Which of the following is the MOST important prerequisite to performing an information security assessment?
A . Reviewing the business impact analysis (BIA)
B . Assessing threats and vulnerabilities
C . Determining risk tolerance
D . Classifying assets
Answer: D