Do we know where our data is and how it is protected (data lifecycle management)?