Q2 Single choice Mark for later What is the first step suggested before implementing any single CIS Control? A Develop an effectiveness test B Perform a gap analysis C Perform a vulnerability scan D Develop a roll-out schedule Correct answer