Q34
Single choice
Which of the following should be determined FIRST when a new security vulnerability is made public?