Part of the challenge is being able to accurately and quickly monitor how secure your data is. In my experiences, most organizations generally keep their sensitive data secure but don’t regularly monitor or audit the data, due to the costs and time commitment they need for analyzing access patterns and ensuring there have been no intrusions.