In an information-centric model, which step is performed first when “securing people”?

A.
Controlling access to data or resources

B.
Establishing and assuring identity

C.
Establishing a network firewall

D.
Determining the risk of data loss