Guardians of the Data | Re-Air: Data Governance & Stewardship Balance - Lance Fischer - Guardians of the Data

Re-Air: Data Governance & Stewardship Balance - Lance Fischer - Guardians of the Data - Episode #23

December 30, 2025 / 49:02/E23

Why is visibility the first step in any effective data security strategy?

In this re-air episode, we’re revisiting Ward’s conversation with Lance Fischer, Principal Security Architect at Guidepoint Security, but its insights are more relevant than ever as organizations grapple with data sprawl, AI adoption, and rising regulatory pressure.

With nearly three decades in security, Lance breaks down one of the most misunderstood areas of modern security programs: the difference between data governance and data stewardship, and why confusing the two stalls progress before it even begins.

Takeaways:

Prioritize Visibility First: Before implementing controls or buying tools, ensure you have a clear understanding of what data you have, where it resides, and how it flows within your organization.
Clarify Data Governance vs. Data Stewardship: Define clear roles. Governance sets the policies and rules; stewardship ensures those rules are applied consistently. Foster communication and cooperation between these groups.
Start Small and Scale: Don’t try to solve everything at once. Tackle visibility and controls in manageable pieces. Focus on a subset of data or a specific business unit to build momentum.
Engage Stakeholders Across the Business: Involve HR, Legal, IT, and business units early to ensure policies are practical and have buy-in. Encourage open dialogue rather than top-down mandates.
Understand and Plan for Resource Needs: Assess the people, time, and budget required for data security initiatives before launching. Avoid overburdening staff with too many roles; dedicate resources where possible.
Document Decisions and Processes: Track inputs and outputs from governance meetings and policy changes for audit and continuous improvement.
Anticipate and Manage Tool Sprawl: Regularly review existing tools for effectiveness and eliminate redundant or unused solutions. Don’t assume swapping tools will solve underlying process or visibility issues.

Quote of the Show: