Which initial procedure should an ethical hacker perform after being brought into an organization?

Which initial procedure should an ethical hacker perform after being brought into an organization?

A.
Begin security testing.

B.
Turn over deliverables.

C.
Sign a formal contract with non-disclosure.

D.
Assess what the organization is trying to protect.