Which of the following is the FIRST step when identifying risk items related to a new IT project?
Conduct a cost-benefit analysis.
Review the IT control environment.
Review the business case.
Conduct a gap analysis.
Submit