September 2025 Summaries

Security teams in financial services and insurance companies face significant challenges due to high breach costs, complex compliance requirements, and the need to manage numerous disconnected systems. Forward-thinking organizations are leveraging Tines, an intelligent workflow platform, to automate and orchestrate critical security workflows, thereby enhancing security, compliance, and operational efficiency. Tines facilitates the seamless integration of disparate tools, transforming large volumes of data into actionable intelligence and ensuring crucial alerts are not missed. By automating responses to data risks, managing incidents, and preventing brand impersonation using a variety of integrated tools and processes, teams can focus more on innovation and staying ahead of potential threats. This centralized approach not only reduces risk and strengthens compliance but also creates comprehensive, tamper-proof audit trails that simplify regulatory reporting. By automating repetitive tasks, security teams can dedicate more resources to protecting customers and improving overall security posture.

Data has become a crucial asset for businesses, prompting the EU to implement regulations like the EU Data Act, which will take effect in December 2023 and enforceable from September 2025. This regulation aims to establish rules for data access, sharing, and use, especially concerning data generated by connected devices and digital services, to ensure fairness, transparency, and user control. Compliance with the EU Data Act is imperative, with non-compliance resulting in substantial penalties, and it necessitates IT and security leaders to focus on interoperability, auditability, and secure data handling by default. Intelligent workflow platforms like Tines can help businesses meet these requirements by offering API connectivity for seamless data flow, built-in audit trails, and the ability to automate compliance workflows, thus aligning IT, security, compliance, and legal functions to reduce operational friction and support organizational growth while meeting regulatory obligations.

Identity and access management (IAM) is crucial in modern IT environments, serving as the digital backbone for various operations, yet it often struggles to keep pace with the increasing complexity and speed of these systems. In 2025, attackers exploited stolen OAuth tokens to access Salesforce environments, highlighting how vulnerabilities in IAM, such as leaked credentials and weak identity signals, can lead to significant breaches. The challenges in IAM are exacerbated by patchwork systems, fragmented directories, and inconsistent adoption of security measures like multi-factor authentication, making these environments fragile and difficult to govern. Effective IAM requires orchestrating the entire lifecycle, ensuring quick access for employees, enforcing least privilege by design, and integrating audit evidence seamlessly. Starting with small steps such as automating approvals and scheduling access reviews can significantly enhance security and efficiency. IAM, despite its complexity, can be made both secure and efficient through orchestration, forming a foundation for agility and resilience in IT operations.

The bi-annual "You Did WHAT With Tines?!" (YDWWT) competition for Fall 2025 invites participants to showcase their most impressive workflows, offering a chance to gain recognition and win exclusive prizes, including an invitation to a Tines Builder Connect event in 2026. The competition encourages creativity and technical skill, with categories such as tech stack synergy, AI-powered workflows, interactive app building, and Tines fundamentals, along with a new category for best workflow narrative. Participants are encouraged to share their progress on social media, and every submission will be added to the Community Library, allowing others to learn from and be inspired by these workflows. All participants receive exclusive Tines merchandise, while category winners and the grand champion enjoy additional rewards and networking opportunities. The competition emphasizes the transformative impact of innovative workflows and the value of community engagement in advancing the Tines ecosystem.

AI adoption in IT departments is often heralded as a solution for streamlining operations, but it can inadvertently lead to increased complexity and tool sprawl, requiring additional integrations and governance. The solution to this problem lies in orchestration, which involves the coordinated execution of tasks and processes across multiple systems to ensure efficiency, security, and visibility. By integrating existing tools rather than adding new layers, orchestration reduces manual work, improves end-user satisfaction, and enhances IT's ability to focus on strategic priorities. This shift allows IT to move from a reactive support function to a proactive partner in business initiatives, as shown by a Forrester study indicating that 86% of IT leaders see orchestration as key to effectively scaling AI. The study emphasizes that orchestration not only boosts operational efficiency but also enhances compliance and governance by reducing silos and enabling smoother workflows.

