CIO Priorities: Week of Dec 15–21

Biogen CIO Guy Hadari details "New Highways" strategy for multi-franchise growth. In a key interview, Hadari outlined how IT is shifting from single-product support (MS) to a diversified platform, highlighting an AI use case that compressed months of M&A due diligence into 10 hours.pharmavoice​

FDA signals major pivot to single pivotal trials. A December policy shift suggests the FDA may accept one pivotal trial instead of two for new drug approvals, placing immense pressure on R&D IT to ensure data quality and RWE robustness in that single shot.biospace​

Ransom payments fail to prevent headlines ("Streisand Effect"). New research confirms that life sciences organizations paying ransoms are just as likely to face public scrutiny as those that don't, while a new AI-enabled ransomware group ("FunkSec") targets the sector.blackarrowcyber+1​

Agentic AI identified as top 2026 trend. The shift from "AI assistance" to "autonomous execution" is defined as the critical leap for 2026, with governance and enterprise readiness—not technology—cited as the primary bottleneck.cdotimes​

From "Assistant" to "Agentic": Analysis published this week frames 2026 as the year software moves to "autonomous execution." For biopharma CIOs, this demands a shift in architecture from passive data lakes to active "Elevated Collaborative Intelligence" (ECI) frameworks that can support independent AI agents in workflows.cdotimes​

AI in M&A Due Diligence: Biogen revealed a concrete ROI win, using generative AI to ingest thousands of contracts during its HI-Bio acquisition (July 2024), reducing the diligence timeline from 3–4 months to just 10 hours. This sets a benchmark for IT's role in accelerating business development.pharmavoice​

Platform Consolidation via M&A: BMS’s acquisition of Orbital Therapeutics ($1.5B) and BioNTech’s integration of CureVac highlight a trend of platform consolidation. CIOs must prioritize interoperability strategies to rapidly onboard diverse modalities (e.g., circular RNA) into existing R&D data fabrics.biospace​

The "Streisand Effect" of Ransom Payments: Research released this week analyzing LockBit negotiations indicates that paying ransoms does not reduce the likelihood of media coverage. For CIOs/CISOs, this data point is critical for Board discussions on incident response strategies: payment buys neither silence nor reputation protection.blackarrowcyber​

New "FunkSec" Threat: Intelligence briefings warn of a new ransomware group, "FunkSec," which utilized AI-assisted tools to target ~85 organizations in December. The group’s use of AI lowers the barrier to entry for sophisticated attacks on pharma supply chains.linkedin​

Industrial Ransomware Rise: A sharp Q3/Q4 increase in industrial ransomware attacks puts manufacturing OT (Operational Technology) at heightened risk. Security leaders should review segmentation between IT and OT networks in manufacturing sites immediately.blackarrowcyber​

Single Pivotal Trial Paradigm: The FDA’s signaled move to reduce the standard requirement from two pivotal trials to one increases the stakes for clinical data management. IT leaders must ensure their clinical data platforms offer "high evidentiary standards" and real-time quality assurance, as there will be no "second chance" trial to correct data gaps.biospace​

Reducing Animal Testing: New draft guidance issued earlier this month on reducing non-human primate toxicity studies is pushing R&D groups toward in silico modeling. This creates an immediate demand for high-performance computing (HPC) resources to run complex biological simulations as regulatory-accepted alternatives.biopharminternational​

Data-Driven Commercialization: As Biogen and others pivot to rare diseases and immunology, commercial data platforms must be redesigned. The "blockbuster" model of the past (single massive sales force) is being replaced by precision engagement models requiring granular patient journey data.pharmavoice​

Strict "Format Hold" for Device Submissions: The FDA's updated eCopy Program guidance (effective Dec 2025) imposes strict technical standards. Submissions failing to meet specific naming or PDF structure rules will be placed on immediate "Format Hold," stopping the review clock—a critical process check for MedTech regulatory affairs IT systems.morulaa+1​

eSTAR vs. eCopy Clarification: While the FDA pushes for the fully electronic eSTAR format, the new guidance clarifies that legacy eCopy is still required for many submission types (PMAs, IDEs) unless explicitly mandated otherwise. Regulatory information management (RIM) systems must support both pathways seamlessly.elexes​

AI Device Marketing Submissions: Continued updates to the "Predetermined Change Control Plan" (PCCP) framework for AI/ML-enabled devices emphasize that IT must track algorithm versions and data lineage rigorously to maintain compliance without re-submission for every model tune.fda​

IT from "Basement to Front Line": Biogen CIO Guy Hadari emphasizes that the modern Life Sciences CIO must lead business transformation, not just support it. With the shift to multi-modality pipelines, IT's role is to "pave the highways" (integrate disparate R&D and commercial systems) before the business units even realize they need the road.pharmavoice​

Enterprise Readiness Gap: Analysis of 2025 tech trends suggests that "budget goes to die" not in AI procurement, but in the gap between AI capability and organizational readiness (governance, talent, identity management). 2026 budget planning should over-index on governance platforms rather than just raw model access.cdotimes​

M&A Integration Velocity: With M&A activity surging (J&J, Novartis, BMS), the ability of the IT operating model to rapidly ingest acquired IP and systems is becoming a primary competitive differentiator. "Due diligence" speed is now a valid KPI for IT performance.biospace+1​

Benchmark Your M&A Speed: Biogen’s reduction of due diligence from months to 10 hours using AI is a metric your Board will likely hear about. Investigate your own legal/BD workflows for similar generative AI opportunities.pharmavoice​

Review Ransomware Playbooks: Update crisis management plans to reflect the reality that paying ransoms does not prevent public disclosure. Focus investment on resilience and recovery rather than "hush money" contingencies.blackarrowcyber​

Prepare for "One Trial" Pressure: If R&D leadership moves toward single pivotal trial strategies based on new FDA flexibility, ensure your clinical data platforms are robust enough to support "zero-defect" data integrity.biospace​