I’m taking a data security posture management (DSPM) certificate course, and I’m having a real hard time with the the notion that the top maturity level is basically “add #AI for continuous management!”
The data destruction piece literally says, “At Level 5, organizations fully eliminate manual intervention in data destruction, relying on AI-powered automation to refine policies, enforce compliance, and manage security risks dynamically.”
Yeah, that sounds nice, but then I look at the stories like how #claude AI deleted the #pocketOS database, or how #OpenClaw deleted the mailbox of of the Director of Safety and Alignment at #Meta.
We need humans in the loop. And we need to ask ourselves what benefits we’re getting by introducing non-deterministic LLMs and AIs into #compliance processes that should be precise.







