As the traditional network perimeter erodes and governments store more data in more places, governments are shifting their cybersecurity approach. When data was stored mostly in their IT infrastructure, governments focused on protecting their networks. Now, with cloud adoption growing, governments are shifting their thinking to a more data-centric approach: protecting their data no matter where it resides. This paper gives an overview of three cybersecurity principles governments are adopting to protect data effectively while reducing the load on network and security teams.