What is the first step of a gap analysis?

What is the first step of a gap analysis?

A.
Scan the firewall.

B.
Review antivirus settings.

C.
Review the security policy.

D.
Review intrusion-detection software settings.

Explanation: