{"id":32412,"date":"2026-10-16T16:58:15","date_gmt":"2026-10-16T15:58:15","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=32412"},"modified":"2026-10-28T16:44:23","modified_gmt":"2026-10-28T16:44:23","slug":"software-security-code-of-practice","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/software-security-code-of-practice\/","title":{"rendered":"Building trust and resilience through secure software practices"},"content":{"rendered":"<header class=\"entry-header has-dark-background-color entry-header--standard\">\n\t<div class=\"container\">\n\t\t<div class=\"entry-header__row row align-center\">\n\t\t\t<div class=\"col col-lg-7 col-xlg-6 entry-header__content\">\n\t\t\t\t\t\t\t<div class=\"component component-single-header\">\n\t\t\t\t\t\t\t\t\t\t<div class=\"entry-header__misc text--subtitle text--uppercase text--small\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/category\/technology-innovation\/\" class=\"entry-header__link\">Technology &amp; Innovation<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t<div class=\"entry-title-wrapper\">\n\t\t\t\t\t<h1 class=\"entry-title\">\n\t\t\t\t\t\tBuilding trust and resilience through secure software practices\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t<p class=\"entry-header__description\">\n\t\t\t\t\t\tLearn how Sage uses the Software Security Code of Practice to strengthen assurance, collaboration, and continuous improvement in the wider digital ecosystem.\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<div class=\"col col-8 col-lg-4 entry-header__image\">\n\t\t\t<figure class=\"entry-header__thumbnail js-hero-section\">\n\t\t\t\t<img decoding=\"async\" width=\"1440\" height=\"810\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-1440x810.jpg\" class=\"entry-header__thumbnail-image\" alt=\"How Sage used the Software Security Code of Practice to strengthen assurance, collaboration and continuous improvement in the wider digital ecosystem.\" fetchpriority=\"high\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-1440x810.jpg 1440w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-1536x864.jpg 1536w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header-2048x1152.jpg 2048w\" sizes=\"(max-width: 1440px) 100vw, 1440px\" \/>\t\t\t<\/figure>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t<\/div>\n\t\t<div class=\"single-post-details container\">\n\t\t<div class=\"col\">\n\t\t\t<span class=\"posted-on \">Published <time class=\"entry-date published\" datetime=\"2026-10-16T16:58:15+01:00\">16 October, 2026<\/time><\/span><span class=\"reading-time\"> min read<\/span>\n\t\t<button\n\t\t\ttype=\"button\"\n\t\t\tclass=\"social-share-button button button--icon button--secondary js-social-share-button\"\n\t\t\tdata-share-title=\"Building trust and resilience through secure software practices\"\n\t\t\tdata-share-url=\"https:\/\/www.sage.com\/en-gb\/blog\/software-security-code-of-practice\/\"\n\t\t\tdata-share-text=\"Please read this interesting article\"\n\t\t>\n\t\t\t<span class=\"social-share-button__share-label\">Share<\/span>\n\t\t\t<span class=\"social-share-button__copy-label\" hidden>Copy Link<\/span>\n\t\t\t<span class=\"social-share-button__copy-tooltip\" aria-hidden=\"true\" hidden>Copied<\/span>\n\t\t<\/button>\n\n\t\t\t\t<\/div>\n\t<\/div>\n\t<\/header>\n\n\n\n<div class=\"wp-block-post-author has-dark-background-color alignfull\">\n\t<div class=\"container\">\n\t\t<div class=\"col\">\n\t\t\t\t\t\t\t<div class=\"co-authors\">\n\t\t\t\t\t\n\t\t<div class=\"entry-author-wrapper\">\n\t\t\t<a class=\"entry-author\" href=\"https:\/\/www.sage.com\/en-gb\/blog\/author\/jaynemcglasson\/\">\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"40\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/Jane-Mc-350x350.jpg\" class=\"entry-author__image\" alt=\"Jayne McGlasson\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/Jane-Mc-350x350.jpg 350w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/Jane-Mc.jpg 600w\" sizes=\"auto, (max-width: 40px) 100vw, 40px\" \/>\t\t\t\t<span class=\"entry-author__name\">Jayne McGlasson<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n<section id=\"key-takeaways\" class=\"wp-block-sage-key-takeaways\"><div class=\"sage-key-takeaways__inner\"><h2 class=\"wp-block-heading has-h-3-font-size\">Key takeaways<\/h2>\n<ul class=\"wp-block-list\">\n<li>Sage used the UK Government\u2019s&nbsp;Software Security Code of Practice&nbsp;to assess its established security, governance, and assurance practices across the Copilot Factory Framework (CFF).<\/li>\n\n\n\n<li>The assessment reinforced our existing approach of embedding security throughout the software lifecycle to strengthen the resilience of AI-powered services.<\/li>\n\n\n\n<li>The assessment validated established security practices, including access reviews, third-party dependency controls, vulnerability management, and security documentation, while helping Sage make the supporting governance and evidence more explicit.<\/li>\n\n\n\n<li>Cross-functional collaboration between Security, Product engineering, Architecture, and Cloud Operations provided a more complete view of how security controls are understood and applied across the software lifecycle.