What is the first step suggested before implementing any single CIS Control?
Develop an effectiveness test
Perform a gap analysis
Perform a vulnerability scan
Develop a roll-out schedule
Submit