Patch management is a crucial aspect of IT security, as illustrated by the Travelex ransomware attack, which was exacerbated by an unpatched vulnerability in a VPN. Effective patch management can prevent such breaches, which often originate from unpatched vulnerabilities, by seamlessly integrating security into IT workflows, thereby minimizing risks and maintaining business continuity. However, patch management faces challenges such as CVE overload, manual processes, system fragmentation, visibility issues, and end-user resistance. Tools like Tines offer a solution by orchestrating patch management, reducing manual effort, ensuring compliance, and providing complete visibility across environments. Tines has proven effective for various companies, significantly reducing unpatched vulnerabilities and streamlining updates, while maintaining end-user trust and supporting business growth. The platform allows IT teams to prioritize vulnerabilities, stage rollouts, and continuously optimize processes to enhance resilience and compliance as organizations scale.

Businesses are rapidly adopting AI, but many initiatives face challenges related to fragmentation, scalability, and governance, according to a Forrester Consulting study commissioned by Tines. The study, involving over 400 IT leaders from North America and Europe, identifies orchestration as crucial for scaling AI effectively and securely, with 86% of respondents acknowledging IT's unique position to lead this effort. Key barriers to AI scaling include governance and security concerns, budget constraints, difficulty in proving ROI, and fragmented ownership, which lead to siloed projects with limited impact. The research highlights orchestration as a solution to unify people, processes, technology, and workflows, thereby improving efficiency, building governance, and enhancing visibility across AI initiatives. IT is recognized for its strategic role in orchestrating AI due to its enterprise-wide visibility and ability to balance security with innovation, although its influence is often underestimated. To strengthen IT's strategic role, the study emphasizes the importance of greater department visibility, integrated data platforms, and executive sponsorship, enabling IT to drive secure and scalable AI that delivers business value.

Tines has introduced several new features and updates aimed at enhancing user experience and efficiency. Users can now quickly integrate Tines stories with their LLM ecosystems through a new action template for deploying Model Context Protocol (MCP) servers, and improved AI usage reporting helps track AI adoption and manage costs effectively. Case management has been streamlined with pages accessible within cases, configurable display settings, and distinct dashboard permissions. Additionally, action performance insights have been improved with metadata, and event pre-filtering reduces unnecessary triggers. New functions like JWK_TO_PEM and JWT_DECODE enhance data handling, while the "Resolve all" option simplifies change management. Notifications have been updated to include credential expiry alerts and streamlined case settings, and other enhancements include team object sharing, AI model selection in Workbench, and rich text formatting for case comments.

At the RSAC Conference, the surge of cybersecurity companies branding themselves as "agentic AI" providers sparked skepticism among attendees, with concerns about superficial rebranding and the risks of autonomous AI systems. Addressing these concerns, Tines has innovatively integrated AI agents within its intelligent workflows platform, allowing security analysts to enhance their processes without losing control. Tines combines deterministic workflow automation with non-deterministic agentic AI, enabling agents to independently explore solutions or collaborate with humans while maintaining oversight. This integration offers different levels of LLM control, ensuring that AI involvement aligns with specific security needs and operational requirements. By facilitating both autonomous and collaborative AI behavior, Tines empowers analysts to develop intelligent, context-aware workflows that can address complex security challenges while still being adaptable and under human supervision.

Financial services and insurance companies are grappling with increasing regulatory demands and evolving cyber threats, leading to the need for a shift from manual, reactive Governance, Risk, and Compliance (GRC) programs to automated, proactive systems. Current GRC practices are often burdened by outdated tools, manual processes, and siloed operations, which hinder efficiency and impede the ability to manage risks effectively. The growing digital landscape, especially with cloud adoption, has expanded the attack surface, making companies more vulnerable to cyber incidents and increasing the complexity of compliance requirements. With financial institutions facing a significantly higher rate of cyber attacks than other sectors, the integration of workflow orchestration and automation into GRC processes offers a pathway to enhance resilience, build trust, and foster growth by streamlining evidence collection, enabling real-time monitoring, and breaking down departmental silos. Mature GRC programs not only address compliance but also contribute to reducing operational risk and protecting customer trust, which is crucial in the competitive landscape of digital financial services. Firms are encouraged to start small, automate key pain points, and gradually evolve their GRC strategies to stay ahead of regulatory changes and cyber threats, ultimately transforming GRC from a compliance necessity into a strategic asset.