To test the security of your organization's main data systems.

To assess different methods for collecting data by your organization.

To know where your organization’s data is located and how it is used.

To evaluate whether your vendors have the required policies and procedures in place.