Data Governance and Cyber Insurance: The Hidden Risk of Data Sprawl

Data governance is becoming one of the most important controls in cybersecurity and cyber insurance risk management.In this episode of the Cyber Insurance News and Information Podcast, host Martin Hinton speaks with Josh Mason, CTO of RecordPoint, about how poor data governance and uncontrolled data sprawl dramatically increase the cost and severity of cyber breaches.Many organizations focus on preventing intrusions, but the real risk often lies in what attackers find once they get inside. Years of duplicated files, legacy data systems, poorly managed permissions, and forgotten records can expand the breach “blast radius,” creating major legal, regulatory, and insurance exposure.Josh explains how data governance frameworks, defensible deletion, and AI-assisted data classification can help organizations reduce cyber risk while improving their standing with cyber insurers and regulators.The conversation also explores the growing role of AI in data management, the risks of shadow AI and third-party tools, and why insurers increasingly demand proof that governance policies are actually enforced, not just written down.In this episode, you will learn:Why data governance is critical to cyber resilience.How data sprawl increases breach severity and insurance costs.What defensible deletion means and why it matters.How AI can both improve and complicate data governance.What cyber insurers and underwriters look for when assessing data risk.Practical steps organizations can take today to reduce liability.This episode is essential listening for risk managers, CISOs, cyber insurers, compliance leaders, and executives looking to strengthen cybersecurity strategy and reduce cyber exposure.Chapters:00:00 Understanding Cybersecurity Breaches04:48 The Importance of Data Governance09:53 Defining Data Governance12:38 The Impact of Data Sprawl18:51 Immediate Steps to Mitigate Risks22:49 The Role of AI in Data Management30:38 Underwriting in the Age of AI37:44 Data Governance and Defensible Deletion40:26 Systemic Risks in Data Management44:28 Legacy Systems and Their Challenges49:06 Practical Steps for Data Management54:40 The Importance of Data Education01:00:11 Continuous Training and Cyber Resilience01:02:43 Key Metrics for Data Security01:08:39 Learning from Past Breaches