Topic starter
23/03/2026 2:26 pm
TL;DR: AI adoption is accelerating faster than most enterprises can map, classify, and remediate sensitive data, leaving security teams exposed to privacy and governance failures, according to Cyera and IDC. The practical shift is clear: data security now depends on automated discovery, context, and action rather than manual review and alert-heavy operations.
Editorial analysis by NHI Mgmt Group, based on content published by Cyera: “From Discovery to Action: Strengthening AI Data Security Without Slowing Innovation”.
By the numbers:
- 65% of CIOs and CISOs are responsible for remediating data privacy and security issues, according to IDC research cited by Cyera.
- Security leaders who felt somewhat aligned with the business on AI fell from 57% in 2024 to 48% in 2025, according to IDC research cited by Cyera.
- Security leaders who felt completely aligned with the business on AI fell from 36% in 2024 to 29% in 2025, according to IDC research cited by Cyera.
Key questions
Q: What breaks when data classification is left to manual processes at scale?
A: Manual classification tends to be slow, inconsistent, and error prone, especially across large or fast-changing data estates.
Q: Why does weak data classification increase risk in a governance program?
A: Weak classification leaves teams unable to distinguish sensitive from routine data, so access policies become broad and inconsistent.
Q: How do security teams know whether DSPM is actually reducing shadow data risk?
A: Look for measurable closure, not just more findings.
Practitioner guidance
- Build a classification-to-action workflow Link discovery findings to a remediation path that can change exposure state automatically, rather than routing every issue into manual review queues.
- Standardise sensitivity definitions across business functions Align how security, legal, HR, marketing, and engineering define sensitive data so the same asset is not governed by conflicting labels.
- Reduce alert-only data operations Measure success by whether a finding leads to policy enforcement, access restriction, or remediation, not by how many issues the platform surfaces.
Bottom line: AI expands the data estate faster than manual review can classify it, which makes automated classification a prerequisite for effective governance.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 4 days ago by NHI Mgmt Group
08/10/2026 5:23 pm
Automated classification has become the entry control for AI data governance: once AI expands the data surface, manual review is no longer the governing layer. The article shows that the problem is not simply volume, but the speed and diversity of data now entering workflows. That shifts the control point upstream to classification, because every downstream decision depends on whether the data was identified correctly in the first place.
A few things that frame the scale:
- Only 13% of organisations feel extremely prepared for the reality of agentic AI despite the majority racing toward autonomous adoption, according to the 2026 Infrastructure Identity Survey.
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
A: Organisations should pair automated discovery with policy controls, metadata enrichment, and lineage tracking. The goal is to turn unstructured content into governed data assets that can be searched, classified, filtered, and used safely by AI systems. This approach reduces manual labeling, improves trust in outputs, and keeps governance attached to the data lifecycle rather than applied after the fact.
👉 Read our full editorial: AI data security needs automated classification before scale