Q77
Single choice
When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the: