Looking at it from my perspective as a security consultant, I think this is an appropriate ranking. Data is the ultimate component of any given environment that needs to be secured. The only issue I see is that many organizations still don’t know what data is where. Nor do they fully understand how it’s currently at risk. These unknowns must be answered if data protection efforts are going to be effective and successful.