only exacerbates this problem. It’s boosting the content creation pace across departments faster than speeding up developer release cycles.<h3 id="presentation-is-content">Presentation IS Content</h3>The traditional approach of minor tweaks – like adjusting copy or shuffling UI elements – barely scratches the surface. These changes are superficial, allowing for only cookie-cutter modifications. What we need goes deeper, demanding a radical shift in how content is presented. This is about more than aesthetics; it’s about structural transformation.Consider the scale of change required: the capability to serve entirely different layouts of your product detail page (PDP) to various audience segments. Take a case study where analytics reveal that users coming from search engines exhibit distinct shopping behaviors. They are more inclined to purchase related products than the specific SKU they initially viewed. The logical move? Experiment by altering the PDP layout for these users, placing related products prominently at the top, instead of their usual position below the fold.This approach isn’t about making a single change. It’s about the ability to test a multitude of visual treatments – 5, 10, even 20 variations – to pinpoint what truly engages your audience. And this testing isn’t static; it evolves daily, adapting in real time to the insights gathered.<h3 id="the-ai-productivity-paradox">The AI Productivity Paradox</h3>The advent of AI in business operations presents a profound challenge I call the “AI Productivity Paradox.” On the surface, AI technologies promise significant productivity gains across the board. Marketing and e-commerce teams are leveraging AI to generate a flood of innovative ideas, scaling their creative output to levels previously unimaginable. Imagine this: 20 individuals in e-commerce and marketing now produce 200 times as many viable, impactful ideas each day as they did last year, thanks to AI tools at their disposal.To put this into perspective, consider the equation: (A) the number of ideas generated by the team, times (B) number of target audience segments, compounded by (C) the multiple variants you need to test to get a strong signalIf A is now 200 and B and C are anything above 0, a development team is now staring down the barrel of a combinatorial explosion of demands. A neverending, ever-growing influx of content change initiatives that must be handled with no latency.At the same time, every other part of the business was already waiting on development for site updates. It’s not like development teams anywhere match a business's needs for velocity. Now, this explosion of creative output from e-commerce and marketing teams – amplified by AI – will blow open an ever-widening gap in productivity.This disparity is not just a logistical headache; it’s a strategic bottleneck that stifles innovation, slowing down the essential process of testing and learning. Without a shift towards more scalable, developer-independent systems for executing these ideas, the promise of AI-enhanced productivity is a bottleneck – not a breakthrough.<h3 id="speed-wins">Speed Wins</h3>In today’s e-commerce landscape, agility goes beyond making superficial tweaks with ease (and, sorry, your CTA text is superficial). Agility is about enabling immediate, profound shifts in how content engages and converts. Traditional approaches, marked by delays and developer bottlenecks, miss the rapid pace at which market trends evolve. All content must adapt as fluidly as consumer preferences and market dynamics do, unencumbered by the grindingly slow human latency of development time.And no: clunky, semantically void page builder components aren’t a solution. Their limited scope and bulky controls make them cookie-cutter templates with more steps. Today, we’re giving marketers components like a “carousel with 4 images.” Turning that into a labyrinth of dropdowns so they can spend hours composing a “carousel with 4 images” component into a “carousel with 4 images grouped vertically on desktop but not on mobile and with a translucency effect on hover on desktop” isn’t going to get us where we need to go.Instead, we envision a future where developers empower e-commerce, marketing, and AI tools with the capability to design every pixel of the Product Detail Page (PDP) and sculpt every underlying interaction. This isn’t about providing a bigger box of basic tools; it’s about handing over the keys to the entire workshop. In this new world, developers focus on creating sophisticated, flexible environments that offer total creative control – environments where non-technical teams can intuitively design, test, and refine every aspect of the e-commerce experience without compromise.By stepping away from the bottleneck and repositioning themselves as enablers, developers unlock the full potential of their colleagues in e-commerce and marketing. This shift is critical. It’s about equipping those closest to the customer with the means to apply their insights and ideas directly, in real time, without the mediation of cumbersome, limiting tools.This is how we get something more than pain and dashed hopes from our AI investments.This is how we overcome the AI Productivity Paradox. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

