Define the system, assess risks, conduct impact assessments, and establish governance foundations.
What Are We Building and Why?
"Which Laws Apply and What Risk Level Are We?"
"Who Does This Affect and How?"