In phase C, we continue to see the interaction between the SOC and IT operations. They have to determine with the other business owners what is considered lower impact applications and systems.  This allows the scanning function to expand what their scope is so that the information they provide to the reporting function of VM provides value on the identified items:

Another important item to note is that while we have built around increasing the scope of the identified applications and domains in the preceding diagrams, we should have also refined the definition of high, medium, and low impact applications and systems.