The process of security monitoring involves comparing performance or configuration information with a stated baseline. The basic process of security monitoring includes four steps. Which of the following should be performed first?

Question $12$ options:

Define security goals.

Describe secure behavior as a baseline.

Sample performance information and compare with the baseline.

Report anomalies.