“ If you know where all the data is and that it ’ s secured to the right level , you ’ re in a good place ”