If your policies don’t keep up with your work models, your company’s sensitive information could be at risk.