> Simply audit the events where data is accessed.... That would be a sane approach. Indeed, if there's "data" to guard, then one just properly secures it and a

> Simply audit the events where data is accessed.... That would be a sane approach. Indeed, if there's "data" to guard, then one just properly secures it and allocates access to it. If "theft" happens, then there's access log. If data is ubiquitous that everyone should be able to access it, then it's hardly data to "guard". In any case, it makes more sense to monitor access to data, not just a sea of keystrokes... unless the concern lies with something other than the data.