Watch this video on YouTube
As the Information Security Manager of a medical research company, you're setting up an incident management process. What is the foundational step that will guide the entire process?