We strongly recommend that your compliance program incorporate all of your systems and data. It can be very easy to overlook even small aspects of your technology footprint that open the door to major compliance vulnerabilities. Concord Compliance engagements include the development of a Graphical Systems Visualization (GSV), which maps all of your business operations to deployed applications and the infrastructure and network elements supporting the applications. The GSV helps both you and Concord Compliance see the interrelated nature of your systems and to make good decisions around which elements need to be covered by your compliance program. That said, even if you decide that some of your systems are not priorities for your compliance program, if any of your systems are breached or compromised, your reputation with your customers can suffer, even if the breach or data loss does not impact customer data.