<\/li>\n\n\n\n<li>Organisations can use the Software Security Code of Practice as a practical framework for continuous improvement, stronger customer assurance, and greater cyber resilience.<\/li>\n<\/ul>\n<\/div><\/section>\n\n\n<p class=\"wp-block-paragraph\">Digital services are central to how businesses manage finances, people, and operations. As reliance on software grows, and AI capabilities become embedded across more products, users need confidence that security is built into how the technology is designed, developed, and maintained.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At Sage, <a href=\"https:\/\/www.sage.com\/en-gb\/trust-security\/security\/technical\/software-development\/\" target=\"_blank\" rel=\"noopener\">security is built into how we design<\/a>, develop and evolve our software, with our approach continually advancing as our products, technology and the threat landscape change.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As signatories of the UK Government\u2019s <a href=\"https:\/\/www.gov.uk\/government\/publications\/cyber-resilience-pledge\/cyber-resilience-pledge-declaration\" target=\"_blank\" rel=\"noopener\">Cyber Resilience Pledge<\/a> and ambassadors of the <a href=\"https:\/\/www.gov.uk\/government\/publications\/software-security-code-of-practice\/software-security-code-of-practice\" target=\"_blank\" rel=\"noopener\">Software Security Code of Practice<\/a>, we\u2019re committed to finding practical ways to test our security approach, learn from the process, and help promote stronger security across the wider software ecosystem, while encouraging our partners to do the same.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s what we talk about in this article:<\/p>\n\n\n<?xml encoding=\"utf-8\" ?><div class=\"wp-block-yoast-seo-table-of-contents yoast-table-of-contents\"><ul><li><a href=\"#h-why-sage-supports-the-cyber-resilience-pledge-nbsp\" data-level=\"2\">Why Sage supports the Cyber Resilience Pledge&nbsp;<\/a><\/li><li><a href=\"#the-approach\" data-level=\"2\">The approach<\/a><\/li><li><a href=\"#Key-outcomes-and-lessons-learned\" data-level=\"2\">Key outcomes and lessons learned<\/a><\/li><li><a href=\"#Advice-and-insights-for-other-organisations\" data-level=\"2\">Advice and insights for other organisations<\/a><\/li><li><a href=\"#Final-thoughts:-Future-commitments\" data-level=\"2\">Final thoughts: Future commitments<\/a><\/li><\/ul><\/div>\n\n\n\n<h2 id=\"h-why-sage-supports-the-cyber-resilience-pledge-nbsp\" class=\"wp-block-heading\">Why Sage supports the Cyber Resilience Pledge&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" id=\"h-why-sage-supports-the-cyber-resilience-pledge-cyber-resilience-is-not-only-a-technical-priority\">Cyber resilience is not only a technical priority. It is essential to business continuity, customer confidence, and responsible innovation. By supporting the Pledge and the Code, Sage is reinforcing its commitment to secure software practices and collaboration between government and industry.&nbsp;This collaboration helps translate shared security principles into practical action: government provides a clear and consistent framework, while industry applies it in real operating environments and shares practical insights to support its continued relevance and wider adoption.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our involvement with the Code reflects our broader responsibility to contribute beyond our own organisation. By sharing practical experience, Sage can help other organisations understand how the Code can be applied, encourage partners to adopt stronger practices and provide constructive industry insight into how voluntary frameworks work in practice. This helps build a more consistent approach to software security across the wider ecosystem and keep the focus on sustained resilience rather than one-off compliance.&nbsp;<\/p>\n\n\n\n<h2 id=\"the-approach\" class=\"wp-block-heading\">The approach<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sage selected the Copilot Factory Framework (CFF) for assessment against the Software Security Code of Practice as it provides AI capabilities that can be used across multiple products. This made it a meaningful test of whether established security practices could be demonstrated consistently in a shared, fast-evolving technology environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CFF provides a scalable foundation for delivering AI-powered experiences across Sage products, enabling teams to build and deploy AI capabilities using consistent governance, security controls, and approved technologies. Assessing a shared platform therefore offered value beyond a single service: it tested the foundations that product teams rely on when bringing AI capabilities to customers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The assessment was not simply about confirming alignment with individual controls. It examined how security decisions, evidence, and responsibilities connect across the full lifecycle and whether that approach could provide clear assurance to the teams that depend on the CFF.