It can be extremely frustrating for a compliance team to realize that additional systems are in-scope. It means additional and unexpected security...