Q32
Single choice
Which of the following should be done FIRST when a data collection process is deemed to be a high-level risk?