"Given the reality of limited time and resources, best practices provide a valuable, low risk, default starting point."