What a modern CTO should command.

A reference for what's table stakes — and where the field is still moving fastest. We've picked nine areas where the gap between a CTO who's current and one who isn't shows up most quickly in the work.

§ A1 / Intelligence

AI & Large Language Models

Frontier model selection, application architecture, prompt engineering, fine-tuning trade-offs, agentic patterns, and rigorous evaluation. The question isn't whether to use LLMs — it's where, in what role, with what guardrails, and how to know when it's working.

Most companies are still building first-time intuition for this. The cost of getting it wrong is more than burned budget; it's a year of organisational capital spent on the wrong thing.

§ A2 / Retrieval

Intelligent Search & RAG

Embeddings, vector search, hybrid retrieval, chunking strategy, and ACL-aware indexing. Applied to SharePoint, OneDrive, Confluence, Notion — wherever your institutional knowledge lives.

Most enterprises sit on terabytes of unsearched institutional knowledge. The technology to make it queryable in natural language exists today, but most implementations are naive (and dangerous, if they leak documents past their permissions). The hard parts are permissions, freshness, and grounding.

§ A3 / Data

Modern Data Stack

How data flows from operational systems into a place where the business can ask questions of it. Lakehouse architectures, ELT pipelines, semantic layers, data contracts, BI.

The line between "data team" and "engineering team" is blurring. AI features need clean data; product analytics needs it; finance needs it. The companies that get this right ship faster on every front.

§ B1 / Cloud

Cloud & Edge Architecture

Cloud platform choice, serverless trade-offs, edge compute, containerization, infrastructure-as-code. Cloud bills have outpaced developer salaries at many startups; edge compute and serverless have unlocked latency profiles that weren't possible five years ago.

The choice of platform is now a strategic question, not an IT one. So is the discipline around cost.

§ B2 / Platform

Developer Platform Engineering

The internal tooling and golden paths that make engineers fast. Internal developer platforms, service templates, deployment self-service, environment management.

The difference between a team that ships weekly and one that ships quarterly is rarely talent — it's leverage. Platform engineering is the highest-leverage internal investment a 20+ engineer organisation can make. Below that scale, it's usually premature.

§ B3 / Observability

Observability & Reliability

Metrics, logs, traces, SLOs, incident response, and post-mortems. As systems get more distributed — microservices, serverless, third-party APIs, AI calls — the ability to debug them depends entirely on instrumentation.

OpenTelemetry has standardised this in a way that wasn't possible three years ago. The companies that adopt it early avoid a vendor-lock-in trap that's painful to escape later.

§ C1 / Security

Security & Trust

Identity, access, secrets, networking, supply chain, and compliance — assembled into a posture that survives both an enterprise security questionnaire and a real attack.

Enterprise sales gates are getting tighter. Supply-chain attacks (Log4j, npm compromises) made executives pay attention. Zero-trust isn't a slogan anymore; it's table stakes.

§ C2 / Frontend

Modern Frontend & UX Engineering

Server components, edge rendering, design systems, accessibility, performance budgets. Frontend is no longer "the thin layer on top." It's where AI features land, where mobile and web converge, and where performance still drives conversion.

Design systems matter more than they get credit for: a coherent, well-maintained one is the difference between a small team that ships polished work and a large team that ships inconsistent work.

§ C3 / Practice

Product & Engineering Practice

Trunk-based development, continuous deployment, feature flags, experimentation infrastructure, sprint hygiene. The compound effect of these small practices is enormous.

The team that deploys 50 times a day moves at a different speed from the team that deploys quarterly — even with the same engineers. Most of what separates the two is process, infrastructure, and discipline rather than talent.

§ — Begin

Where's the gap?

Tell us which of these capabilities feels weakest in your organisation today. We'll tell you whether it's worth fixing, when, and how.