It was around the year 2010 when a customer of mine implemented data governance software and policies around the data within their production database. They put in the effort to ensure that their production data and systems were protected from prying eyes of a hacker and the treacherous fingers of an unscrupulous software programmer. However, they left their development and test database environments relatively alone with little to no data controls in place. Worse yet, they extracted production data to be used in development. Then a breach occurred in their development environment (you know, the one with production data). The breach resulted in millions of records containing credit card information and customer information being stolen. The result was a multi-million dollar fine.