You must know exactly where your company data is located, how it is being secured and if it's being backed up.
Most common locations for company data:
1) Cloud services - Email and SaaS applications
2) Desktop and laptop computers - Local files and documents
3) USBs, portable storage and memory cards - Restrict or ban their use


