A Prioritized Risk Approach to Data Security