Provides a visual and documented status quo of:
- What data the organisation has
- What of it is of a high consequence to the organisation
- Where that data of high consequence is,
- including where it is stored and and transmitted in-house and throughout its interconnected ecosystem
- How that data of high consequence is protected
- Who has access to data of high consequence and what they can do with it
- What policies, training and monitoring is in place for those users’ activities and behaviours