When performing a risk assessment of a new service to support a core business process, which of the following should be done FIRST to ensure continuity of opera...