Data Flow Diagram

Phase 1: Scope Definition

Define the boundaries of the data flow analysis.

• System or subsystem under analysis: ___
• Data classification levels in scope: ___
• Regulatory requirements (GDPR, HIPAA, SOC2, etc.): ___
• Diagram level: Context (L0) / System (L1) / Process (L2)

Phase 2: Entity Inventory

Catalog all entities that interact with data.

External Entities (sources and sinks):