Secure Document Management: Governance-First Approach