"identifying data sources in use (including PDAs, laptop computers, home offices, thumb drives, mobile phones, and any other electronic device capable of retaining information); determining the operating systems, applications, and databases the company uses and has previously used, dates of use, and access to discontinued software; reviewing and amending records management policies." . . . . . . .