Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment of the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches?

A. evaluating controls and filling in security gaps

B. recovering existing assets from damage

C. predicting future risks and devising strategies to prevent them

D. understanding which information assets need protection

Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment o the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches? A. evaluating controls and filling in security gaps B. recovering existing assets from damage C. predicting future risks and devising strategies to prevent them D. understanding which information assets need protection Lora Jones is a security expert hired by a Manhattan-based law firm to perform a formal risk assessment o the firm's data assets. Which of the following steps should she undertake first in order to assess the firm's readiness to face any potential security breaches? A. evaluating controls and filling in security gaps B. recovering existing assets from damage C. predicting future risks and devising strategies to prevent them D. understanding which information assets need protection