Which of the following would be MOST helpful to understand the impact of a new technology system on an organization’s current risk profile?

A. Conduct a gap analysis
B. Review existing risk mitigation controls
C. Perform a risk assessment
D. Hire consultants specializing in the new technology