Technical defences alone won’t stop misuse, error or rogue insiders. From careless clicks to malicious insiders, employees remain the most likely source of data compromise.

We unpack how everyday access rights and behaviours, including misuse of AI systems, become high impact breaches/risk incidents, and what “appropriate” security measures really mean in practice. Expect clear guidance on what good governance means, risk assessment, when and how to notify data regulators (around the world) and data subjects, and how to close incidents well to reduce repeat risk.

This episode is part of a mini-series covering the topics discussed at The Work Agenda 2026 conference, we hope you enjoy listening. Remember to share with colleagues and if you do have any comments, we would love to hear them.