An organization wants to assess the maturity of its internal control environment. The FIRST step should be to:

A. identify key process owners.
B. validate control process execution.
C. determine if controls are effective.
D. conduct a baseline assessment.