Technical governance
Classification & location: Map types, sources, storage locations and purposes. Flows & parties: Identify systems, teams, vendors and cross-border collaboration points. Access Control: Roles, least privilege, authentication and appropriate audit records. Lifecycle: Transfer, backup, retention, deletion and incident processes.
