1. Do you have processes in place to manage data access and permissions?

    2. How readily can authorized users access and use data across departments?