A company has determined that it needs to significantly improve its cybersecurity posture. Which of the following actions should it take first?

• A. Assess the existing operational capabilities within the organization's cybersecurity program.
• B. Plan and implement a threat intelligence program.
• C. Conduct a vulnerability assessment using current threat intelligence and warnings.
• D. Conduct an inventory of all devices and nodes on the internal networks and determine their current patch levels.

Answer: (A)