A newly hired chief information security officer $($CISO$)$ is implementing the National Institute of Standards and Technology $($NIST$)$ Cybersecurity Framework. What first function would help the CISO better develop the company's security policies, such as acceptable use policy $($AUP$),$ and build out recommendations for security controls?

Group of answer choices

Detect

Identify

Protect

Respond