ABC Company has decided to move their primary data center from an on-premises facility to a cloud-based infrastructure. The move is intended to improve scalability and reduce costs. However, the CISO is concerned about the impact of the move on the organization's security posture. Which of the following actions should the CISO take to assess the impact of the move on security?