How to approach data security effectively stymies many organizations today. There is confusion over what capabilities and controls are needed and where to implement them. This report highlights the range of data-centric security controls, examples of emerging innovations in data security technologies, and an approach to identifying the appropriate controls and control points.