Which of the following is the FIRST step of a penetration test plan?

A.
Analyzing a network diagram of the target network

B.
Notifying the company’s customers

C.
Obtaining the approval of the company’s management

D.
Scheduling the penetration test during a period of least impact