To develop a robust data security program, the FIRST course of action should be to:

A. implement monitoring controls
B. implement data loss prevention controls
C. perform an inventory of assets
D. interview IT senior management