Go to the business question Where do we use sensitive data? and identify data that have the same usage by different applications. For example, find data that is created (C=Create) by many different applications. Consider whether this redundancy is necessary or whether applications can be consolidated and rationalized.