When developing a risk management program, what is the FIRST activity to be performed? A、Threat assessment B、Classification of data C、Inventory of assets D、Criticality analysis