Your documented processes should include periodic review of your potential source lists (e.g., annually) to see if they need to be updated with newly acquired enterprise tools, new kinds of employee devices, or emerging technologies being
adopted by your custodians (e.g., WhatsApp or Slack).