Establish and maintain a data inventory, based on the enterprise�s data management process. Inventory sensitive data, at a minimum. Review and update inventory annually, at a minimum, with a priority on sensitive data.