Which two tasks are conducted as part of the "assess current security management procedures" activity? (Choose two)