How to Free Your e-Commerce Business from the AI Productivity Paradox

ryan-breen

<hr /> DAM is having a moment right now. And it's not just the publication of <a target="_blank" href="https://www.forrester.com/blogs/announcing-the-dam-wave-q1-2024/">Forrester's Q1 Wave Report for Digital Asset Management Systems</a>, which hit the streets today. That's certainly adding to the gravitas.No, “DAM” is overflowing for a number of reasons. For starters, brands are creating an epic deluge of content. It's undeniable, but it's also perfectly logical. We live in a world that thrives on digital detritus, and modern creative tools have made it easy to produce an unthinkable number of assets at lightning speed. But therein lies the problem: how do you manage it all? Add to that the very real phenomenon of generative AI, which is rippling across the functionality landscape with terrific force. As brands automate and scale the production of the assets they're producing – driven in part by personalized variants and test iterations – marketing departments are under increasing pressure to police the streets and maintain governance.As much as AI is part of the problem, it's also presenting itself as a solution. Such is the case with <a target="_blank" href="https://cmscritic.com/acquia-dam-bolsters-search-share-and-analytics-capabilities">Acquia DAM</a> (formerly Widen), which has been piloting a new bench of AI capabilities – some of which were announced at Engage Boston, which I <a target="_blank" href="https://cmscritic.com/from-accessibility-to-ai-and-beyond-five-key-takeaways-from-acquia-engage-boston">covered in detail here</a>. The company has been innovating on the edge with generative AI for quite some time, injecting its DAM with search and share features and a <a target="_blank" href="https://cmscritic.com/acquia-dam-introduces-new-generative-ai-features-for-product-and-image-descriptions">product and image description generator</a> last year.Today, <a target="_blank" href="https://www.acquia.com/">Acquia</a> introduced a new set of integrations for its digital asset management solution, designed to expand its brand management capabilities. The company says the integrations with <a target="_blank" href="https://www.acquia.com/products/acquia-campaign-studio">Acquia Campaign Studio</a>, <a target="_blank" href="https://stock.adobe.com/">Adobe Stock</a>, and <a target="_blank" href="https://translate.google.com/">Google Translate</a> will reduce the complexity of maintaining consistent brand experiences across digital channels – and help marketing and creative teams save time and squeeze more value from their content assets.As Acquia knows too well, brands aren't showing any signs of slowing their content hustle. In fact, it's quite the opposite: they need to differentiate with fresh and relevant content to power their marketing campaigns and drive more clicks and purchases. That includes harnessing an ever-growing landscape of visual product imagery, graphics, and more.I had a chance to connect with <a target="_blank" href="https://www.acquia.com/about-us/team/jake-athey">Jake Athey</a>, Vice President, Sales and Go-to-Market, DAM and PIM at Acquia. He's the muscle behind the ever-growing mountain of digital assets, helping to evangelize Acquia's solutions through the marketer's lens. As a DAM and PIM expert, he brings a deep understanding of the evolving landscape – a journey he began during his time at Widen.“Brand leaders today are looking to free up their teams to be more creative and to use digital content assets in new ways,” he said. “These new integrations help customers scale their use of digital content across digital channels and across regions to deliver a better brand experience in less time.”