Best Practices for Trigger-Based Policy Reviews to Enhance Compliance