MAP Function

Identify risks, categorize systems, and document context — before you try to measure anything.