<h3 id="beef-up-marketing-automation-with-acquia-campaign-studio">Beef up marketing automation with Acquia Campaign Studio</h3>First and foremost, Acquia DAM is now integrated with Acquia Campaign Studio – the company’s full-scale marketing automation solution. The integration leverages Acquia’s instant search connector tool, so once a user is authenticated in the DAM connector within Campaign Studio, they can search, view, and select the asset of their choice within Campaign Studio’s email and landing page builders. Here's something really cool: by tapping this connection, any pictures in emails or landing page builders dynamically change when they're updated in Acquia DAM. This has a potentially huge benefit for marketing teams as it will not only save time but also reduce the chance of using off-brand or unapproved content. As you might imagine, this is super valuable for brands that have hundreds – or even thousands – of assets in various places to support decentralized users and brands (think franchises or distributors).<h3 id="access-images-with-ease-via-adobe-stock--">Access images with ease via Adobe Stock  </h3>The Adobe Stock integration offers what you might expect from a CMS or DXP stock image connector, reducing the friction of accessing images, video, or other digital assets in one place while piping in essential metadata. But Acquia DAM goes beyond the typical by providing a more enhanced UX with smoother workflows. Creative pros can choose which types of Adobe Stock assets to monitor and sync, and the integration handles file copying and categorization in Acquia DAM. “Our new Adobe Stock integration simplifies the creative workflow for our customers significantly by automating the syncing of newly licensed assets from Adobe Stock directly into Acquia DAM,” Jake said. “This means that as soon as a customer licenses a new asset on Adobe Stock, it’s automatically uploaded to DAM, along with important metadata like the asset’s ID, title, and keywords. Users can tailor this integration to their needs by choosing which types of assets they want to sync, such as photos, illustrations, and videos.”Jake also explained that the setup uses <a target="_blank" href="https://www.oauth.com/">OAuth Server-to-Server</a> credentials. Customers need only provide their Client ID and Client Secret specific to their Adobe Stock account to enable a secure connection. But once established, the rest should be cream cheese. It's worth noting that Acquia DAM also provides long-standing integrations with <a target="_blank" href="https://www.gettyimages.com/">Getty Images </a>and <a target="_blank" href="https://www.shutterstock.com/">Shutterstock</a>, both of which offer well-documented API recipes for integrations. The real magic is how a platform harnesses these capabilities and surfaces the value. “The Adobe Stock integration follows a similar automated approach to syncing assets,” Jake said. “Since this is a managed integration, there will be no need for a new user interface – everything is syncing in the background to make things easy for users.”<h3 id="interpret-more-accessibility-with-google-translate">Interpret more accessibility with Google Translate</h3>Language translation and localization is finally becoming table stakes for globally-aware brands (although it's a mystery why it's still missing on so many sites). Still, software UX is often overlooked. Acquia aims to mitigate that by adding Google Translate to its DAM, helping to ensure that branded content is accessible, searchable, and relevant to diverse users and groups. It's simple: customers can use Google Translate to automatically translate text from selected metadata fields. The DAM automatically repopulates these fields with translated content in up to 20 languages. For those of us who have integrated Google Translate at the web layer, we know there's been a palpable lack of control and customizability. I asked Jake how Acquia is enabling DAM users to “massage” translated content if the text requires any additional tweaks after a human review. There are certainly other tools that facilitate this, and it's a place where AI is also making a dent in the obstacles. “With Acquia’s flexible permissions and dynamic path notifications, customers can set up their desired governance and workflow processes, so they have an opportunity to check translations,” he said. “As with the use of generative AI, we believe incorporating human review into a translation workflow is a best practice. We also have an OpenAI Translate Native Integration on our product roadmap.”