Companies grant data access just in case someone needs it, but these decisions shape an organization's risk profile far more ...