The FIRST step in building a firewall is to

A.
assign the roles and responsibilities of the firewall administrators.

B.
define the intended audience who will read the firewall policy.

C.
identify mechanisms to encourage compliance with the policy.

D.
perform a risk analysis to identify issues to be addressed.