What is the first step to understand the potential impact to the business about a
Security threat?
1. Have HR update the total number of employees per region.
2. Perform a risk impact analysis.
3. Update all cloud related policies within the organization.
4. Update the list of all assets, including the number of computers.

I don't know this yet.​