Data security was once a simple concept, especially for federal agencies. Employees used one device to access data through a single network. The goal for technology providers was to secure this infrastructure at all costs. If the infrastructure remained secure, so did the data.
Those days are long gone in government.