How would you design and implement security controls that protect against unauthorized access and data breaches at Ancestry Marketing?