<h3 id="building-on-a-legacy-of-ai-innovation">Building on a legacy of AI innovation</h3>As previously noted, AI has long been a part of the Acquia roadmap. Last May, when I <a target="_blank" href="https://cmscritic.com/acquia-taps-its-modular-open-source-legacy-to-drive-the-composable-future">spoke to Deanna Ballew</a>, SVP of Product at Acquia, she shared a bit about where the company's AI investment had started – and how the open source Drupal community was already innovating around ChatGPT connectors at the CMS level. I asked Jake about the recent AI announcements from Engage last November, and what we might expect on the horizon. He gave me a bit of what's in the rearview mirror, and a peek through the windshield. He started with Acquia DAM’s Workflow AI Assistant, which was launched in 2023, and supports the ability to more efficiently generate new creative and copy ideas and editing suggestions to streamline work-in-process cycles. It also helps to keep teams on brand, accelerating time to market with new brand assets.This was followed by the aforementioned AI-powered keywords and automated description, caption, and alt-text generation – which supports the ability to catalog, find, and use new assets more quickly. Automated alt-text generation also supports SEO and accessibility to optimize brand asset performance across digital channels.“Acquia DAM’s new search by color and color filters help users to quickly find and use available assets based on design color scheme and brand colors,” he shared. “The new integration with Adobe Stock and our existing integration with Shutterstock also tap into the generative AI capabilities of those platforms.”So what's next? Some pretty sophisticated stuff.“New AI capabilities to come include advancements to smart tags, facial recognition, focal point cropping, video transcription, and AI-based GPT video generation and editing,” Jake said. “With all of these and more, our intention is to enable marketers and creative pros to accelerate content velocity, while staying true to brand standards and supporting richer digital experiences for their own customers.”<h3 id="what's-ahead-in-2024-for-acquia-dam?">What's ahead in 2024 for Acquia DAM?</h3>As Jake pointed out, Acquia DAM supports a wide range of organizations across sizes and industries. Acquia proper continues to support Fortune 1000 organizations, including a majority who have – or are replacing – a DAM.  “With these innovations, Acquia is also focused heavily on serving the late-stage majority of first-time DAM buyers in the middle market, with an estimated 200,000 companies in North America, Western Europe, Australia, and Japan,” he confirmed. “Acquia is focused on brands and agencies alike, and serves marketing communications, creative/design, digital/web, product, and e-commerce functions.”In terms of target industries, the company is focusing on manufacturing and engineering, supply chain and logistics, financial services, food and beverage (including manufacturers, distributors, grocery stores, and restaurants), consumer goods, healthcare, education, and more. Obviously, this list can become more granular, but it provides a high-level snapshot of where they see opportunities for DAM to make a difference.As I previously discussed with Deanna Ballew, the theme of composability remains key to Acquia (and just about every platform in the industry). As a legacy DXP with a more traditionally monolithic posture, Acquia has been making strides to decouple its products in the right places, so customers can leverage the efficiencies of a composed DXP while purchasing a specific product within the portfolio. To that end, it's worth reinforcing that Acquia DAM may be used as a standalone solution or with content management systems such as Drupal or other products in the Acquia Digital Experience Platform (Acquia DXP).You can learn more about <a target="_blank" href="https://www.acquia.com/acquia-dam/features/ai">Acquia DAM’s native AI features</a> and the new set of <a target="_blank" href="https://www.acquia.com/products/marketing-cloud/dam/integrations">DAM integrations </a>on its website. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Acquia DAM Adds New Integrations to Enhance Brand Management 

