At Redapt, we understand the challenges our clients face when implementing AI while maintaining robust data security. In our latest Redapt Replay discussion, our cybersecurity leader and Senior Director, Andrew Spottswood sat down with our partner, Normalyze's security leader Joe Gregory, to address these critical challenges head-on.

Our guest speaker, Normalyze's Joe Gregory, echoed what we've been hearing from our clients: "AI is at the top of everyone's mind. These projects are happening. Businesses are expected to use them to stay competitive." As a trusted technology partner, we know this competitive necessity comes with significant security implications that need careful consideration.

During the discussion, Gregory shared a compelling case study that resonated with our enterprise clients. "There was a large organization running a POC of Copilot, and initial feedback was great. The business leaders loved it," he explained. "But within one week, they had an employee discover they were being laid off just by asking some general questions about themselves." This real-world scenario exemplifies why Redapt emphasizes thorough data classification and security measures in our AI implementation strategies.

In our work with clients, we often uncover hidden opportunities within data security initiatives. As Gregory noted, "Often it's the surprises. We were just testing a QA Environment to do our due diligence and we realized there's customer data here." These discoveries frequently lead to what he called "quick wins" - identifying redundant or dormant data that "hasn't been accessed in years." Through our partnership with Normalyze, we help organizations turn these findings into immediate cost optimization opportunities.

When it comes to implementation, we believe in making security robust yet manageable. "Onboarding DSPM is actually very straightforward," Gregory explained. "It's all agentless and read-only. We're able to do discovery across cloud platforms, SaaS applications, even your on-prem databases, file servers, etc." This aligns perfectly with Redapt's approach to providing comprehensive visibility across our clients' entire technology stack.

One aspect that particularly resonates with our enterprise clients is the ability to quantify security risks in business terms. As Gregory highlighted, "We're assigning a monetary value to your data... If we are aware that you have 1000 Social Security numbers or PCI records, we can calculate a street value for that data considering fines and ransoms." This approach helps our clients make informed decisions about their security investments.

The discussion also covered practical integration capabilities that we know are crucial for our clients. "We may want to hook into a SIM and notify a SOC when there's abnormal behavior... You may want to push misconfigurations into a cloud OPS team to get Terraform updated," Gregory explained. These integration possibilities showcase how modern security tools can enhance rather than hinder operational efficiency.

At Redapt, we're committed to helping organizations navigate the complex landscape of AI implementation while maintaining robust security postures. Through our partnership with Normalyze and other industry leaders, we provide our clients with the tools and expertise needed to drive innovation safely and efficiently.