What is the first step in performing a risk assessment?

A.
Evaluating the effectiveness and appropriateness of the organization’s current riskmanagement activities.

B.
Establishing a security team to perform forensic examinations of previous known
attacks.

C.
Terminating any employee believed to be responsible for compromising security.

D.
Identifying critical services and network vulnerabilities and determining the potential
impact of their compromise or failure.

E.
Investigating reports of data theft or security breaches and assigning responsibility.