An employee typed his own name into Copilot and found out he was on the layoff list.

Nobody hacked anything. Years earlier someone had used "share with all" in SharePoint, back when nobody could realistically guess the link. Then AI made everything trivially findable.

Ward Balcerzak is Field CISO at Sentra with nearly two decades in data security across Accenture, Allstate, Carbon Black, and Fidelity National Financial, where he led data protection and insider risk programs. He also hosts the Guardians of the Data podcast.

Aaron and Ward get into what data security looks like now that every employee is pasting company data into tools nobody approved. Ward's argument: the work organizations skipped for years — data discovery, classification, access hygiene — is exactly what AI is now dragging into the light.

He also makes a contrarian case for protecting less. Nine times out of ten, the data companies are frantic about isn't special at all. Figure out what actually makes you different, find out who really has access to it, and start there.

They cover why DLP earned its bad reputation, what to do when your tools hand you a million findings and no way to act on them, why regulators always arrive last, and why networking is now non-negotiable even for people who got into this field specifically to avoid people.

Guest: Ward Balcerzak, Field CISO at Sentra. Find him on LinkedIn, at wardbalcerzak.com, or on the Guardians of the Data podcast.

⏱️ CHAPTERS
00:00 Intro
01:25 Twenty years of being wrong about what catches on
04:39 Can AI actually save data security?
09:30 The era of YOLO security
12:00 "AI readiness" and why nobody's ready
14:43 Sins of the past, now with petabytes
17:06 Are companies building their own models?
26:30 It's not a cat anymore, it's a mountain lion
28:16 The rigged casino of AI watermarking
29:24 Where are the actual wins?
30:59 Nine times out of ten, your data isn't special
33:48 Who actually has access?
35:09 The Copilot layoff list story
37:06 A million findings and no idea what to do
45:33 Forcing the conversations nobody wants to have
47:21 What to tell a 22-year-old today
50:26 Network, even if you got into this to avoid people
54:47 Pitch slapping and the value of being real
56:03 Where to find Ward

#cybersecurity #datasecurity #AI #infosec #CISO