South Africa's data sovereignty isn't only a government problem. The frameworks and products already exist; what's missing is the ability to operate them. Why every SA business leader should secure their own data first, and why waiting for the next breach is the wrong decision.