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The assessment brought together colleagues from Security, Product, Engineering, Architecture and Cloud Operations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A dedicated security lead coordinated the collection and validation of evidence, and an independent third party, NCC Group, reviewed the evidence against the Code\u2019s controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The independent review confirmed established strengths and created a clear route for further improvement. In particular, it showed where greater clarity, formality, and consistency would make existing governance easier to apply, evidence, and understand across teams.<\/p>\n\n\n\n<h2 id=\"Key-outcomes-and-lessons-learned\" class=\"wp-block-heading\">Key outcomes and lessons learned<\/h2>\n\n\n\n<h3 id=\"h-embedding-security-throughout-design-and-development\" class=\"wp-block-heading\">Embedding security throughout design and development\u202f<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The review reinforced the importance of building security into design and development decisions for the CFF. This includes the consistent governance of third-party services, software components, dependencies, and licences from the outset, supported by clear and accessible evidence. Embedding these practices early strengthens traceability, supports compliance, and helps product teams identify and address software security risks before delivery.<\/p>\n\n\n\n<h3 id=\"h-validating-assurance-around-the-build-environment\" class=\"wp-block-heading\">Validating assurance around the build environment\u202f<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The review validated the controls that protect the integrity and security of the software build environment, including managed access, strong authentication, infrastructure-as-code, and audit logging. It also identified an opportunity to introduce greater formality and consistency through repeatable access reviews, providing ongoing assurance that access remains appropriate and aligned with business need.<\/p>\n\n\n\n<h3 id=\"h-validating-secure-deployment-and-maintenance\" class=\"wp-block-heading\">Validating secure deployment and maintenance<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The review considered how vulnerabilities are identified, prioritised, and managed throughout the software lifecycle. It validated the effectiveness of existing vulnerability management practices against the Software Security Code of Practice, including automated security scanning, penetration testing, and defined remediation targets. The outcome was stronger assurance that risks are addressed according to their significance and managed consistently throughout the lifecycle. For teams using the CFF, this provides greater confidence that vulnerabilities affecting a shared platform can be identified and acted on in a structured and timely way.<\/p>\n\n\n\n<h3 id=\"h-clarifying-service-commitments\" class=\"wp-block-heading\">Clarifying service commitments<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Because the CFF primarily provides AI services to other Sage products, some of the Code\u2019s requirements needed to be considered in the context of internal product customers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The review validated the service governance supporting the CFF, including established support and communication processes, lifecycle management, and commitments around service retirement. It also identified opportunities to express these practices with greater clarity and formality. This provides dependent teams with greater transparency and predictability, reduces operational risk, enables more effective planning, and supports reliable service delivery across the organisation.<\/p>\n\n\n\n<h2 id=\"Advice-and-insights-for-other-organisations\" class=\"wp-block-heading\">Advice and insights for other organisations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For organisations considering using the Code, our experience highlighted four practical ways to gain greater value from the assessment:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Use the Code as a catalyst for improvement.<\/strong> The greatest value can come from the conversations the assessment creates and the opportunities it reveals. Clearly expressed governance and ownership can deliver greater clarity, accountability, and assurance.&nbsp;<\/li>\n\n\n\n<li><strong>Formalise what already works.<\/strong> Strong practices may already exist, but clear ownership, documented commitments and accessible evidence make it easier to demonstrate that controls are operating as intended.&nbsp;<\/li>\n\n\n\n<li><strong>Bring the right people together early.<\/strong> Software security spans across more than one function. Involving Security, Product, Engineering, Architecture, and Cloud Operations creates a complete view of how security is applied across the lifecycle.&nbsp;<\/li>\n\n\n\n<li><strong>Share practical learning.<\/strong> Implementation experience can help other organisations apply the Code, support wider adoption, and strengthen resilience across the software ecosystem.