In this episode of the Cybersecurity Awesomeness Podcast, host Chris Steffen is joined by his Enterprise Management Associates colleague and lead data analytics analyst Herb Blecher, for a deep dive into data integrity, semantics, and AI-driven governance.
Steffen and Blecher explore how modern organizations are leveraging AI to aggregate and report data for Governance, Risk, and Compliance (GRC) audits. However, they highlight a critical distinction: the underlying data is rarely flawed; rather, the AI model training, semantic definitions, and data aggregation often introduce dangerous inaccuracies—ranging from misinterpreted definitions (like the multifaceted meanings of "revenue") to the accidental exposure of sensitive PII. Blecher emphasizes that achieving reliable AI outcomes requires returning to fundamentals such as strict semantics, data lineage, and contextual guardrails. Ultimately, the duo agrees that while AI is a powerful force multiplier for operations and security orchestration, organizations must maintain rigorous validation and treat AI outputs with active skepticism to avoid costly fiduciary and operational missteps.