Data governance is becoming one of the most important controls in cybersecurity and cyber insurance risk management.

In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton speaks with Josh Mason, CTO of RecordPoint, about how poor data governance and uncontrolled data sprawl dramatically increase the cost and severity of cyber breaches.

Many organizations focus on preventing intrusions, but the real risk often lies in what attackers find once they get inside.

Years of duplicated files, legacy data systems, poorly managed permissions, and forgotten records can expand the breach “blast radius,” creating major legal, regulatory, and insurance exposure.

Josh explains how data governance frameworks, defensible deletion, and AI-assisted data classification can help organizations reduce cyber risk while improving their standing with cyber insurers and regulators.

The conversation also explores the growing role of AI in data management, the risks of shadow AI and third-party tools, and why insurers increasingly demand proof that governance policies are actually enforced, not just written down.

In this episode, you will learn:

• Why data governance is critical to cyber resilience.
• How data sprawl increases breach severity and insurance costs.
• What defensible deletion means and why it matters.
• How AI can both improve and complicate data governance.
• What cyber insurers and underwriters look for when assessing data risk.
• Practical steps organizations can take today to reduce liability.

This episode is essential listening for risk managers, CISOs, cyber insurers, compliance leaders, and executives looking to strengthen cybersecurity strategy and reduce cyber exposure.

Chapters:

00:00 Understanding Cybersecurity Breaches

04:48 The Importance of Data Governance

09:53 Defining Data Governance

12:38 The Impact of Data Sprawl

18:51 Immediate Steps to Mitigate Risks

22:49 The Role of AI in Data Management

30:38 Underwriting in the Age of AI

37:44 Data Governance and Defensible Deletion

40:26 Systemic Risks in Data Management

44:28 Legacy Systems and Their Challenges

49:06 Practical Steps for Data Management

54:40 The Importance of Data Education

01:00:11 Continuous Training and Cyber Resilience

01:02:43 Key Metrics for Data Security

01:08:39 Learning from Past Breaches