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"Final-thoughts:-Future-commitments\" class=\"wp-block-heading\">Final thoughts: Future commitments<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Software Security Code of Practice offers organisations a valuable opportunity to strengthen security, build customer trust, and demonstrate responsible leadership.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For organisations considering the Code, the first step is to assess how its principles align with existing practices, identify where ownership or evidence could be strengthened, and involve the right teams early. The wider opportunity is to use the assessment not only to improve internal assurance, but also to contribute practical insight that helps raise standards across the industry.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sage continues to advocate for the Code beyond our own assessment by sharing practical expertise and encouraging participation across our partner ecosystem. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This extends the value of government-industry collaboration: lessons learned from implementation can support wider adoption, strengthen collective resilience and demonstrate how common principles can be applied in different operating environments. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Read this Sage Partner case study from <a href=\"https:\/\/zynk.com\/\">Zynk<\/a> on <a href=\"https:\/\/zynk.com\/articles\/why-zynk-adopted-the-dcms-software-security-code-of-practice\">its adoption of the Department for Science, Innovation and Technology&#8217;s Software Security Code of Practice<\/a>. It shows how advocacy can help extend common security principles through the wider partner ecosystem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And read another Sage Partner case study, this time from <a href=\"https:\/\/tradebox.co.uk\/\">Tradebox<\/a>, on <a href=\"https:\/\/tradebox.co.uk\/why-tradebox-decided-to-adopt-the-dcms-software-security-code-of-practice\/\">its adoption of the Department for Science, Innovation and Technology&#8217;s Software Security Code of Practice<\/a>.<\/p>\n\n\n\n<div class=\"single-cta\">\n\t<div class=\"single-cta__positioner on-scroll-highlight__target\">\n\t\t<div class=\"single-cta__wrapper has-dark-background-color\">\n\t\t\t<div class=\"single-cta__content\">\n\t\t\t\t\t\t\t\t<h2 class=\"single-cta__title h3\">Explore Sage trust and security<\/h2>\n\n\t\t\t\t\t\t\t\t\t<div class=\"single-cta__description\">\n\t\t\t\t\t\t<p><!-- wp:paragraph --><\/p>\n<p>Trust is the foundation of good security and our customer relations. Learn how we safeguard your security, value your privacy, and uphold the highest standards of data ethics.<\/p>\n<p><!-- \/wp:paragraph --><\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a\n\t\t\t\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/trust-security\/\"\n\t\t\t\t\t\tclass=\"single-cta__button button button--primary\"\n\t\t\t\t\t\t\t\t\t\t\t\t\tid=\"cta-id-24055\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdata-button-location=\"cta_box\"\n\t\t\t\t\t\t\t\t\t\t\t>Learn more<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/08\/tandshubcta.jpg\" class=\"single-cta__image\" alt=\"A man in an office exploring the Sage trust and security hub\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2025\/08\/tandshubcta.jpg 800w\" sizes=\"auto, (min-width: 48em) 33vw, 100vw\" \/>\t\t\t<\/div>\n<\/div>\n\n\n<section class=\"more-topics alignfull has-grey-light-background-color wp-block-sage-post-topics\">\n\t<div class=\"container\">\n\t\t<div class=\"row\">\n\t\t\t<div class=\"col col-12 col-lg-4\">\n\t\t\t\t<h3 class=\"more-topics__title h2\">Browse more topics from this article<\/h3>\n\t\t\t<\/div>\n\t\t\t<div class=\"col col-12 col-lg-8\">\n\t\t\t\t<ul class=\"post-tags__list\">\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/cloud\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tCloud technology\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/fintech\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tFintech\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/security-fraud\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tSecurity and fraud\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t\t\t<li class=\"post-tags__item\">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.sage.com\/en-gb\/blog\/tag\/workplace-technology\/\" class=\"post-tags__link button button--secondary\">\n\t\t\t\t\t\t\t\tWorkplace technology\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/section>\n\n\n<div class=\"alignfull wp-block-sage-related-posts\">\n\t<section class=\"related-posts card-grid has-dark-background-color\">\n\t<div class=\"container\">\n\t\t\t\t\t<div class=\"row\">\n\t\t\t\t<div class=\"col\">\n\t\t\t\t\t<h2 class=\"related-posts__heading related-posts__heading--featured h1\">Explore more wisdom<\/h2>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"row related-posts__featured\">\n\t\t\t\t<div class=\"col card-grid__item\">\n\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-0 post-32306 post type-post status-publish format-standard has-post-thumbnail hentry category-strategy-legal-operations category-technology-innovation tag-business-finances tag-business-performance tag-business-support tag-cloud tag-data-analytics tag-midsized-business tag-performance-management tag-productivity tag-reporting business_type-small-business business_type-medium-sized-business industry-financial-services industry-professional-services card-post--is-clickable\"\n>\n\t<div class=\"card-post__media-wrapper\">\n\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1440\" height=\"810\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-5-header-1440x810.