Lock documents. Lock data stores. Lock cabinets. Lock screens. Lock doors. Lock phones.
Change passwords regularly. Keys.
Consider DualFactor authentication. Biometrics.
Data should either be locked away or clearly published. Don’t destroy data if you have the master record unless this is your policy for that type of document.