Systems and techniques for determining data assessment scores indicative of potential security vulnerabilities and enacting measures to protect sensitive information by controlling permissions and access to sensitive information and systems are provided herein. A data assessment model receives inputs of user access data, user role type, baseline permissions for the user role type, and produces a score. The score is useful for identifying potential security vulnerabilities and enacting proactive security measures to lock down potential vulnerabilities by blocking or changing permissions to reduce risk scores.