Masters of Data

In this episode of Masters of Data, we untangle the often-confused cousins of data sovereignty and data residency, because where your data lives and who actually controls it are two very different conversations. We dig into the real-world headaches facing multinational companies, from incident response teams locked out of sovereign data zones to the bureaucratic gymnastics that ensue when compliance meets practicality. We also take a hard look at the EU AI Act and what its upcoming enforcement means for organizations scrambling to govern AI responsibly, and why the next great hire might be a unicorn who speaks fluent legalese, app sec, and GRC all at once.

0:00 Intro & Defining Data Sovereignty vs. Data Residency

On this episode of Masters of Data, we dig into why your data layer is the unsung hero of AI success and what happens when you ignore it. From the chaos of juggling data lakes and warehouses to the rise of MCP protocols replacing federated search, we break down how the architecture beneath your AI directly shapes what it can and cannot do well. We also get candid about the real risks of letting AI agents loose on sensitive data, the cost of running powerful models at scale, and why human oversight still matters. This episode is ideal for data engineers, security professionals, IT leaders, and business decision-makers who are actively evaluating or scaling AI adoption and want to avoid the pitfalls of building on a shaky data foundation.

In this episode of Masters of Data, we get into the messier side of AI adoption, tackling questions like who actually owns the output when AI gets it wrong, and whether chasing efficiency is making us forget what it means to be human in the first place. We discuss tech CEOs proudly announcing they no longer think for themselves and debate whether AI is quietly eroding our critical thinking skills. We make the case that purpose-built, narrow AI is genuinely exciting, but that no efficiency gain is worth losing the human touch that makes work, connection, and creativity meaningful. This episode is for security professionals, data practitioners, and anyone in tech wrestling with how to use AI as a tool without becoming one themselves.

On this episode of Masters of Data, we brought back GRC expert Cassandra Mooseburger to pull back the curtain on audits, and spoiler: it is far less scary than the IRS knocking on your door. We break down what actually separates a certification from an attestation from a report, how to run a prep process that does not send your engineering team running for the hills, and why the social capital you build across the business is just as important as the evidence you collect. If you have ever wondered how compliance work translates into closed deals and customer trust, this one connects those dots.

On this episode of Masters of Data, we sat down with Steven Manley, CTO of Druva, to get the unfiltered truth about ransomware: it's not a matter of if you'll be breached, but when, and bad actors are now launching hundreds of attacks at a surprisingly low cost. We dig into why attackers lurk undetected for 200-plus days, how AI is being weaponized for everything from eerily convincing voice phishing to secretly training your own AI systems against you, and why your most protected assets are rarely what gets hit first. This episode is essential listening for IT leaders, security teams, and anyone responsible for keeping the business running when the worst-case scenario stops being hypothetical.

Chapters:

0:00 Introduction & Meet Stephen Manley, CTO of Druva

1:20 When Ransomware Hits: What It's Like for the Victim vs. the Recovery Team

5:04 What Does a Ransomware Attack Actually Look Like?

7:56 How to Prepare: Building a Ransomware Response Plan

11:30 Testing Your Response: Start Small, Then Scale Up

14:19 Communication During an Attack: Why It's Harder Than You Think

16:23 How Attackers Exploit Your Communications Infrastructure

18:44 Dwell Time: Attackers May Have Been Inside for 200+ Days

21:08 Are Attackers Using AI? The Growing Role of AI in Cybercrime

23:04 Real Story: How Ransomware Compromised an AI System in Healthcare

26:27 Why Ransomware Attacks Are Getting Cheaper & More Common

28:04 Cyber Insurance: Does It Actually Pay Out?

31:10 Compliance, Security Hygiene, and Convincing Your Board to Invest

33:10 Three Ways to Win a Security Budget Conversation

35:37 Using Backup Data for Deeper Insight Into Your Environment

37:00 Final Advice: Test, Trust Nothing, and Stay Calm

39:14 Wrap-Up

In this episode of Masters of Data, we buckle up and explore the staggering technological complexity behind the airline industry, from managing IoT devices across global fleets to navigating the data chaos of mergers and acquisitions. We dig into the delicate balance airlines strike between aging legacy systems and risky upgrades, and why getting that wrong isn't just costly but potentially catastrophic. We also look at how forward-thinking airlines are turning operational logs into real business wins, all while safeguarding the mountains of sensitive passenger data they collect every day.

In this episode of Masters of Data, we explore how banks and fintech companies have traded friendly neighborhood tellers for data-driven, always-on digital fortresses. We unpack everything from sophisticated phishing schemes and viral TikTok check fraud trends to the AI-powered tools that now handle the fraud detection Shirley the bank teller used to manage through sheer familiarity. We make the case that financial institutions today face more pressure than ever to be trustworthy, secure, and seamless all at once, whether their customers are logging into a sleek app or calling a landline to pay two bills a month.

In this episode of Masters of Data, we dig into the cybersecurity nightmare that is modern healthcare IT, from ransomware attacks shutting down entire hospitals to IoT medical devices running software older than some of our passwords. We explore why healthcare organizations make such attractive targets for cybercriminals, and why the combination of life-or-death stakes, skeleton-crew security teams, and Windows-95-era equipment is a recipe for chaos. We also get into the surprisingly exciting potential of AI to serve as a force multiplier for overwhelmed IT teams, and share some personal stories about using LLMs to crack health mysteries that stumped doctors for years. Doctor in the loop, always, but we are cautiously optimistic about where this is all heading.

As we gear up for RSA Conference, we give viewers a sneak peek at Sumo Logic's SOC analyst agent, which turns a 45-minute analyst investigation into a five-minute AI-powered sprint. We walk through live demos showing how the agent automatically generates queries, maps threats to MITRE ATT&CK, and hands you recommended remediation actions all without making you switch tabs or tools. We also show off MCP integration that lets teams collaborate on active investigations right from Slack, because no one should be chained to their war room when there's dinner to be had. If you're at RSA, we hope to see you at the booth for the Dojo AI challenge; if not, consider this your front-row seat.

In this episode, we dive into the wild world of 'bursty' businesses (yes, we said it) and the security headaches that come with unpredictable traffic spikes, whether you're bracing for tax season, Black Friday, or a surprise sardine TikTok going viral. We unpack the complex domino effect of onboarding and offboarding seasonal workers at scale, where handing out 'keys' now means managing thousands of access tokens and cloud permissions instead of a spare set for the back file drawer. We make the case that robust logging, behavioral analytics, and access control aren't just nice-to-haves (they're the difference between riding the wave and wiping out).