Best Practices for Assessing Data for Risk and Compliance