Search cmothinks

Type your search query and press Enter
Jimmy Tsang

Simplifying DLP for Security Teams and Buyers, with Jimmy Tsang

Cybersecurity May 12, 2026

About Jimmy Tsang

About MIND

“AI-native” has become one of cybersecurity’s most overused phrases. Buyers are no longer impressed by the terminology alone.

 

Jimmy Tsang, CMO of MIND, discusses what it actually takes to build credibility in a hype-heavy cybersecurity market. He shares how MIND developed its “Stress-Free DLP” positioning, why modern CISOs care more about operational outcomes than AI labels, and how cybersecurity marketing needs to evolve from fear-based storytelling toward clarity, trust, and real-world value delivery.

You’ve moved from brands like P&G and Pfizer to cybersecurity leaders like IBM Security and now MIND. When you step into a high-growth cybersecurity company, what actually changes in your first six months as CMO?

The pace changes first. With well-known brands, you often have the luxury of long planning cycles, mature market understanding, and established brand awareness. In cybersecurity, especially in high-growth segments like data security, the market moves while you’re still refining the narrative, achieving product-market fit, and gaining brand awareness. For cybersecurity leaders, threats evolve weekly, IT environments grow exponentially, and new developments, such as GenAI and Agentic AI, create risks overnight, so they’re under constant pressure to make decisions with incomplete information.

So the first six months become less about launching marketing campaigns and more about establishing clarity and building brand trust. We first need to deeply understand three things: what customers are truly struggling with, where the market has become noisy, and what your company and product can credibly deliver that materially changes customers’ outcomes.

At MIND, my first six months were a flurry of strategic decisions to set our startup on a path of credibility and trust in these increasingly uncertain times and crowded marketplace. While our company was building a data security platform that delivers immediate value to our customers, we needed a new company name and brand that reflects the significance of our solution. Therefore, we chose MIND since our platform is simple, smart, AI-native, and autonomous. And we love how punny “MIND” becomes in our everyday conversations, both internally and externally.

We also developed a brand design system that was meant to last, and is reflected on our website, event booths, collateral, sales decks, swag, and more. Our marketing messaging is mindfully informed, positive, and optimistic rather than the FUD (fear, uncertainty, and doubt) with traditional cybersecurity marketing.

All of these impactful decisions were uncertain at the time, but in hindsight, we feel they were right for the future direction of our cybersecurity startup.

What drew you to MIND, and what felt immediately compelling about its vision of “Stress-Free DLP”? In a hype-heavy category, how do you quickly build credibility around a new narrative?

The co-founders and the culture and platform they were building are what drew me to MIND. Eran Barak, our CEO, is a second-time entrepreneur who co-founded the company with two young and brilliant technologists, Itai Schwartz, our CTO, and Hod Bin Noon, our VP of R&D. What’s unique about our co-founders is the value they placed on bringing on marketing leadership early on.

I joined the company as the first U.S. employee, and over a year before we would officially come out of stealth. Based on their past experiences in cybersecurity as executives and investors, they wanted to develop a brand that lasts and build trust and credibility quickly in a crowded marketplace. Frankly, I came with mental baggage that data security and data loss prevention (DLP) were boring and stagnant segments within cybersecurity since the category has been around for over 30 years, but boy, was I wrong. With hybrid workforces that work from home and/or in the office, sensitive data sprawl is everywhere, posing huge security risks. And now, with the advent and adoption of GenAI tools and Agentic AI, establishing a strong data security foundation to pave the way for rapid AI innovation and productivity success is top of mind for every Chief Information Security Officer (CISO).

There was no “Stress-Free DLP” vision or message when I first joined MIND. It was developed over time as we listened to our customers and numerous CISOs we admired. What stood out to me immediately was that MIND wasn’t trying to add more complexity to an already exhausted category. The company was solving for something cybersecurity leaders genuinely want: real risk reduction with simplicity and automation with a complete, AI-native data security platform.

“Stress-Free DLP” sounds simple on the surface, but it is, in fact, a very tough technical challenge. And we love it when we get incredulous looks, general disbelief, and conversation starters that data loss prevention, which is notoriously difficult to deploy and manage, can truly be stress-free. Traditional DLP has become synonymous with false positives, manual investigations, and brittle policies. Security teams spend enormous amounts of time managing systems that still fail to provide confidence. MIND approached the problem differently by combining AI-driven classification, context-awareness, and automation to reduce operational burden while improving protection. And the best way to build credibility with CISOs is to quickly show (not tell) CISOs our easy demos and conduct fast “Proof-of-Value” trials by deploying and seeing value in their own IT environments. This credibility then feeds into our brand awareness and overall trust we’re working so hard to build with MIND.

MIND positions itself as “AI-native” and autonomous. What does that tangibly change for a security team on the ground?

MIND being simple, AI-native, and autonomous changes the effectiveness and economics of running a strong data security program.

Most security teams today are trying to manage exponentially growing data environments with relatively flat headcounts. Sensitive data lives across SaaS and GenAI apps, endpoints, on-premise file shares, and emails simultaneously, and now is being accessed by AI agents. Traditional DLP tools were never designed for that level of scale or fragmentation.

