Protecting confidential data at the enterprise level is mandated by law, and it makes good business sense, but mismanagement of technology can add to the risk, says Nathan Ouellette.