Building a defense in depth strategy for sensitive data