What criteria should you consider when evaluating data security platforms and vendors?

What criteria should you consider when evaluating data security platforms and vendors?