What is the FIRST step in developing a security test and its evaluation?

What is the FIRST step in developing a security test and its evaluation?

A.
Determine testing methods

B.
Develop testing procedures

C.
Identify all applicable security requirements

D.
Identify people, processes, and products not in compliance