Legacy tools and everyday workarounds are putting your institution’s most sensitive faculty data at risk. Here’s what’s hiding in plain sight—and what to do about it.