Developing an understanding of the types of data that an organization holds and how to protect it from unauthorized access.