Avoiding Operational Chaos While Defending A Credit Union With Data Classification - John Wallace

About this episode

John Wallace discusses the importance of data classification in protecting credit unions and the role of AI in managing data workloads.

In this episode of the Security Repo Podcast, IT Audit & Data Privacy Leader John Wallace joins Dwayne to talk about the importance of data classification, the cornerstone of data protection. They cover high levels of data tagging, using AI to help with the workload, and how, at the end of the day, governance really comes down to humans agreeing on definitions. John also talks a little about credit unions vs banks and shares his published poetry: "They Say Some Clouds Are Silver Lined, which is available on Amazon: https://www.amazon.com/They-Some-Clouds-Silver-Lined/dp/1664274774https://www.linkedin.com/in/johnfwallace3rd/John F. Wallace - CISA, CRISC, CDPSE, is a Senior IT Auditor II for Security Service Federal Credit Union, one of the largest credit unions in the United States. Mr. Wallace’s prior experience includes consulting in IT Risk Management and executive oversight of Risk Management and IT Audit functions in Fortune 500 and Fortune 100 financial services companies. Early in his career, he served in the U.S. Treasury as a Federal Bank Examiner. In that role he led Financial, Operational and IT Examinations of federally regulated financial institutions and the…

People in this episode

Host: Dwayne McDaniel

Guest: John Wallace

Topics covered

• data classification
• data protection
• credit unions
• AI in data management
• governance

Keywords

• data classification
• credit unions
• data protection
• AI
• governance
• IT audit
• risk management

Mentioned in this episode

Organizations: Security Service Federal Credit Union, Amazon, U.S. Treasury

Books & works: They Say Some Clouds Are Silver Lined

More episodes of The Security Repo

• AI, Automation, & Humans' Role In Security: A View From Rsac 2026 With Jeff Man and Dwayne McDaniel · April 1, 2026 · 43 min
• OIDC And IAP In Production: Scaling Startup Security For Deepfake Defense - Talia Smiley · March 18, 2026 · 20 min
• The PCI Ultimatum -Thrift Store OSINT, and "Lost Media" with Dwayne Edwards and Mike Radigan · March 17, 2026 · 22 min
• From Annual Checkbox To Continuous SDLC Testing: Operationalizing AI Pentests - Andy Dennis of XBow · March 13, 2026 · 20 min
• Why Compliance Isn’t Governance & How GovOps Rebuilds Trust Boundaries – Mike Schwartz · March 11, 2026 · 38 min
• Building AI Solutions with a Security-First Mindset: Frameworks and Lessons with Henry Odibi · February 11, 2026 · 19 min