According to the speaker, effective data protection requires knowing where your data is located, understanding who has access to it, controlling that access, and monitoring the movement of data itself. This should be supported by insider threat capabilities to track employee activities.
