This is a dedicated watch page for a single video.
You are an information system auditor of HDA Inc. You are auditing the company's IT systems and conducting an IT risk assessment. In this context, what is the initial or primary step that should be taken when conducting an IT risk assessment?