The identification phase is concerned with identifying relevant custodians and mapping their relevant data sources.
Typically this phase involves the creation of a data map (a spreadsheet containing lists of custodians and their potential data sources of interest). Inputs to this data map can be questionnaires issued to a third party to gain a detailed understanding of their unique IT environment, or face-to-face discussions with IT staff.