3 basic things to know about your data, according to Xerox's CISO