Watch this video on YouTube
What should an information security officer do first upon learning about a new regulation for safeguarding information processed by a specific type of transaction?