A major data leakage incident at an enterprise has resulted in a mandate to strengthen and enforce current data governance practices. Which of the following should be done FIRST to achieve this objective?

A. Review data logs.
B. Assess data security controls.
C. Verify data owners.
D. Analyze data quality.