Which of the following should be the analyst’s FIRST action?

A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization.

Which of the following should be the analyst’s FIRST action?
A . Create a full inventory of information and data assets.
B . Ascertain the impact of an attack on the availability of crucial resources.
C . Determine which security compliance standards should be followed.
D . Perform a full system penetration test to determine the vulnerabilities.

View Answer

Answer: A