With staff input, post up popular places where data is kept (laptops, email, shared drives...) Using stickies, gather from the staff what data is kept in what locations - duplicating notes when needed Rank data by sensitivity Discuss the impact of one of the devices where data is stored being lost - are there backups? Discuss the impact of a device being exposed / taken by an adversary Identify who has access (physical access, login access, and permissions), and who needs to have access to get the organizations work completed. Page 145 of 240