A finance director at a mid-size manufacturing company recently asked a question that captures the tension of 2018 perfectly: ‘Should we invest in blockchain, deploy RPA, or fix our data security first?’ The question itself maps the year’s corporate technology agenda. Four distinct topics — blockchain, RPA, CDP and cybersecurity — are competing for the same limited budget cycle. This article examines where each genuinely stands and how a business leader should sequence them.
Blockchain remains the loudest conversation in enterprise technology, but the gap between narrative and deployable application is still wide. Pilot projects in supply chain traceability, land registry and financial reconciliation are producing results at large organizations. The picture for mid-market companies is different. Blockchain delivers value only when every partner in a supply chain adopts the same infrastructure. That coordination cost routinely exceeds the technology cost itself. The right question for a business leader is not ‘Is blockchain promising?’ but ‘Are my customers and suppliers ready to join the same network?’ If the answer is no, deferring the investment is the correct total cost of ownership decision, not a failure of vision.
RPA — robotic process automation — is moving past the hype stage in 2018 and into measurable scale. Repetitive, rule-based tasks such as invoice matching, e-invoice validation, bank statement reconciliation and regulatory report preparation are where software robots consistently deliver. The ROI calculation is relatively straightforward: lower error rates, faster cycle times and redeployable staff hours. The critical point for Turkish SMEs is that RPA does not replace an existing ERP or accounting system — it runs on top of it. This means the process being automated must be clearly defined and documented before deployment begins. An ambiguous process produces an ambiguous robot.
CDP, the customer data platform, is a category that is still emerging in Turkey but gaining momentum in retail, e-commerce and financial services. Where a CRM system manages the customer relationship, a CDP consolidates customer data from multiple channels — web, mobile app, email, point of sale — into a single unified profile. For companies with high transaction volumes and genuine multi-channel customer interaction, this consolidation enables more precise segmentation and faster response. For an SME with a single primary sales channel and modest data volumes, a well-configured CRM module covers the same ground. The decision to evaluate CDP should start with a data maturity assessment, not a vendor demonstration.
Cybersecurity became both a technical and legal imperative in 2018. The General Data Protection Regulation, which took effect in May, applies to any organization processing personal data of EU citizens — including Turkish companies serving EU markets or holding data on EU-based users. Turkey’s own Personal Data Protection Law creates parallel domestic obligations. Together, these two frameworks make data inventory, processing documentation and vulnerability remediation non-deferrable. For companies running cloud ERP or SaaS solutions, the immediate practical step is reviewing the data processing agreements with each vendor. Assuming a cloud provider handles compliance automatically is a risk that auditors and regulators will not accept.
The shared message across all four agendas is this: each is real, but each has a different maturity level and a different readiness threshold for mid-market application. Blockchain still faces a coordination problem. RPA offers proven, measurable returns. CDP requires data maturity before it earns its cost. Cybersecurity and GDPR compliance are no longer optional. Treating all four as equal priorities within a single budget cycle is a reliable path to shallow progress on each. Prioritization should start from operational pressure, not strategic aspiration: which process consumes the most resources today, which legal obligation carries the nearest deadline?
When the decision criteria are kept concrete, the roadmap becomes manageable. If there are repetitive, rule-based workflows consuming significant staff time, RPA is the first candidate for evaluation. If the organization processes personal data of EU citizens or Turkish residents, cybersecurity and compliance review cannot wait. If customer data is genuinely multi-channel and growing in volume, CDP warrants a structured assessment. Blockchain should not move from pilot to investment until supply chain partners are ready to participate. This sequence turns the technology agenda from an excitement list into an executable operational plan — which is the only version that produces results.
This article was originally written in Turkish by Gökhan MERCANOĞLU on July 16, 2018 and has been automatically translated into English and other languages using machine translation.