Answer:
The first step in performing a security
To identify and evaluate the information assets across your organization.
the answer is B or C