Module 3 challenge — Question 3

A cloud security team has been assigned to map security controls to their organization’s cloud environment. What step should the team take first?