Which of the following should the IS auditor do FIRST to ensure data transfer integrity for Internet of Things (IoT) devices?

A. Verify access control lists to the database where collected data is stored.
B. Confirm that acceptable limits of data bandwidth are defined for each device.
C. Ensure that message queue telemetry transport (MQTT) is used.
D. Determine how devices are connected to the local network.