A business case indicates an enterprise would reduce costs by implementing a bring your own device (BYOD) program allowing employees to use personal devices for e-mail. Which of the following should be the FIRST governance action?

A. Assess the enterprise architecture (EA).
B. Update the BYOD policy.
C. Update the network infrastructure.
D. Assess the BYOD risk.