How can agencies ensure their data is protected when it's not on their network?