There are huge piles of data on file systems, file shares and collaboration systems like SharePoint that are all but unknown to the security world. The way to tackle these daunting tasks is to break them down into more manageable pieces. DAG has been a to-do item for IT security for years, but it has been pushed aside in favor of other goals. There are strategies that can make DAG more approachable, including setting up rogue SharePoint sites and running Open Shares under control.”]
Source: https://securityintelligence.com/3-steps-get-data-access-governance-off-to-do-list/