Business, Brains & the Bottom Line
Oct 1, 2026 · 21 min · 6 segments
**Fifty-seven percent of employees are reportedly using AI tools without telling their employer. In this episode, the Prescriptive Data Solutions team draws the line between harmless personal AI use…
The key part here is when you try to retrofit security into an environment, it's going to be disruptive.
It just is by its nature because most people are not trying to do anything malicious.
They're just trying to do their job, and so they built it in a way like, hey, it's working.
Let's rein this in a little bit, and we're going to have to refactor, rebuild, whatever it is.
But to answer your question, and related to this, is... is you don't have to take an invasive approach to data security posture management.
Really, it starts with as simple as discover, right? You have to know what you're looking for.
And unfortunately, in order to discover, you have to put observability agents in various places.
I need to be able to see as you're leaving the endpoint across the network if we can funnel all that traffic in this direction as it goes into the internet.
And then I need some sort of visibility at the application data repository layer so I can say, hey, is anyone accessing this data not from these other areas? So kind of breaking into three spots.
And that discovery is the first phase of this because once you can see everything, we can go back to what we said at the very beginning is, hey, I know where the data is now, and now I can classify it in some capacity because classification is the next piece of it.
whatever it is we can now classify it in a sense that makes sense and then we can determine what is the risk right we can watch it how it leaves the organization how it moves inside the organization and that's where we start turning the knob and say okay we're going to start blocking this or we're not going to we're going to deny this access whatever it is but the good news is it can be done in a way that is very selective and methodical in the process and that's why it feels painful because It's never really been approached that way in that part.
And I'm going to go in the Wayback Machine just for a second because this is very relatable.
When zero trust, when that buzzword came out, right, and everybody was like, we're going to do the zero trust model.
The key part here is when you try to retrofit security into an environment, it's going to be disruptive.
It just is by its nature because most people are not trying to do anything malicious.
They're just trying to do their job, and so they built it in a way like, hey, it's working.
Let's rein this in a little bit, and we're going to have to refactor, rebuild, whatever it is.
But to answer your question, and related to this, is... is you don't have to take an invasive approach to data security posture management.
Really, it starts with as simple as discover, right? You have to know what you're looking for.
And unfortunately, in order to discover, you have to put observability agents in various places.
I need to be able to see as you're leaving the endpoint across the network if we can funnel all that traffic in this direction as it goes into the internet.
And then I need some sort of visibility at the application data repository layer so I can say, hey, is anyone accessing this data not from these other areas? So kind of breaking into three spots.
And that discovery is the first phase of this because once you can see everything, we can go back to what we said at the very beginning is, hey, I know where the data is now, and now I can classify it in some capacity because classification is the next piece of it.
whatever it is we can now classify it in a sense that makes sense and then we can determine what is the risk right we can watch it how it leaves the organization how it moves inside the organization and that's where we start turning the knob and say okay we're going to start blocking this or we're not going to we're going to deny this access whatever it is but the good news is it can be done in a way that is very selective and methodical in the process and that's why it feels painful because It's never really been approached that way in that part.
And I'm going to go in the Wayback Machine just for a second because this is very relatable.
When zero trust, when that buzzword came out, right, and everybody was like, we're going to do the zero trust model.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