<hr /> <a target="_blank" href="https://cmscritic.com/products/strapi">Strapi</a> has always been a tenacious force in the headless CMS field. The platform delivers a healthy dose of customizability to its users and can play on the REST and GraphQL sides of the API court – maximizing its extensibility for querying content. Overall, it's super flexible for developers, earning it a whopping 60,000 stars on GitHub. Not too shabby.Last year, Strapi reached over 4 million downloads, putting it at the top of the open source headless CMS rankings. At the same time, <a target="_blank" href="https://cloud.strapi.io/">Strapi Cloud</a> – the company's fully managed offering – exploded to over 500 customers. These include major global brands like Publicis Sapient.According to Strapi's community forum, Strapi Cloud was a direct response to users who loved the Strapi platform, but weren't interested in managing servers, dealing with scalability, or coping with other laborious tasks (for those of you who still deal in Chef scripts, you know what we're talking about). The company really endeavored to reduce the friction around the overall developer experience, making it easier for users to get value from Strapi without the complexities of server management.Now, to make things even easier, Strapi Cloud has introduced a new Developer Plan for individuals and small businesses. Designed with simplicity and accessibility in mind, the Strapi Developer Plan is specifically tailored to meet the evolving needs of developers in the early stages of their project lifecycle, offering out-of-the-box features and an exceptional developer experience. The new plan will join Strapi's bench of offerings, which also includes Community, Pro, Team, and Enterprise tiers. "We're excited to introduce the Developer Plan as part of our commitment to supporting the vibrant developer community," said <a target="_blank" href="https://www.linkedin.com/in/pierre-burgy-strapi-%F0%9F%9A%80-88671673/">Pierre Burgy</a>, CEO of Strapi. "We recognize the importance of providing developers with tools that are not only powerful but also accessible and easy to use. With the Developer Plan, we aim to empower developers to turn their ideas into reality without the complexity and cost often associated with managing infrastructure."<h3 id="new-pricing-and-greater-transparency--">New pricing and greater transparency  </h3>Strapi's Developer Plan offers some key advantages, starting with the price tag. The new model offers a competitive monthly subscription fee of only $29, giving developers access to critical features while eliminating hidden costs. This reflects a commitment to make the pricing experience more predictable for users.The Developer Plan has also been designed with scalability in mind, enabling Strapi Cloud to literally grow with your project. For example, you can add up to two additional seats at $15 per month per seat, supporting greater collaboration while standing firm around affordability.When it comes to essential resources, Strapi Cloud is also doubling down on value. The Developer Plan starts with 15 GB of storage and 50 GB of bandwidth, allowing developers to expand as needed at cost-effective rates. The entire Developer Plan is also focused on transparency, providing clear – and fair – overage charges. This ensures developers only pay for what they need with no “gotchas.” In fact, the asset storage costs are fairly generous, with overage fees decreasing to just $0.5 per extra GB of storage for the Developer plan (and $0.6 per extra GB for Pro and Team plans).Who is the plan ideally suited for? According to Strapi, it's a great fit for Individual developers, freelancers, and small teams working on projects such as personal blogs, portfolio sites, small e-commerce platforms, or experimenting with new web technologies. <h3 id="elevated-features-to-enhance-the-developer-experience">Elevated features to enhance the developer experience</h3>In addition to the Developer Plan, Strapi Cloud has introduced several new features. This includes new regions, automated backups, and custom domains. With upcoming SOC2 certification, a new developer-friendly Command Line Interface (CLI), and advanced multi-environment support, Strapi Cloud is now capable of scaling from small projects – such as personal blogs and portfolio sites – to larger corporate sites and composable applications. Additionally, Strapi Cloud's outstanding uptime performance over the past year demonstrates a significant leap forward in its ability to deliver a robust, secure, and highly customizable platform. Strapi has also launched a new initiative that offers significant Strapi Cloud discounts to qualifying open source and non-profit projects. Visit the company's website to learn more about the steps to qualify for this program.  <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Strapi Cloud Introduces New Developer Plan with Additional Features

