CompTIA Security+ (SY0-701) SY0-701 — Question 362

A new security regulation was announced that will take effect in the coming year. A company must comply with it to remain in business. Which of the following activities should the company perform next?