A company is planning to conduct a vulnerability scan on its starting the scan, what should the security administrator consider regarding data sensitivity levels?