The organization can use flowcharts to map the workflow and pinpoint the processes where information is most vulnerable. Employees will do this as they develop the Statement of Applicability in Annex A. Create one tool to handle these requirements in one place.