Assess your whole roster. Know your exposure before an auditor does.