Sensitive information must always be protected – whether it is being accessed, handled, processed, stored or transmitted. Any technology deliverable with sensitive enterprise data should have the appropriate level of encryption built into the system to ensure the information is protected. The current process is not documented, inconsistent, manual intensive, and does not provide traceability and visibility from a regulatory compliance perspective.