Map every asset, actor, permission and data flow involved

Step 1 of 7 · Next: Set limits and a second approver for every change that moves value or access