Which initial procedure should an ethical hacker perform after being brought into an organization?

A.
Begin security testing.

B.
Turn over deliverables.

C.
Sign a formal contract with non-disclosure.

D.
Assess what the organization is trying to protect.