<hr /> <a target="_blank" href="https://cmscritic.com/critics/nazy">Nazy Fouladirad</a> is President and COO of Tevora, a leading global cybersecurity consultancy, and a CMS Critic contributor. Most organizations today are increasingly dependent on more than just their internal teams and on-premise solutions to drive their businesses forward. The growing popularity of cloud platforms and "as-a-service" models across various industries has also led to a significant increase in organizations partnering with third-party providers.However, while collaborating with multiple external vendors and service providers can help organizations expand, it can also introduce new risks. Given the rise in cybercrime and strict regulatory standards today, the need to have a mature third-party risk management program is essential to ensure <a target="_blank" href="https://cmscritic.com/how-to-secure-your-cms-in-5-steps">their data is secure</a>, especially when handled by those outside the company.<h2 id="recognizing-the-risks-of-third-party-vendors">Recognizing the Risks of Third-Party Vendors</h2>Establishing strong business partnerships is an important component of business growth. Whether hiring an outside marketing firm to drive brand awareness or working with a managed services provider to outsource IT and cybersecurity, the right partnerships help businesses operate more efficiently. However, it's important to be aware of certain risks associated with extending your operations outside your organization.When vendors require access to confidential business information to offer their services, the duty to protect that data starts moving beyond the company's immediate reach. Without due diligence, this can pose <a target="_blank" href="https://www.checkpoint.com/cyber-hub/cyber-security/what-is-cybersecurity/biggest-cyber-security-challenges-in-2023/">significant security challenges</a>, particularly if your partners aren't upholding the safety standards your business adheres to. While most service providers are obligated by data protection laws and regulations to protect sensitive client information, the reality is that not all companies are equally secure. Besides the financial risk associated with a major business disruption across connected services, businesses may also face significant fines and penalties if they fail to maintain regulated compliance standards that govern their specific industry.<h2 id="what-are-third-party-security-&amp;-compliance-audits?">What are Third-Party Security &amp; Compliance Audits?</h2>For organizations that need to have more transparency regarding potential security risks that may be present with a third party, security risk and compliance audits are essential. A third-party security and compliance audit or assessment is a methodical review process handled by outside risk management experts to thoroughly vet the security standards of any business partnership.Depending on the industry your organization operates in, there are a variety of different assessments or audits that can be used to identify any areas of concern.For example, a SOC 2 attestation, sometimes referred to as a <a target="_blank" href="https://www.tevora.com/what-is-a-soc-audit/">SOC audit</a> or SOC certification (which is technically incorrect), is often used to benchmark internal control frameworks in the following Trust Criteria:<ul><li>Security</li><li>Privacy</li><li>Confidentiality</li><li>Availability</li><li>Process Integrity</li></ul>These attestation reports are the opinion of a CPA firm and identify an opinion of conformity against the selected Trust Criteria. It is important to note that not all SOC 2 reports test all five Trust Services Criteria, as it depends on scope. This is similar but holds a bit less rigor than an <a target="_blank" href="https://www.tevora.com/blog/what-is-an-iso-audit/">ISO 27001 audit</a>, which checks that systems and processes align with the framework established by the International Organization for Standardization.<a target="_blank" href="https://www.fedramp.gov/">FedRAMP High Authorization</a>, used for assessing Cloud Service Providers performing critical and essential services for Government Agencies, has over 400 controls and is even more rigorous than the ISO 27001 certification.To streamline third-party vendor assessments, some may use SOC 2, ISO 27001, HITRUST, or FedRAMPas alternative evidence for vetting vendors rather than conducting one-off assessments.<h2 id="steps-to-executing-third-party-security-&amp;-compliance-audits">Steps to Executing Third-Party Security &amp; Compliance Audits</h2>Conducting a third-party compliance audit is often left to risk management specialists due to the complexity of the process. While every audit can be different depending on the depth and scale of the partnership, most external audits will follow a similar formula.Below are the typical steps used when executing third-party security and compliance audits:<h3 id="1.-identify-all-of-your-partnerships">1. Identify All of Your Partnerships</h3>Thoroughly evaluating the business's active partnerships is the first step before performing any type of third-party audit. Oftentimes, businesses may be primarily concerned with only one or two active partnerships they rely on regularly. However, having a completely transparent understanding of your complete risk profile requires identifying each and every vendor you engage with. This could be a supplier of physical goods, logistics companies that you currently contract, SaaS (Software-as-a-Service) providers, or a company where this is a direct change of company information.<h3 id="2.-tier-your-vendors">2. Tier Your Vendors</h3>Not all vendors are created equal. The most important vendors are those that you share the most sensitive data with, have access to your networks, host or build applications, have physical access to your facilities, or can interrupt your key business processes. These vendors are often referred to as Tier 1 vendors. Other vendors you may rely on but are not as critical can be considered Tier 2. Vendors that do not provide essential services – such as a coffee supply vendor or shipping provider – may be considered a Tier 3 vendor.  