Once you understand the security boundary and the IT assets that exist, you are much better prepared to develop a strong security strategy to protect the systems.