How can you be confident that systems and data are safe, when the complexity involved can't be easily understood? External and internal threats are risks can't be recognised and protected against when there are communication gaps between IT teams, service providers and outsource partners. If infrastructure documentation isn't trusted, comprehensive and maintained, then expect change management, risk control and governance to suffer.