Data security is about challenging internal processes