In this episode we start to explore what features about data we made need to make security decisions, and how we collate statistics to inform this. We also look at why statistics alone may not tell the full story about our data, and why correlation may not always be reliable either.