Set rules, track field risks, and log each breach or fix.