What’s harder than stopping a breach? Convincing leadership your data security program is worth the investment.

Zach Luze, Data Security Advisory Practice Director at TBD Cyber joins Ward today to focus on the challenges organizations face in demonstrating the value of data security. Zach explains how the inability to show value can impact budgets and resources, emphasizing that many data security programs struggle with meaningful key performance indicators (KPIs). He suggests a blended approach to data discovery and provides insights into building metrics that highlight the value of security programs. Zach also shares his career journey from an IT auditor to his current role, highlighting his work in assessing, designing, and building data security programs. The conversation touches on various aspects of data security, including data discovery, cloud transformation, insider threats, and the burgeoning role of AI in improving data detection and response. The episode concludes with Zach's predictions on AI's growing influence in data security through 2026 and advice for those looking to break into the field.

Takeaways:

• Focus on Meaningful Metrics: Prioritize data security metrics that reflect real impact, not just what’s easiest to measure.
• Align People, Process, and Technology: Engage stakeholders across teams and ensure your data security approach integrates people, processes, and technology from the start.
• Eliminate Stale Data for Savings: Regularly identify and remove outdated or unused data to reduce risk and demonstrate cost savings.
• Adopt an Agile Discovery Mindset: Stay flexible and ready to adjust your data discovery strategy as new information and challenges arise.
• Look Beyond the Obvious: Investigate areas where sensitive data might be hiding, even if you don’t expect to find it there.
• Demonstrate Value Clearly: Communicate the benefits and results of your data security efforts to build support and momentum.

Quote of the Show:

• “Metrics are great. Stories are just as good to back those up and through your insider threat program, that’s where you get the case notes to develop those stories.” - Zach Luze

Links:

• LinkedIn: https://www.linkedin.com/in/zachluze/
• Website: https://www.tbdcyber.com/

For more insights on data discovery, visit: https://www.sentra.io/product/data-discovery-and-classification

Ways to Tune In:

• Transistor: https://guardiansofthedata.show/
• Spotify: https://open.spotify.com/show/5gZXInkb12Qrs2Lyv0hstQ
• Apple Podcasts: https://podcasts.apple.com/us/podcast/guardians-of-the-data/id1826819323
• Amazon Music: https://music.amazon.com/podcasts/0754cdde-f1c4-4f6c-92a2-e263f7840eb8/guardians-of-the-data
• iHeart Radio: https://www.iheart.com/podcast/269-guardians-of-the-data-285972170/
• YouTube: https://www.youtube.com/@GuardiansoftheDataPod