If the house is data, who holds the key? If your house is data, who holds the key? Three questions every CISSP must ask.