Many organisations are investing in better tools, new systems, dashboards, and now AI.

But the work still feels fragmented.

• Updates are scattered.
• Meetings are long.
• Ownership is unclear.
• Managers are expected to lead change, but many have never been taught how to structure the work.

This is something I see often in growing organisations, especially SMEs.

The problem is usually not a lack of technology.
​
It is a lack of operational clarity.

Last month, we ran a Smartsheet Empowerment session with a simple goal:

Start with how work actually flows — then explore how Smartsheet can support it in a practical, meaningful way.
Of course, like most good working sessions… it didn’t stay “simple” for very long.
​
And honestly, that’s what made it valuable.

​Internships are often seen as a period to gain experience by completing assigned tasks. However, my experience at 57Network was different. Instead of following a fixed role, I was given the opportunity to explore, ask questions, and learn through actual work situations. The focus was not just on what I was doing, but on how and why the work was done.

Small and medium-sized enterprises (SMEs), particularly new and growing businesses, are increasingly reliant on digital systems to operate, make decisions, and scale. Customer data, financial records, and internal documents have become critical business assets, making data protection a fundamental responsibility rather than an optional consideration.
​
However, many SMEs continue to underestimate their exposure to cyber risks. Limited resources, lack of technical expertise, and the belief that smaller businesses are less likely to be targeted often create a false sense of security. According to Coalition’s cybersecurity study, 64% of small businesses believe they are not attractive targets, despite 79% having experienced at least one cyberattack in the past five years.

The impact of weak data protection can be significant. Cyber incidents such as data breaches and system failures can lead to financial loss, operational disruption, reputational damage, and loss of customer trust. As threats become more sophisticated, relying on basic security measures is no longer sufficient, and organizations must adopt a more structured and proactive approach to protecting their data.

AI is no longer limited to answering questions or generating content.

It is now capable of performing real work — producing reports, analysing data, and supporting decisions at a level comparable to experienced professionals.

Yet despite this progress, many organisations are not seeing meaningful results from AI adoption.

The issue is not the technology.
​
The issue is how work is currently structured and managed.

Artificial intelligence has quickly become a core component of today’s workplace. Employees now rely on AI tools to draft emails, summarize documents, analyze data, and complete tasks more efficiently. As a result, AI is increasingly driving productivity and enhancing how businesses operate.

According to Gallup’s 2024 workplace AI adoption report by Ryan Pendell, the number of employees using AI at work has nearly doubled in the past two years. Another study found that professionals given access to ChatGPT were 37% more productive on writing tasks. These insights highlight how rapidly organizations are integrating AI to support efficiency and innovation.

However, the rapid rise of AI usage also brings new challenges. Gallup researcher Christos Makridis reported that although 93% of organizations have begun using AI, only 15% of U.S. employees say their employer has provided a clear plan for integrating AI into their work. Without proper guidance and training, employees may unintentionally expose sensitive information or rely too heavily on AI‑generated outputs. This can undermine data security and lead to poor decision‑making.
​
AI can significantly improve efficiency, but organizations must also establish clear ways of working around these technologies. Without thoughtful processes, governance, and responsible practices, the benefits of AI can quickly introduce new risks to productivity and data security.

​Organizations often focus on completing work as quickly as possible. While this approach improves efficiency, it does not always lead to better outcomes. Effectiveness requires more than speed, which depends on clear direction and informed decisions. It is essential to understand the differences between efficiency and effectiveness to navigate complex work management. 

Cyber threats have become more aggressive, automated, and opportunistic.

A decade ago, attackers focused mostly on large enterprises.

Today, the most common victims are SMEs, because attackers look for the easiest entry point.
​
Most SMEs struggle with:

• Limited IT staff
• Weak access control
• Unpatched systems
• Over‑trusting digital habits
• Minimal security monitoring

​
Attackers know this, and they take advantage.

• Credential theft (stolen passwords, session tokens)
• Ransomware attacks
• Phishing emails and scams
• Unpatched or outdated systems
• Poor access control or excessive permissions

​
These threats hit SMEs across Malaysia and globally.