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-5-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-5-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-5-header-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\t<\/div>\n\n\t<div class=\"card-post__content\">\n\t\t\t\t\t<div class=\"card-post__label\">Recommended<\/div>\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-09-29T12:32:05+01:00\">29 September, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">1 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h3\">\n\t\t\t\t\t\t\t<a\n\t\t\t\t\tclass=\"card-post__title-link\"\n\t\t\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/is-your-finance-system-holding-back-business-growth\/\"\n\t\t\t\t>\n\t\t\t\n\t\t\tIs your finance system holding back business growth?\n\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/p>\n\n\t\t\n\t\t\t\t\t<p class=\"card-post__description\">\n\t\t\t\tLonger close cycles. More spreadsheet workarounds. Reporting that takes longer every quarter, not less. These are the signs a finance system has stopped supporting growth and started limiting it. \t\t\t<\/p>\n\t\t\n\t\t\t<\/div>\n\n\t<\/article>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\n\t\t\t\t\t<div class=\"row related-posts__non-featured\">\n\t\t\t\t<div class=\"col col-12\">\n\t\t\t\t\t<h2 class=\"related-posts__heading related-posts__heading--more h4\">More on this Topic<\/h2>\n\t\t\t\t<\/div>\n\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-1 post-32304 post type-post status-publish format-standard has-post-thumbnail hentry category-people-leadership category-strategy-legal-operations tag-business-costs tag-business-finances tag-business-performance tag-business-support tag-data-analytics tag-digital-transformation tag-midsized-business tag-reporting tag-workplace-technology business_type-medium-sized-business industry-financial-services industry-professional-services\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/from-scorekeeper-to-strategist-how-the-cfo-role-is-evolving\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-4-header-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-4-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-4-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-4-header-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-09-29T12:19:55+01:00\">29 September, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">5 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tFrom scorekeeper to strategist: How the CFO role is evolving\u00a0\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-2 post-32302 post type-post status-publish format-standard has-post-thumbnail hentry category-strategy-legal-operations category-technology-innovation category-trends-insights tag-business-performance tag-business-support tag-digital-transformation tag-international-trading tag-midsized-business tag-performance-management tag-productivity tag-reporting tag-workplace-technology business_type-medium-sized-business industry-financial-services industry-professional-services\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/group-financial-reporting-moving-beyond-the-basic-p-and-l\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-1-header-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-1-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-1-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-1-header-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-09-29T12:10:28+01:00\">29 September, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">6 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tGroup financial reporting: Moving beyond the basic P&amp;L\u00a0\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-3 post-32298 post type-post status-publish format-standard has-post-thumbnail hentry category-strategy-legal-operations category-technology-innovation tag-business-finances tag-business-performance tag-business-support tag-cloud tag-data-analytics tag-digital-transformation tag-finance tag-midsized-business tag-performance-management tag-reporting tag-workplace-technology business_type-medium-sized-business industry-financial-services industry-professional-services\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/group-consolidation-why-it-takes-so-long-and-how-to-fix-it\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-2-header-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-2-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-2-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-2-header-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-09-29T12:00:40+01:00\">29 September, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">6 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tGroup consolidation: Why it takes so long and how to fix it\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t<div