Which of the following should be done FIRST when developing an initial set of risk scenarios for an organization?
Refer to industry standard scenarios.
Use a top-down approach.
Consider relevant business activities.
Use a bottom-up approach.
Submit