Problem
I. Explain the compliance of associated servers, routers, access-control components, data storage, internal and external data communication, data backup, email servers, point of sales, thin clients, and so forth.
II. Identify related systems and assets, regulatory requirements, and overall risk approach.
III. Demonstrate each IT task to the next as aligned to regulations/compliance. For example, start with the user logging in and then go through each step and validate it.
IV. Evaluate the implications of the system connectivity to the internet.
V. Evaluate if the systems have a data classification and how data is protected in transit, processing, and at rest.