For Tier 3 vendors, just knowing that they are accounted for and have been identified as a Tier 3 vendor is all that is required. <h3 id="3.-build-a-plan-for-vendor-assessments-by-tier">3. Build a Plan for Vendor Assessments by Tier</h3>Working with a trained risk assessment professional, you should define the assessment, process, depth, and acceptable alternative evidence allowed for each tier of vendor.  By organizing your assessment process by Vendor Tier, you'll be able to narrow down the focus of your audits to the areas that are most critical for the services provided.Part of building a successful vendor assessment plan should start with the alignment of your company’s existing security framework to your Vendor assessment model (ISO 27000 series, NIST 800 series, HITRUST Certification, or FedRAMP/StateRAMP). Typically, more mature vendors will have their own security programs developed and backed by one of these frameworks. Having the ability to crosswalk between the frameworks can help show how your company’s security controls are implemented through outsourcing to these vendors. A tool commonly used within the Third Party Vendor Management space is the <a target="_blank" href="https://sharedassessments.org/sig/">Standardized Information Gathering (SIG) Questionnaire</a>, which helps map controls to various frameworks. The SIG Questionnaire has over 1000 controls, whereas the SIG Lite contains about 200 controls. Many Vendors will have a SIG or SIG Lite available for review during the third-party assessment process and this can be an effective way of getting standardized information from your vendors. <h3 id="4.-notify-your-vendors">4. Notify Your Vendors</h3>While certain portions of a third-party risk assessment can be managed without the direct involvement of your vendors and with the use of various monitoring tools, their participation is essential to complete an assessment. Many companies will make assessment requirements part of their new vendor onboarding process to ensure that all parties are aware of the potential for assessment before or during the length of the partnership. In any event, it's important to clearly lay out any requirements your business may have when it comes to completing assessments to ensure vendors are aware and willing to comply.<h3 id="5.-define-scope-of-engagement">5. Define Scope of Engagement</h3>Some assessments are much more comprehensive than others. In all situations, though, it's important to define the scope of engagement that will be required for each vendor. This is another area where understanding your risk categories will help, as it will assist in prioritizing engagement in the right areas and with the right teams. Doing so helps to avoid your vendors becoming overwhelmed with requests for information that could potentially cause strain on the relationship.<h3 id="6.-complete-the-review-and-identify-areas-of-improvement">6. Complete the Review and Identify Areas of Improvement</h3>After gathering the required information, your risk management team can produce a detailed review of potential areas of concern. Given the thoroughness of the data collected, some areas might need additional exploration to guarantee the review's accuracy and to ensure the insights provided are easy to understand and actionable.<h2 id="don't-let-your-third-party-risk-catch-you-off-guard">Don't Let Your Third-Party Risk Catch You Off Guard</h2>While your organization might prioritize and invest in proper security measures, not all vendors necessarily share that commitment. However, collaborating with skilled risk management experts can help confirm that all your partnerships value security and risk mitigation as much as you and your clients do. <hr /><h3 id="upcoming-conferences">Upcoming conferences</h3> <img style="width:29.67%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-connect-2024-logo.png" alt="CMS Connect 24 logo" /><h4 id="cms-connect-24"><a target="_blank" href="https://www.boye-co.com/conferences/cmsconnect24">CMS Connect 24</a></h4>August 6-7, 2024 – Montreal, CanadaWe are delighted to present our first annual summer edition of our prestigious international conference dedicated to the global content management community. Join us this August in Montreal, Canada, for a vendor-neutral conference focused on CMS. Tired of impersonal and overwhelming gatherings? Picture this event as a unique blend of masterclasses, insightful talks, interactive discussions, impactful learning sessions, and authentic networking opportunities. <img style="width:29.58%" src="https://cmscritic.com/ms-content/uploads/2024/01/cms-kickoff-2025-logo.png" /><h4 id="cms-kickoff-25"><a target="_blank" href="https://www.boye-co.com/conferences/cmskickoff25/tickets">CMS Kickoff 25</a></h4>January 14-15, 2025 – Tampa Bay Area, FloridaJoin us next January in the Tampa Bay area of Florida for the third annual CMS Kickoff – the industry's premier global event. Similar to a traditional kickoff, we reflect on recent trends and share stories from the frontlines. Additionally, we will delve into the current happenings and shed light on the future. Prepare for an unparalleled in-person CMS conference experience that will equip you to move things forward. This is an exclusive event – space is limited, so secure your tickets today.

Make Sure Your Vendors and Partners aren’t a Security Risk with Third-Party Security & Compliance Audits

nazy

Weglot - The easiest way to translate a website

The easiest way to translate a website

#18164c

Explore a wide range of informative articles, insights, and industry updates. Stay informed and ahead of the curve with our diverse collection of news and posts covering the latest trends and developments in the industry. Page - 28

News

Give your audience the best video experience

The easiest way to translate a website