How do you begin to bring your risk down? Here's how to put the proper processes and procedures in place to best protect your company's data.