Is the data currently being encrypted? Is it double-encrypted? What level of encryption is being applied? Where does decryption take place? Are access policies consistent? This mind ... by the major ...