An AI-native approach changes this by shifting the burden of discovery, classification, detection, remediation, and prevention away from humans and into the MIND platform itself. MIND continuously discovers and classifies sensitive data across environments, analyzes billions of events in real time to detect and investigate risks, and applies context-aware prioritization and policies to remediate and stop data leaks.

Practically speaking, that means much less time discovering and labeling sensitive data, fewer hours spent tuning static rules, fewer noisy DLP alerts, and less manual investigation work. It also means security teams can respond faster to emerging risks, including new GenAI tools and AI agents, every time the landscape changes.

The elements of simple + AI-native + autonomous = Stress-Free DLP for our customers.

A lot of security decisions are driven by “worst-case scenarios,” but buying decisions still need a clear ROI. How do you balance risk-based storytelling with value-based justification?

Security leaders absolutely think in terms of downside risk. They have to, but organizations don’t buy solely based on fear anymore. Especially in today’s budget environment, CISOs need to balance risk reduction, productivity enhancement, and operational efficiency.

The most effective conversations connect those three realities together.

For example, if a security team is drowning in false positive alerts, that isn’t just a productivity problem. It’s also a risk problem because analysts eventually stop trusting the system. Real threats get buried inside noise, which legacy DLP tools often create that exact dynamic.

So when we talk about ROI, we are not framing it as “saving money instead of improving security.” We are showing how operational simplification strengthens security outcomes. Reducing manual review effort by 80% isn’t just a staffing benefit. It improves response quality, accelerates remediation, and helps teams focus on meaningful risk.

The strongest cybersecurity stories today are not fear-based. They are confidence-based. They show organizations how to innovate securely instead of forcing them to choose between speed, productivity, and protection.

Our most recent research report, based on a survey of 124 CISOs and 20 intimate interviews, shows that a strong foundation in data trust (defined as the degree of confidence an organization has that its systems, including AI, use data safely and appropriately) can pave the way for success with organizational AI initiatives.

As AI accelerates both threats and defenses, how do you ensure your messaging keeps pace without becoming reactive or hype-driven?

The key is staying anchored to operational truth rather than market excitement. AI changes fast, but the underlying customer concerns remain remarkably consistent. Security leaders want visibility, confidence in their controls, reduction in manual work, and ultimately, enabling the business safely. Those fundamentals do not change every quarter.

What changes is the environment around them. GenAI tools introduce new data exposure vectors. Agentic AI introduces new identity and access considerations. Sensitive data proliferates faster than traditional governance models can keep up.

Our marketing team isn’t chasing every headline. We help customers interpret what materially matters and what actions they should take next.

We stay grounded in use cases, workflows, and measurable operational outcomes, especially from our current customer experiences. When DeepSeek emerged, for example, MIND customers already had coverage through our context-aware enforcement model without requiring entirely new point solutions. That’s a much more valuable story than simply claiming to be “AI-ready.”

You’ve worked at the intersection of product, brand, and revenue. What are some hard-earned lessons from aligning these functions in a deeply technical market?

One lesson is that simple beats complex. Cybersecurity vendors sometimes assume that more technical detail creates more credibility. In reality, buyers need to understand quickly why something matters to their business – what value are we delivering to achieve desirable outcomes? In our storytelling, there’s a place for the Why, What, and How in the buyers’ journey for data and AI security, but it almost always starts with the Why.

Another lesson is that the brand cannot sit above the product. Especially in cybersecurity, brand is the operational experience customers actually have. If your product reduces complexity like with our Stress-Free DLP, then your messaging should feel clear and focused. If your platform promises automation, your onboarding experience should reflect that simplicity.

Alignment also requires shared accountability. Marketing should not be generating narratives independently from product reality, and product teams should not underestimate the importance of storytelling. The best cybersecurity companies create a feedback loop where customer pain, product direction, and market communication continuously inform each other.

At MIND, we spend a lot of time listening directly to our customers' operational challenges because those realities shape both the roadmap and the messaging.

Finally, what’s a contrarian take you have about AI in cybersecurity marketing?

I think the market overestimates how much buyers care about AI itself.

Security leaders are not buying “AI.” They are buying clarity, confidence, and operational gains. AI only matters if it produces outcomes that humans could not realistically achieve at the same scale or speed.

Right now, too much cybersecurity marketing treats AI as the story instead of the mechanism. Buyers are fatigued by that. Most CISOs have already heard hundreds of claims about autonomous platforms and intelligent workflows.

The companies that will ultimately win are the ones that make AI feel invisible. The technology should quietly remove friction, reduce noise, prioritize risk, and simplify operations. Customers should experience better outcomes, not more AI terminology.

In many ways, the future of AI marketing in cybersecurity may actually become less about talking about AI at all, and more about continuing to focus on the value that an AI-native platform can deliver beyond legacy tools and old paradigms.

Cybersecurity
DLP
Data Security
Cybersecurity Marketing
AI
CISO
Security Leadership