Notifications
Clear all
Topic starter
20/08/2026 6:11 pm
TL;DR: Unstructured data remains the least governed and fastest-growing enterprise data class, with the source article arguing that 80% of organisational data is effectively invisible to current security tools and volume is rising by up to 65% annually, according to Sentra. The security problem is no longer discovery alone: petabyte-scale, SaaS-spread data breaks first-generation DSPM models and forces teams to treat access, classification, and remediation as one control plane.
NHIMG editorial — based on content published by Sentra: unstructured data security and the DSPM blind spot in cloud-first environments
By the numbers:
- 80% of your organization’s data is essentially invisible to your current security tools.
- Unstructured data is growing 55-65% per year, and by 2025 the world will store more than 180 zettabytes of it.
Questions worth separating out
Q: What breaks when unstructured data cannot be discovered reliably?
A: When unstructured data cannot be discovered reliably, classification and remediation become partial controls rather than enforceable controls.
Q: Why do unstructured files create more governance risk than structured databases?
A: Unstructured files often lack stable metadata, consistent schemas, and predictable ownership, so the security model depends heavily on access context and manual controls.
Q: How can teams tell whether DSPM is actually improving security?
A: Teams should look for fewer unknown sensitive-data locations, faster classification of new repositories, and a tighter link between exposure findings and entitlement changes.
Practitioner guidance
- Inventory unstructured-data repositories by access path Build a cross-platform inventory for email, SaaS collaboration, object stores, code repositories, and legacy file shares, then map each repository to the identities and groups that can reach it.
- Replace static keyword rules with context-aware classification Use classification methods that can evaluate natural language, code, images, and mixed file types, then validate outputs against high-risk repositories before relying on them for remediation decisions.
- Automate permission fixes for exposed content Connect discovery findings to bounded remediation playbooks that can revoke public links, narrow sharing scopes, and remove stale access without waiting for manual ticket queues.
What's in the full article
Sentra's full article covers the operational detail this post intentionally leaves for the source:
- Agentless discovery coverage across AWS, Azure, Google Workspace, Microsoft 365, Dropbox, and legacy file shares
- Petabyte-scale classification and risk scoring approach for unstructured repositories
- Automated remediation playbooks for permission changes, restricted sharing, and policy enforcement
- Deployment example showing exposed sensitive files, remediation coverage across 10 million documents, and reduced manual investigation time
👉 Read Sentra's analysis of unstructured data security and DSPM blind spots →
Unstructured data security: what DSPM teams are missing now?
Explore further
20/08/2026 6:46 pm
Unstructured data is becoming an identity governance problem, not just a storage problem. The article is right to frame visibility as the primary failure, because access policy cannot be enforced against assets security teams cannot enumerate. In cloud and SaaS estates, file-level exposure is often driven by user, group, and guest permissions rather than by the repository itself. That makes this a governance issue for IAM, data security, and privacy teams together, not a narrow DSPM feature debate. Practitioner conclusion: treat unstructured-data discovery as an access-governance prerequisite.
A question worth separating out:
Q: Should organisations automate remediation for sensitive unstructured data?
A: Yes, but only with guardrails. Automation should be used to revoke unsafe sharing, narrow access, and create audit trails for high-confidence findings, while ambiguous cases still route to human review. The point is to compress the time between exposure and containment without creating uncontrolled changes to legitimate business workflows.
👉 Read our full editorial: Unstructured data security is the biggest DSPM blind spot in 2026
