Data security: Are you doing enough?