class=\"col col-6 col-lg-3 card-grid__item\">\n\t\t\t\t\t\t<article\n\t\tclass=\"card-post related-post related-post-4 post-32289 post type-post status-publish format-standard has-post-thumbnail hentry category-strategy-legal-operations category-technology-innovation tag-business-finances tag-business-performance tag-create-business-plan tag-data-analytics tag-finance tag-financial-education tag-performance-management tag-productivity tag-reporting tag-workplace-technology business_type-medium-sized-business industry-financial-services industry-professional-services\"\n>\n\t\t\t<a\n\t\t\tclass=\"card-post__link\"\n\t\t\thref=\"https:\/\/www.sage.com\/en-gb\/blog\/how-to-build-a-cfo-dashboard-that-actually-drives-decisions\/\"\n\t\t\t\t\t>\n\t\t\t<figure class=\"card-post__media\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"684\" height=\"384\" src=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-3-header-684x384.jpg\" class=\"card-post__image\" alt=\"\" loading=\"lazy\" srcset=\"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-3-header-684x384.jpg 684w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-3-header-768x432.jpg 768w, https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/09\/intacct-3-header-1440x810.jpg 1440w\" sizes=\"auto, (min-width: 48em) 250px, (min-width: 30em) 100vw, 100vw\" \/>\t\t\t\n\t\t\t\n\t\t\t\t\t<\/figure>\n\n\t\t\n\t\t\t\t\t<div class=\"card-post__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"posted-on \"><time class=\"entry-date published\" datetime=\"2026-09-29T11:49:51+01:00\">29 September, 2026<\/time><\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"card-post__meta-text\"><span class=\"reading-time\">7 min read<\/span><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\n\t\t<p class=\"card-post__title h5\">\n\t\t\tHow to build a CFO dashboard that actually drives decisions\t\t<\/p>\n\n\t\t\t<\/a>\n\t\n\t\n\t\t\n\t\n\t<\/article>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n<\/section>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Learn how Sage uses the Software Security Code of Practice to strengthen assurance, collaboration, and continuous improvement in the wider digital ecosystem.<\/p>\n","protected":false},"author":1943,"featured_media":32413,"menu_order":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_is_cornerstone":"","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":"","_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":"","_yoast_wpseo_schema_page_type":"","_yoast_wpseo_schema_article_type":"","_sage_video":false,"_yoast_wpseo_focuskeywords":"","_yoast_wpseo_keywordsynonyms":"","_yoast_wpseo_primary_category":"11","sage_membership_post_content_type":"","sage_membership_post_featured_video_id":"","sage_membership_post_video_type":"","sage_membership_post_featured_video_duration":"","post_featured_image_hide":false,"sage_hide_published_date":false,"sage_hide_read_time":false,"sage_hide_share_buttons":false,"_pwl_sage_podcast_buzzsprout_src":"","footnotes":""},"categories":[11],"tags":[51,136,52,125],"business_type":[3],"lilypad":[],"context":[],"industry":[63,65],"persona":[70],"imagine_tag":[335,267,300],"coauthors":[778],"class_list":["post-32412","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology-innovation","tag-cloud","tag-fintech","tag-security-fraud","tag-workplace-technology","business_type-medium-sized-business","industry-professional-services","industry-saas"],"sage_meta":{"region":"en-gb","author_name":"Jayne McGlasson","featured_image":"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2026\/10\/cybersecurity-header.jpg","imagine_tags":{"335":"SaaS &amp; Software","267":"Security Fraud","300":"Security Tech Leaders"}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Sage Advice UK","distributor_original_site_url":"https:\/\/www.sage.com\/en-gb\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/32412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/users\/1943"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/comments?post=32412"}],"version-history":[{"count":4,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/32412\/revisions"}],"predecessor-version":[{"id":32656,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/32412\/revisions\/32656"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media\/32413"}],"wp:attachment":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media?parent=32412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/categories?post=32412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/tags?post=32412"},{"taxonomy":"business_type","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/business_type?post=32412"},{"taxonomy":"lilypad","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/lilypad?post=32412"},{"taxonomy":"context","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/context?post=32412"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/industry?post=32412"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/persona?post=32412"},{"taxonomy":"imagine_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/imagine_tag?post=32412"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/coauthors?post=32412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}