“Identify a data security champion and start adding stringent access control policies in your organization to bring back control.”