Is this a domain controller, a database server with PII, or a developer workstation? - What is the business impact if this system is compromised? - Is the system in production or development?